8] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.126048] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1102.126904] ? wait_for_completion_io+0x270/0x270 [ 1102.127736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.128637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.129514] do_syscall_64+0x33/0x40 [ 1102.130155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.131025] RIP: 0033:0x7feb2b3bab19 [ 1102.131654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.134774] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1102.136070] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1102.137270] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1102.138471] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1102.139677] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1102.140889] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:56:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 01:56:42 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x6, 0x0, 0x9, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:56:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:56:42 executing program 2: fork() (fail_nth: 8) 01:56:42 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 5) [ 1102.349139] FAULT_INJECTION: forcing a failure. [ 1102.349139] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.350865] CPU: 1 PID: 11496 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1102.351848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.353006] Call Trace: [ 1102.353384] dump_stack+0x107/0x167 [ 1102.353898] should_fail.cold+0x5/0xa [ 1102.354431] ? create_object.isra.0+0x3a/0xa30 [ 1102.355068] should_failslab+0x5/0x20 [ 1102.355598] kmem_cache_alloc+0x5b/0x310 [ 1102.356185] create_object.isra.0+0x3a/0xa30 [ 1102.356800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1102.357511] __kmalloc+0x16e/0x390 [ 1102.358013] io_uring_setup+0x33c/0x2980 [ 1102.358584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.359267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1102.359977] ? wait_for_completion_io+0x270/0x270 [ 1102.360669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.361392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.362109] do_syscall_64+0x33/0x40 [ 1102.362624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.363328] RIP: 0033:0x7feb2b3bab19 [ 1102.363847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.366377] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1102.367427] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1102.368427] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 01:56:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x16) tkill(r1, 0x12) ptrace$setopts(0x4200, r1, 0x8, 0x100029) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) [ 1102.369557] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1102.370611] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1102.371591] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1102.403416] FAULT_INJECTION: forcing a failure. [ 1102.403416] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.406103] CPU: 0 PID: 11498 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1102.407538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.409254] Call Trace: [ 1102.409824] dump_stack+0x107/0x167 [ 1102.410588] should_fail.cold+0x5/0xa [ 1102.411382] ? create_object.isra.0+0x3a/0xa30 [ 1102.412340] should_failslab+0x5/0x20 [ 1102.413130] kmem_cache_alloc+0x5b/0x310 [ 1102.413980] create_object.isra.0+0x3a/0xa30 [ 1102.414888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1102.415959] kmem_cache_alloc+0x159/0x310 [ 1102.416830] prepare_creds+0x25/0x5e0 [ 1102.417619] copy_creds+0x72/0x580 [ 1102.418356] copy_process+0xfef/0x78b0 [ 1102.419168] ? __lock_acquire+0xbb1/0x5b00 [ 1102.420074] ? lock_downgrade+0x6d0/0x6d0 [ 1102.420946] ? __cleanup_sighand+0xb0/0xb0 [ 1102.421818] ? perf_trace_lock+0xac/0x490 [ 1102.422682] ? __lockdep_reset_lock+0x180/0x180 [ 1102.423647] ? find_held_lock+0x2c/0x110 [ 1102.424504] kernel_clone+0xe7/0x980 [ 1102.425287] ? lock_downgrade+0x6d0/0x6d0 [ 1102.426140] ? find_held_lock+0x2c/0x110 [ 1102.426980] ? create_io_thread+0xf0/0xf0 [ 1102.427860] ? ksys_write+0x12d/0x260 [ 1102.428656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.429662] __do_sys_fork+0x8a/0xc0 [ 1102.430437] ? kernel_thread+0xf0/0xf0 [ 1102.431267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.432374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.433447] ? trace_hardirqs_on+0x5b/0x180 [ 1102.434370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.435428] do_syscall_64+0x33/0x40 [ 1102.436203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.437258] RIP: 0033:0x7f3592ea1b19 [ 1102.438031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.441781] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1102.443331] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1102.444807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1102.446264] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.447712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.449180] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:57:03 executing program 0: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:57:03 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 6) 01:57:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:03 executing program 2: fork() (fail_nth: 9) 01:57:03 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x6, 0x0, 0x9, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:57:03 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:57:03 executing program 4: fork() (fail_nth: 12) 01:57:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e05aa9a540"}]}]}, 0x34}}, 0x0) [ 1123.349264] FAULT_INJECTION: forcing a failure. [ 1123.349264] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.350948] CPU: 0 PID: 11516 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1123.351741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.352697] Call Trace: [ 1123.353009] dump_stack+0x107/0x167 [ 1123.353427] should_fail.cold+0x5/0xa [ 1123.353867] ? alloc_fdtable+0x9e/0x2c0 [ 1123.354318] should_failslab+0x5/0x20 [ 1123.354753] kmem_cache_alloc_trace+0x55/0x320 [ 1123.355273] ? rwlock_bug.part.0+0x90/0x90 [ 1123.355754] alloc_fdtable+0x9e/0x2c0 [ 1123.356196] dup_fd+0x92d/0xe40 [ 1123.356580] copy_process+0x197c/0x78b0 [ 1123.357041] ? __lock_acquire+0xbb1/0x5b00 [ 1123.357534] ? __cleanup_sighand+0xb0/0xb0 [ 1123.358014] ? perf_trace_lock+0xac/0x490 [ 1123.358488] ? __lockdep_reset_lock+0x180/0x180 [ 1123.359020] ? find_held_lock+0x2c/0x110 [ 1123.359485] kernel_clone+0xe7/0x980 [ 1123.359908] ? lock_downgrade+0x6d0/0x6d0 [ 1123.360384] ? find_held_lock+0x2c/0x110 [ 1123.360844] ? create_io_thread+0xf0/0xf0 [ 1123.361315] ? ksys_write+0x12d/0x260 [ 1123.361752] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1123.362305] __do_sys_fork+0x8a/0xc0 [ 1123.362724] ? kernel_thread+0xf0/0xf0 [ 1123.363179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.363776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.364381] ? trace_hardirqs_on+0x5b/0x180 [ 1123.364872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.365399] FAULT_INJECTION: forcing a failure. [ 1123.365399] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.365454] do_syscall_64+0x33/0x40 [ 1123.365477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.369394] RIP: 0033:0x7febfa601b19 [ 1123.369817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.371902] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1123.372777] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1123.373584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.374391] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.375201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.376005] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1123.376853] CPU: 1 PID: 11517 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1123.378658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.380819] Call Trace: [ 1123.381513] dump_stack+0x107/0x167 [ 1123.382469] should_fail.cold+0x5/0xa [ 1123.383465] ? __delayacct_tsk_init+0x1b/0x80 [ 1123.384641] should_failslab+0x5/0x20 [ 1123.385507] kmem_cache_alloc+0x5b/0x310 [ 1123.386383] ? prepare_creds+0x466/0x5e0 [ 1123.387268] __delayacct_tsk_init+0x1b/0x80 [ 1123.388213] copy_process+0x3399/0x78b0 [ 1123.389083] ? __lock_acquire+0xbb1/0x5b00 [ 1123.390011] ? lock_downgrade+0x6d0/0x6d0 [ 1123.390914] ? __cleanup_sighand+0xb0/0xb0 [ 1123.391823] ? perf_trace_lock+0xac/0x490 [ 1123.392733] ? __lockdep_reset_lock+0x180/0x180 [ 1123.393749] ? find_held_lock+0x2c/0x110 [ 1123.394635] kernel_clone+0xe7/0x980 [ 1123.395438] ? lock_downgrade+0x6d0/0x6d0 [ 1123.396338] ? find_held_lock+0x2c/0x110 [ 1123.397215] ? create_io_thread+0xf0/0xf0 [ 1123.398111] ? ksys_write+0x12d/0x260 [ 1123.398943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1123.399992] __do_sys_fork+0x8a/0xc0 [ 1123.400802] ? kernel_thread+0xf0/0xf0 [ 1123.401663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.402795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.403903] ? trace_hardirqs_on+0x5b/0x180 [ 1123.404845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.405953] do_syscall_64+0x33/0x40 [ 1123.406758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.407863] RIP: 0033:0x7f3592ea1b19 [ 1123.408676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.412655] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1123.414303] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1123.415849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.417388] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.418921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.420463] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1123.425077] FAULT_INJECTION: forcing a failure. [ 1123.425077] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.426558] CPU: 0 PID: 11553 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1123.427346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.428291] Call Trace: [ 1123.428598] dump_stack+0x107/0x167 [ 1123.429015] should_fail.cold+0x5/0xa [ 1123.429450] ? io_uring_setup+0x40b/0x2980 [ 1123.429935] should_failslab+0x5/0x20 [ 1123.430369] kmem_cache_alloc_trace+0x55/0x320 [ 1123.430887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.431473] io_uring_setup+0x40b/0x2980 [ 1123.431937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1123.432500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1123.433074] ? wait_for_completion_io+0x270/0x270 [ 1123.433633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.434233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.434820] do_syscall_64+0x33/0x40 [ 1123.435244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.435824] RIP: 0033:0x7feb2b3bab19 [ 1123.436250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.438327] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1123.439188] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1123.439991] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1123.440801] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1123.441603] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1123.442408] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:57:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}, 0x28}}, 0x0) 01:57:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:03 executing program 4: fork() (fail_nth: 13) [ 1123.515467] FAULT_INJECTION: forcing a failure. [ 1123.515467] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.517027] CPU: 0 PID: 11633 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1123.517840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.518791] Call Trace: [ 1123.519103] dump_stack+0x107/0x167 [ 1123.519525] should_fail.cold+0x5/0xa [ 1123.519974] ? dup_fd+0x89/0xe40 [ 1123.520372] should_failslab+0x5/0x20 [ 1123.520810] kmem_cache_alloc+0x5b/0x310 [ 1123.521285] dup_fd+0x89/0xe40 [ 1123.521655] ? audit_filter_inodes+0x40/0x40 [ 1123.522161] ? security_task_alloc+0xe6/0x260 [ 1123.522687] copy_process+0x197c/0x78b0 [ 1123.523150] ? __lock_acquire+0xbb1/0x5b00 [ 1123.523653] ? __cleanup_sighand+0xb0/0xb0 [ 1123.524146] ? perf_trace_lock+0xac/0x490 [ 1123.524624] ? __lockdep_reset_lock+0x180/0x180 [ 1123.525179] ? find_held_lock+0x2c/0x110 [ 1123.525648] kernel_clone+0xe7/0x980 [ 1123.526075] ? lock_downgrade+0x6d0/0x6d0 [ 1123.526553] ? find_held_lock+0x2c/0x110 [ 1123.527019] ? create_io_thread+0xf0/0xf0 [ 1123.527496] ? ksys_write+0x12d/0x260 [ 1123.527941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1123.528505] __do_sys_fork+0x8a/0xc0 [ 1123.528930] ? kernel_thread+0xf0/0xf0 [ 1123.529384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.530003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.530605] ? trace_hardirqs_on+0x5b/0x180 [ 1123.531108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.531698] do_syscall_64+0x33/0x40 [ 1123.532142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.532738] RIP: 0033:0x7febfa601b19 [ 1123.533173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.535278] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1123.536169] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1123.536986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.537804] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.538633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.539465] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:57:03 executing program 0: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:57:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}, 0x28}}, 0x0) 01:57:03 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 7) [ 1123.625637] FAULT_INJECTION: forcing a failure. [ 1123.625637] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.627187] CPU: 0 PID: 11639 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1123.627998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.628965] Call Trace: [ 1123.629277] dump_stack+0x107/0x167 [ 1123.629702] should_fail.cold+0x5/0xa [ 1123.630150] ? create_object.isra.0+0x3a/0xa30 [ 1123.630681] should_failslab+0x5/0x20 [ 1123.631119] kmem_cache_alloc+0x5b/0x310 [ 1123.631601] create_object.isra.0+0x3a/0xa30 [ 1123.632114] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.632711] kmem_cache_alloc_trace+0x151/0x320 [ 1123.633260] io_uring_setup+0x40b/0x2980 [ 1123.633736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1123.634292] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1123.634876] ? wait_for_completion_io+0x270/0x270 [ 1123.635450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.636069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.636658] do_syscall_64+0x33/0x40 [ 1123.637088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.637674] RIP: 0033:0x7feb2b3bab19 [ 1123.638105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.640202] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1123.641072] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1123.641880] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1123.642691] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1123.643508] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1123.644317] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:57:21 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x6, 0x0, 0x9, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:57:21 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:57:21 executing program 2: fork() (fail_nth: 10) [ 1141.050589] FAULT_INJECTION: forcing a failure. [ 1141.050589] name failslab, interval 1, probability 0, space 0, times 0 01:57:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}, 0x28}}, 0x0) 01:57:21 executing program 4: fork() (fail_nth: 14) 01:57:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:21 executing program 0: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:57:21 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 8) [ 1141.052979] CPU: 1 PID: 11757 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1141.054659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.056339] Call Trace: [ 1141.056895] dump_stack+0x107/0x167 [ 1141.057629] should_fail.cold+0x5/0xa [ 1141.058400] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1141.059453] should_failslab+0x5/0x20 [ 1141.060228] __kmalloc_node+0x76/0x420 [ 1141.061015] ? lock_downgrade+0x6d0/0x6d0 [ 1141.061860] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1141.062881] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1141.063880] ? trace_hardirqs_on+0x5b/0x180 [ 1141.064764] kmem_cache_alloc_trace+0x169/0x320 [ 1141.065701] alloc_fdtable+0x9e/0x2c0 [ 1141.066453] dup_fd+0x92d/0xe40 [ 1141.067133] copy_process+0x197c/0x78b0 [ 1141.067927] ? __lock_acquire+0xbb1/0x5b00 [ 1141.068802] ? __cleanup_sighand+0xb0/0xb0 [ 1141.069640] ? perf_trace_lock+0xac/0x490 [ 1141.070469] ? __lockdep_reset_lock+0x180/0x180 [ 1141.071415] ? find_held_lock+0x2c/0x110 [ 1141.072238] kernel_clone+0xe7/0x980 [ 1141.072980] ? lock_downgrade+0x6d0/0x6d0 [ 1141.073799] ? find_held_lock+0x2c/0x110 [ 1141.074157] FAULT_INJECTION: forcing a failure. [ 1141.074157] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.074607] ? create_io_thread+0xf0/0xf0 [ 1141.074627] ? ksys_write+0x12d/0x260 [ 1141.074656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.079479] __do_sys_fork+0x8a/0xc0 [ 1141.080231] ? kernel_thread+0xf0/0xf0 [ 1141.081024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.082073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.083085] ? trace_hardirqs_on+0x5b/0x180 [ 1141.083938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.084971] do_syscall_64+0x33/0x40 [ 1141.085721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.086723] RIP: 0033:0x7febfa601b19 [ 1141.087456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.091066] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1141.092552] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1141.093956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.095358] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.096772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.098167] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1141.099587] CPU: 0 PID: 11761 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1141.101173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.103053] Call Trace: [ 1141.103659] dump_stack+0x107/0x167 [ 1141.104495] should_fail.cold+0x5/0xa [ 1141.105369] ? dup_fd+0x89/0xe40 [ 1141.106130] should_failslab+0x5/0x20 [ 1141.106990] kmem_cache_alloc+0x5b/0x310 [ 1141.107928] dup_fd+0x89/0xe40 [ 1141.108679] ? audit_filter_inodes+0x40/0x40 [ 1141.109426] FAULT_INJECTION: forcing a failure. [ 1141.109426] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.109677] ? security_task_alloc+0xe6/0x260 [ 1141.112832] copy_process+0x197c/0x78b0 [ 1141.113750] ? __lock_acquire+0xbb1/0x5b00 [ 1141.114737] ? __cleanup_sighand+0xb0/0xb0 [ 1141.115677] ? perf_trace_lock+0xac/0x490 [ 1141.116639] ? __lockdep_reset_lock+0x180/0x180 [ 1141.117698] ? find_held_lock+0x2c/0x110 [ 1141.118633] kernel_clone+0xe7/0x980 [ 1141.119476] ? lock_downgrade+0x6d0/0x6d0 [ 1141.120420] ? find_held_lock+0x2c/0x110 [ 1141.121343] ? create_io_thread+0xf0/0xf0 [ 1141.122273] ? ksys_write+0x12d/0x260 [ 1141.123159] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.124263] __do_sys_fork+0x8a/0xc0 [ 1141.125106] ? kernel_thread+0xf0/0xf0 [ 1141.126002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.127180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.128347] ? trace_hardirqs_on+0x5b/0x180 [ 1141.129324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.130487] do_syscall_64+0x33/0x40 [ 1141.131339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.132497] RIP: 0033:0x7f3592ea1b19 [ 1141.133322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.137482] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1141.139073] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1141.140569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.142073] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.143582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.145088] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1141.146639] CPU: 1 PID: 11763 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1141.147979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.149579] Call Trace: [ 1141.150081] dump_stack+0x107/0x167 [ 1141.150781] should_fail.cold+0x5/0xa [ 1141.151503] ? create_object.isra.0+0x3a/0xa30 [ 1141.152390] should_failslab+0x5/0x20 [ 1141.153125] kmem_cache_alloc+0x5b/0x310 [ 1141.153909] create_object.isra.0+0x3a/0xa30 [ 1141.154778] kmemleak_alloc_percpu+0xa0/0x100 [ 1141.155636] pcpu_alloc+0x4e2/0x1240 [ 1141.156382] ? io_tctx_exit_cb+0xf0/0xf0 [ 1141.157175] percpu_ref_init+0x31/0x3d0 [ 1141.157945] io_uring_setup+0x47a/0x2980 [ 1141.158734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.159648] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1141.160629] ? wait_for_completion_io+0x270/0x270 [ 1141.161579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.162585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.163579] do_syscall_64+0x33/0x40 [ 1141.164302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.165276] RIP: 0033:0x7feb2b3bab19 [ 1141.165984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.169515] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1141.170957] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1141.172305] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1141.173650] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1141.175000] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1141.176343] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:57:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e05aa9a540"}]}]}, 0x2c}}, 0x0) 01:57:21 executing program 2: fork() (fail_nth: 11) 01:57:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1141.330723] FAULT_INJECTION: forcing a failure. [ 1141.330723] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.332801] CPU: 1 PID: 11868 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1141.333997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.335417] Call Trace: [ 1141.335882] dump_stack+0x107/0x167 [ 1141.336508] should_fail.cold+0x5/0xa [ 1141.337178] ? create_object.isra.0+0x3a/0xa30 [ 1141.337957] should_failslab+0x5/0x20 [ 1141.338623] kmem_cache_alloc+0x5b/0x310 [ 1141.339330] create_object.isra.0+0x3a/0xa30 [ 1141.340082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.340955] kmem_cache_alloc+0x159/0x310 [ 1141.341688] dup_fd+0x89/0xe40 [ 1141.342246] ? audit_filter_inodes+0x40/0x40 [ 1141.342994] ? security_task_alloc+0xe6/0x260 [ 1141.343761] copy_process+0x197c/0x78b0 [ 1141.344456] ? __lock_acquire+0xbb1/0x5b00 [ 1141.345186] ? __cleanup_sighand+0xb0/0xb0 [ 1141.345891] ? perf_trace_lock+0xac/0x490 [ 1141.346572] ? __lockdep_reset_lock+0x180/0x180 [ 1141.347362] ? find_held_lock+0x2c/0x110 [ 1141.348028] kernel_clone+0xe7/0x980 [ 1141.348660] ? lock_downgrade+0x6d0/0x6d0 [ 1141.349370] ? find_held_lock+0x2c/0x110 [ 1141.350062] ? create_io_thread+0xf0/0xf0 [ 1141.350767] ? ksys_write+0x12d/0x260 [ 1141.351410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.352249] __do_sys_fork+0x8a/0xc0 [ 1141.352860] ? kernel_thread+0xf0/0xf0 [ 1141.353549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.354449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.355320] ? trace_hardirqs_on+0x5b/0x180 [ 1141.356049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.356916] do_syscall_64+0x33/0x40 [ 1141.357526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.358386] RIP: 0033:0x7f3592ea1b19 [ 1141.359015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.362114] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1141.363380] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1141.364579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.365788] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.367000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.368185] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:57:21 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:57:21 executing program 4: fork() (fail_nth: 15) [ 1141.451755] FAULT_INJECTION: forcing a failure. [ 1141.451755] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.453688] CPU: 1 PID: 11877 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1141.454780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.456073] Call Trace: [ 1141.456503] dump_stack+0x107/0x167 [ 1141.457059] should_fail.cold+0x5/0xa [ 1141.457645] ? create_object.isra.0+0x3a/0xa30 [ 1141.458339] should_failslab+0x5/0x20 [ 1141.458919] kmem_cache_alloc+0x5b/0x310 [ 1141.459550] create_object.isra.0+0x3a/0xa30 [ 1141.460223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.461005] __kmalloc_node+0x1ae/0x420 [ 1141.461626] kvmalloc_node+0x119/0x170 [ 1141.462245] alloc_fdtable+0xed/0x2c0 [ 1141.462833] dup_fd+0x92d/0xe40 [ 1141.463348] copy_process+0x197c/0x78b0 [ 1141.463983] ? __lock_acquire+0xbb1/0x5b00 [ 1141.464666] ? __cleanup_sighand+0xb0/0xb0 [ 1141.465306] ? perf_trace_lock+0xac/0x490 [ 1141.465939] ? __lockdep_reset_lock+0x180/0x180 [ 1141.466666] ? find_held_lock+0x2c/0x110 [ 1141.467291] kernel_clone+0xe7/0x980 [ 1141.467863] ? lock_downgrade+0x6d0/0x6d0 [ 1141.468524] ? find_held_lock+0x2c/0x110 [ 1141.469151] ? create_io_thread+0xf0/0xf0 [ 1141.469790] ? ksys_write+0x12d/0x260 [ 1141.470389] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.471124] __do_sys_fork+0x8a/0xc0 [ 1141.471689] ? kernel_thread+0xf0/0xf0 [ 1141.472322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.473114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.474052] ? trace_hardirqs_on+0x5b/0x180 [ 1141.474699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.475468] do_syscall_64+0x33/0x40 [ 1141.476040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.476821] RIP: 0033:0x7febfa601b19 [ 1141.477383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.480156] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1141.481302] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1141.482589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.483663] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.484735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.485804] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:57:40 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 9) 01:57:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:40 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x6, 0x0, 0x9, 0x3}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:57:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:57:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:40 executing program 2: fork() (fail_nth: 12) 01:57:40 executing program 4: fork() (fail_nth: 16) 01:57:40 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1160.728671] FAULT_INJECTION: forcing a failure. [ 1160.728671] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.730753] CPU: 0 PID: 11997 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1160.731831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.733130] Call Trace: [ 1160.733548] dump_stack+0x107/0x167 [ 1160.734118] should_fail.cold+0x5/0xa [ 1160.734715] ? create_object.isra.0+0x3a/0xa30 [ 1160.735427] should_failslab+0x5/0x20 [ 1160.736016] kmem_cache_alloc+0x5b/0x310 [ 1160.736662] create_object.isra.0+0x3a/0xa30 [ 1160.737356] kmemleak_alloc_percpu+0xa0/0x100 [ 1160.737609] FAULT_INJECTION: forcing a failure. [ 1160.737609] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.738053] pcpu_alloc+0x4e2/0x1240 [ 1160.738084] ? io_tctx_exit_cb+0xf0/0xf0 [ 1160.738110] percpu_ref_init+0x31/0x3d0 [ 1160.742572] io_uring_setup+0x47a/0x2980 [ 1160.743201] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.743951] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1160.744742] ? wait_for_completion_io+0x270/0x270 [ 1160.745508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.746316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.747113] do_syscall_64+0x33/0x40 [ 1160.747696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.748500] RIP: 0033:0x7feb2b3bab19 [ 1160.749069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.751862] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1160.753026] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1160.754111] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1160.755196] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1160.756288] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1160.757379] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1160.758501] CPU: 1 PID: 12000 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1160.759944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.761759] Call Trace: [ 1160.762458] dump_stack+0x107/0x167 [ 1160.763429] should_fail.cold+0x5/0xa [ 1160.764412] ? kvmalloc_node+0x119/0x170 [ 1160.765478] should_failslab+0x5/0x20 [ 1160.766467] __kmalloc_node+0x76/0x420 [ 1160.767476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.768783] kvmalloc_node+0x119/0x170 [ 1160.769797] alloc_fdtable+0x159/0x2c0 [ 1160.770814] dup_fd+0x92d/0xe40 [ 1160.771696] copy_process+0x197c/0x78b0 [ 1160.772745] ? __lock_acquire+0xbb1/0x5b00 [ 1160.773902] ? __cleanup_sighand+0xb0/0xb0 [ 1160.774811] ? perf_trace_lock+0xac/0x490 [ 1160.775829] ? __lockdep_reset_lock+0x180/0x180 [ 1160.776955] ? find_held_lock+0x2c/0x110 [ 1160.777848] kernel_clone+0xe7/0x980 [ 1160.778618] ? lock_downgrade+0x6d0/0x6d0 [ 1160.779475] ? find_held_lock+0x2c/0x110 [ 1160.780300] ? create_io_thread+0xf0/0xf0 [ 1160.781149] ? ksys_write+0x12d/0x260 [ 1160.781926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.782926] __do_sys_fork+0x8a/0xc0 [ 1160.783688] ? kernel_thread+0xf0/0xf0 [ 1160.784504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.785571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.786611] ? trace_hardirqs_on+0x5b/0x180 [ 1160.787493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.788548] do_syscall_64+0x33/0x40 [ 1160.789307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.790345] RIP: 0033:0x7febfa601b19 [ 1160.791097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.794832] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1160.796374] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1160.797821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.799256] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.800701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.802135] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1160.813931] FAULT_INJECTION: forcing a failure. [ 1160.813931] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.816289] CPU: 1 PID: 11999 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1160.817696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.819376] Call Trace: [ 1160.819911] dump_stack+0x107/0x167 [ 1160.820664] should_fail.cold+0x5/0xa [ 1160.821445] ? alloc_fdtable+0x9e/0x2c0 [ 1160.822250] should_failslab+0x5/0x20 [ 1160.823020] kmem_cache_alloc_trace+0x55/0x320 [ 1160.823950] ? rwlock_bug.part.0+0x90/0x90 [ 1160.824827] alloc_fdtable+0x9e/0x2c0 [ 1160.825602] dup_fd+0x92d/0xe40 [ 1160.826294] copy_process+0x197c/0x78b0 [ 1160.827120] ? __lock_acquire+0xbb1/0x5b00 [ 1160.828001] ? __cleanup_sighand+0xb0/0xb0 [ 1160.828869] ? perf_trace_lock+0xac/0x490 [ 1160.829723] ? __lockdep_reset_lock+0x180/0x180 [ 1160.830684] ? find_held_lock+0x2c/0x110 [ 1160.831516] kernel_clone+0xe7/0x980 [ 1160.832280] ? lock_downgrade+0x6d0/0x6d0 [ 1160.833133] ? find_held_lock+0x2c/0x110 [ 1160.833971] ? create_io_thread+0xf0/0xf0 [ 1160.834815] ? ksys_write+0x12d/0x260 [ 1160.835606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.836618] __do_sys_fork+0x8a/0xc0 [ 1160.837374] ? kernel_thread+0xf0/0xf0 [ 1160.838188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.839272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.840314] ? trace_hardirqs_on+0x5b/0x180 [ 1160.841200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.842259] do_syscall_64+0x33/0x40 [ 1160.843032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.844075] RIP: 0033:0x7f3592ea1b19 [ 1160.844852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.848637] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1160.850194] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1160.851633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.853100] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.854559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.856012] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1160.893457] cgroup: fork rejected by pids controller in /syz5 01:57:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:41 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 10) 01:57:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1161.009479] FAULT_INJECTION: forcing a failure. [ 1161.009479] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.011152] CPU: 0 PID: 12112 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1161.012025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.013073] Call Trace: [ 1161.013415] dump_stack+0x107/0x167 [ 1161.013876] should_fail.cold+0x5/0xa [ 1161.014366] ? percpu_ref_init+0xd8/0x3d0 [ 1161.014888] should_failslab+0x5/0x20 [ 1161.015369] kmem_cache_alloc_trace+0x55/0x320 [ 1161.015950] ? io_tctx_exit_cb+0xf0/0xf0 [ 1161.016469] percpu_ref_init+0xd8/0x3d0 [ 1161.016973] io_uring_setup+0x47a/0x2980 01:57:41 executing program 2: fork() (fail_nth: 13) [ 1161.017487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.018228] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1161.018862] ? wait_for_completion_io+0x270/0x270 [ 1161.019490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.020158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.020815] do_syscall_64+0x33/0x40 [ 1161.021285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.021931] RIP: 0033:0x7feb2b3bab19 [ 1161.022397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.024696] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1161.025646] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1161.026530] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1161.027414] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1161.028298] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1161.029187] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1161.100332] FAULT_INJECTION: forcing a failure. [ 1161.100332] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.102865] CPU: 1 PID: 12117 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1161.104271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.105953] Call Trace: [ 1161.106490] dump_stack+0x107/0x167 [ 1161.107233] should_fail.cold+0x5/0xa [ 1161.108007] ? create_object.isra.0+0x3a/0xa30 [ 1161.108949] should_failslab+0x5/0x20 [ 1161.109726] kmem_cache_alloc+0x5b/0x310 [ 1161.110562] create_object.isra.0+0x3a/0xa30 [ 1161.111476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1161.112515] kmem_cache_alloc_trace+0x151/0x320 [ 1161.113502] ? rwlock_bug.part.0+0x90/0x90 [ 1161.114369] alloc_fdtable+0x9e/0x2c0 [ 1161.115170] dup_fd+0x92d/0xe40 [ 1161.115878] copy_process+0x197c/0x78b0 [ 1161.116724] ? __lock_acquire+0xbb1/0x5b00 [ 1161.117628] ? __cleanup_sighand+0xb0/0xb0 [ 1161.118509] ? perf_trace_lock+0xac/0x490 [ 1161.119379] ? __lockdep_reset_lock+0x180/0x180 [ 1161.120361] ? find_held_lock+0x2c/0x110 [ 1161.121216] kernel_clone+0xe7/0x980 [ 1161.121997] ? lock_downgrade+0x6d0/0x6d0 [ 1161.122860] ? find_held_lock+0x2c/0x110 [ 1161.123709] ? create_io_thread+0xf0/0xf0 [ 1161.124578] ? ksys_write+0x12d/0x260 [ 1161.125382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.126398] __do_sys_fork+0x8a/0xc0 [ 1161.127177] ? kernel_thread+0xf0/0xf0 [ 1161.128007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.129108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.130179] ? trace_hardirqs_on+0x5b/0x180 [ 1161.131084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.132156] do_syscall_64+0x33/0x40 [ 1161.132942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.134010] RIP: 0033:0x7f3592ea1b19 [ 1161.134785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.138632] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1161.140226] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1161.141716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.143208] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.144703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.146205] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:57:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:41 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 11) 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:57:41 executing program 4: fork() (fail_nth: 17) 01:57:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1161.223640] FAULT_INJECTION: forcing a failure. [ 1161.223640] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.225171] CPU: 0 PID: 12192 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1161.225923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.226865] Call Trace: [ 1161.227173] dump_stack+0x107/0x167 [ 1161.227591] should_fail.cold+0x5/0xa [ 1161.228028] ? create_object.isra.0+0x3a/0xa30 [ 1161.228566] should_failslab+0x5/0x20 [ 1161.229008] kmem_cache_alloc+0x5b/0x310 [ 1161.229479] create_object.isra.0+0x3a/0xa30 [ 1161.229987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1161.230576] kmem_cache_alloc_trace+0x151/0x320 [ 1161.231114] ? io_tctx_exit_cb+0xf0/0xf0 [ 1161.231594] percpu_ref_init+0xd8/0x3d0 [ 1161.232026] io_uring_setup+0x47a/0x2980 [ 1161.232498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.233064] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1161.233644] ? wait_for_completion_io+0x270/0x270 [ 1161.234207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.234767] FAULT_INJECTION: forcing a failure. [ 1161.234767] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.236041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.236056] do_syscall_64+0x33/0x40 [ 1161.236067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.236083] RIP: 0033:0x7feb2b3bab19 [ 1161.238633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.240740] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1161.241601] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1161.242417] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1161.243238] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1161.244058] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1161.244870] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1161.245739] CPU: 1 PID: 12193 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1161.247221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.249009] Call Trace: [ 1161.249573] dump_stack+0x107/0x167 [ 1161.250344] should_fail.cold+0x5/0xa [ 1161.251150] ? create_object.isra.0+0x3a/0xa30 [ 1161.252116] should_failslab+0x5/0x20 [ 1161.252928] kmem_cache_alloc+0x5b/0x310 [ 1161.253829] create_object.isra.0+0x3a/0xa30 [ 1161.254786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1161.255896] __kmalloc_node+0x1ae/0x420 [ 1161.256790] kvmalloc_node+0x119/0x170 [ 1161.257644] alloc_fdtable+0x159/0x2c0 [ 1161.258498] dup_fd+0x92d/0xe40 [ 1161.259217] copy_process+0x197c/0x78b0 [ 1161.260069] ? __lock_acquire+0xbb1/0x5b00 [ 1161.261002] ? __cleanup_sighand+0xb0/0xb0 [ 1161.261901] ? perf_trace_lock+0xac/0x490 [ 1161.262784] ? __lockdep_reset_lock+0x180/0x180 [ 1161.263779] ? find_held_lock+0x2c/0x110 [ 1161.264650] kernel_clone+0xe7/0x980 [ 1161.265439] ? lock_downgrade+0x6d0/0x6d0 [ 1161.266313] ? find_held_lock+0x2c/0x110 [ 1161.267170] ? create_io_thread+0xf0/0xf0 [ 1161.268047] ? ksys_write+0x12d/0x260 [ 1161.268874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.269903] __do_sys_fork+0x8a/0xc0 [ 1161.270690] ? kernel_thread+0xf0/0xf0 [ 1161.271532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.272657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.273911] ? trace_hardirqs_on+0x5b/0x180 [ 1161.275078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.276480] do_syscall_64+0x33/0x40 [ 1161.277486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.278847] RIP: 0033:0x7febfa601b19 [ 1161.279846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.284734] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1161.286768] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1161.288578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.290155] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.291860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.293388] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:57:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:57:57 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 12) 01:57:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:57:57 executing program 4: fork() (fail_nth: 18) 01:57:57 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1177.777302] FAULT_INJECTION: forcing a failure. [ 1177.777302] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.779952] CPU: 0 PID: 12243 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1177.781416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.783138] Call Trace: [ 1177.783692] dump_stack+0x107/0x167 [ 1177.784466] should_fail.cold+0x5/0xa [ 1177.785294] ? copy_fs_struct+0x45/0x340 [ 1177.786139] should_failslab+0x5/0x20 [ 1177.786939] kmem_cache_alloc+0x5b/0x310 [ 1177.787799] copy_fs_struct+0x45/0x340 [ 1177.788626] copy_process+0x34b5/0x78b0 [ 1177.789469] ? __lock_acquire+0xbb1/0x5b00 [ 1177.790388] ? __cleanup_sighand+0xb0/0xb0 [ 1177.791266] ? perf_trace_lock+0xac/0x490 [ 1177.792150] ? __lockdep_reset_lock+0x180/0x180 [ 1177.793147] ? find_held_lock+0x2c/0x110 01:57:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) fork() 01:57:57 executing program 2: fork() (fail_nth: 14) 01:57:57 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x6, 0x0, 0x9, 0x3}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1177.794014] kernel_clone+0xe7/0x980 [ 1177.794918] ? lock_downgrade+0x6d0/0x6d0 [ 1177.795789] ? find_held_lock+0x2c/0x110 [ 1177.796658] ? create_io_thread+0xf0/0xf0 [ 1177.797529] ? ksys_write+0x12d/0x260 [ 1177.798341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1177.799364] __do_sys_fork+0x8a/0xc0 [ 1177.800152] ? kernel_thread+0xf0/0xf0 [ 1177.800993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.802102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.803177] ? trace_hardirqs_on+0x5b/0x180 [ 1177.804091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.805341] do_syscall_64+0x33/0x40 [ 1177.806135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.807209] RIP: 0033:0x7febfa601b19 [ 1177.807990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.811848] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1177.813457] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1177.814952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1177.816448] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1177.817948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1177.819433] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1177.823609] FAULT_INJECTION: forcing a failure. [ 1177.823609] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.826279] CPU: 0 PID: 12249 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1177.827734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.829493] Call Trace: [ 1177.830050] dump_stack+0x107/0x167 [ 1177.830827] should_fail.cold+0x5/0xa [ 1177.831627] ? kvmalloc_node+0x119/0x170 [ 1177.832485] should_failslab+0x5/0x20 [ 1177.833294] __kmalloc_node+0x76/0x420 [ 1177.834125] kvmalloc_node+0x119/0x170 [ 1177.834945] alloc_fdtable+0xed/0x2c0 [ 1177.835769] dup_fd+0x92d/0xe40 [ 1177.836490] copy_process+0x197c/0x78b0 [ 1177.837344] ? __lock_acquire+0xbb1/0x5b00 [ 1177.838265] ? __cleanup_sighand+0xb0/0xb0 [ 1177.839150] ? perf_trace_lock+0xac/0x490 [ 1177.840041] ? __lockdep_reset_lock+0x180/0x180 [ 1177.841038] ? find_held_lock+0x2c/0x110 [ 1177.841903] kernel_clone+0xe7/0x980 [ 1177.842685] ? lock_downgrade+0x6d0/0x6d0 [ 1177.843559] ? find_held_lock+0x2c/0x110 [ 1177.844416] ? create_io_thread+0xf0/0xf0 [ 1177.845295] ? ksys_write+0x12d/0x260 [ 1177.846100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1177.847126] __do_sys_fork+0x8a/0xc0 [ 1177.847907] ? kernel_thread+0xf0/0xf0 [ 1177.848773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.849882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.850969] ? trace_hardirqs_on+0x5b/0x180 [ 1177.851888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.852988] do_syscall_64+0x33/0x40 [ 1177.853778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.854849] RIP: 0033:0x7f3592ea1b19 [ 1177.855636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.859483] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1177.861091] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1177.862587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1177.863812] FAULT_INJECTION: forcing a failure. [ 1177.863812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1177.864088] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1177.864108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1177.868623] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1177.870147] CPU: 1 PID: 12250 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1177.871058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.872179] Call Trace: [ 1177.872526] dump_stack+0x107/0x167 [ 1177.873029] should_fail.cold+0x5/0xa [ 1177.873538] __alloc_pages_nodemask+0x182/0x600 [ 1177.874143] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1177.874928] ? cap_capable+0x1cd/0x230 [ 1177.875435] alloc_pages_current+0x187/0x280 [ 1177.876012] __get_free_pages+0xc/0xa0 [ 1177.876514] io_uring_setup+0xe27/0x2980 [ 1177.877069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1177.877731] ? wait_for_completion_io+0x270/0x270 [ 1177.878370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.879055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.879728] do_syscall_64+0x33/0x40 [ 1177.880208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.880875] RIP: 0033:0x7feb2b3bab19 [ 1177.881354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.883709] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1177.884689] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1177.885610] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1177.886532] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1177.887449] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1177.888363] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:57:57 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:57:58 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:57:58 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 13) 01:57:58 executing program 4: fork() (fail_nth: 19) [ 1178.025542] FAULT_INJECTION: forcing a failure. [ 1178.025542] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.027012] CPU: 1 PID: 12383 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1178.027846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.028865] Call Trace: [ 1178.029189] dump_stack+0x107/0x167 [ 1178.029631] should_fail.cold+0x5/0xa [ 1178.030091] ? kvmalloc_node+0x119/0x170 [ 1178.030581] should_failslab+0x5/0x20 [ 1178.031046] __kmalloc_node+0x76/0x420 [ 1178.031513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.032123] kvmalloc_node+0x119/0x170 [ 1178.032596] alloc_fdtable+0x159/0x2c0 [ 1178.033078] dup_fd+0x92d/0xe40 [ 1178.033487] copy_process+0x197c/0x78b0 [ 1178.033973] ? __lock_acquire+0xbb1/0x5b00 [ 1178.034498] ? __cleanup_sighand+0xb0/0xb0 [ 1178.035004] ? perf_trace_lock+0xac/0x490 [ 1178.035508] ? __lockdep_reset_lock+0x180/0x180 [ 1178.036072] ? find_held_lock+0x2c/0x110 [ 1178.036563] kernel_clone+0xe7/0x980 [ 1178.037036] ? lock_downgrade+0x6d0/0x6d0 [ 1178.037537] ? find_held_lock+0x2c/0x110 [ 1178.038024] ? create_io_thread+0xf0/0xf0 [ 1178.038524] ? ksys_write+0x12d/0x260 [ 1178.038990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.039575] __do_sys_fork+0x8a/0xc0 [ 1178.040023] ? kernel_thread+0xf0/0xf0 [ 1178.040501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1178.041145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.041766] ? trace_hardirqs_on+0x5b/0x180 [ 1178.042289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.042904] do_syscall_64+0x33/0x40 [ 1178.043349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1178.043960] RIP: 0033:0x7febfa601b19 [ 1178.044403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.046593] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1178.047500] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1178.048350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.049206] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.050058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.050904] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1178.120209] FAULT_INJECTION: forcing a failure. [ 1178.120209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.121712] CPU: 1 PID: 12455 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1178.122525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.123490] Call Trace: [ 1178.123801] dump_stack+0x107/0x167 [ 1178.124228] should_fail.cold+0x5/0xa [ 1178.124687] __alloc_pages_nodemask+0x182/0x600 [ 1178.125232] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1178.125948] ? cap_capable+0x1cd/0x230 [ 1178.126414] alloc_pages_current+0x187/0x280 [ 1178.126935] __get_free_pages+0xc/0xa0 [ 1178.127396] io_uring_setup+0xf9a/0x2980 [ 1178.127881] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1178.128478] ? wait_for_completion_io+0x270/0x270 [ 1178.129074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1178.129693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.130307] do_syscall_64+0x33/0x40 [ 1178.130750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1178.131354] RIP: 0033:0x7feb2b3bab19 [ 1178.131793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.133986] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1178.134878] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1178.135724] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1178.136561] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1178.137408] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1178.138258] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:58:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 14) 01:58:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) fork() 01:58:16 executing program 2: fork() (fail_nth: 15) 01:58:16 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:16 executing program 4: fork() (fail_nth: 20) 01:58:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1196.286616] FAULT_INJECTION: forcing a failure. [ 1196.286616] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.289754] CPU: 1 PID: 12479 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1196.291563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.293757] Call Trace: [ 1196.294480] dump_stack+0x107/0x167 [ 1196.295468] should_fail.cold+0x5/0xa [ 1196.296661] ? create_object.isra.0+0x3a/0xa30 [ 1196.298068] should_failslab+0x5/0x20 [ 1196.299261] kmem_cache_alloc+0x5b/0x310 [ 1196.300531] create_object.isra.0+0x3a/0xa30 [ 1196.301746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1196.303215] __kmalloc_node+0x1ae/0x420 [ 1196.304436] kvmalloc_node+0x119/0x170 [ 1196.305702] alloc_fdtable+0xed/0x2c0 [ 1196.306900] dup_fd+0x92d/0xe40 [ 1196.307835] copy_process+0x197c/0x78b0 [ 1196.308889] ? __lock_acquire+0xbb1/0x5b00 [ 1196.310090] ? __cleanup_sighand+0xb0/0xb0 [ 1196.311214] ? perf_trace_lock+0xac/0x490 [ 1196.312331] ? __lockdep_reset_lock+0x180/0x180 [ 1196.313578] ? find_held_lock+0x2c/0x110 [ 1196.314669] kernel_clone+0xe7/0x980 [ 1196.315565] FAULT_INJECTION: forcing a failure. [ 1196.315565] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.315674] ? lock_downgrade+0x6d0/0x6d0 [ 1196.318890] ? find_held_lock+0x2c/0x110 [ 1196.319747] ? create_io_thread+0xf0/0xf0 [ 1196.320625] ? ksys_write+0x12d/0x260 [ 1196.321445] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.322479] __do_sys_fork+0x8a/0xc0 [ 1196.323273] ? kernel_thread+0xf0/0xf0 [ 1196.324125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.325266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.326354] ? trace_hardirqs_on+0x5b/0x180 [ 1196.327288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.328397] do_syscall_64+0x33/0x40 [ 1196.329215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.330310] RIP: 0033:0x7f3592ea1b19 [ 1196.331096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.335015] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1196.337003] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1196.338533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.340074] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.341613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.343153] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1196.344765] CPU: 0 PID: 12485 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1196.346250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.348009] Call Trace: [ 1196.348574] dump_stack+0x107/0x167 [ 1196.349363] should_fail.cold+0x5/0xa [ 1196.350171] ? io_uring_setup+0x17ed/0x2980 [ 1196.351083] should_failslab+0x5/0x20 [ 1196.351895] kmem_cache_alloc_trace+0x55/0x320 [ 1196.352867] ? alloc_pages_current+0x18f/0x280 [ 1196.353823] io_uring_setup+0x17ed/0x2980 [ 1196.354713] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1196.355802] ? wait_for_completion_io+0x270/0x270 [ 1196.356341] FAULT_INJECTION: forcing a failure. [ 1196.356341] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.356855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.356885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.361643] do_syscall_64+0x33/0x40 [ 1196.362433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.363517] RIP: 0033:0x7feb2b3bab19 [ 1196.364314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.368200] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1196.369818] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1196.371320] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1196.372830] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1196.374328] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1196.375833] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1196.377362] CPU: 1 PID: 12486 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1196.378869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.380626] Call Trace: [ 1196.381195] dump_stack+0x107/0x167 [ 1196.382009] should_fail.cold+0x5/0xa [ 1196.382857] ? copy_fs_struct+0x45/0x340 [ 1196.383841] should_failslab+0x5/0x20 [ 1196.384674] kmem_cache_alloc+0x5b/0x310 [ 1196.385597] copy_fs_struct+0x45/0x340 [ 1196.386463] copy_process+0x34b5/0x78b0 [ 1196.387302] ? __lock_acquire+0xbb1/0x5b00 [ 1196.388247] ? __cleanup_sighand+0xb0/0xb0 [ 1196.389277] ? perf_trace_lock+0xac/0x490 [ 1196.390359] ? __lockdep_reset_lock+0x180/0x180 [ 1196.391394] ? find_held_lock+0x2c/0x110 [ 1196.392458] kernel_clone+0xe7/0x980 [ 1196.393454] ? lock_downgrade+0x6d0/0x6d0 [ 1196.394373] ? find_held_lock+0x2c/0x110 [ 1196.395274] ? create_io_thread+0xf0/0xf0 [ 1196.396187] ? ksys_write+0x12d/0x260 [ 1196.397056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.398336] __do_sys_fork+0x8a/0xc0 [ 1196.399167] ? kernel_thread+0xf0/0xf0 [ 1196.400116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.401336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.402481] ? trace_hardirqs_on+0x5b/0x180 [ 1196.403440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.404546] do_syscall_64+0x33/0x40 [ 1196.405523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.406648] RIP: 0033:0x7febfa601b19 [ 1196.407618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.411874] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1196.413752] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1196.415344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.416916] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.418480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.420055] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:58:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) fork() 01:58:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:58:16 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 15) 01:58:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:16 executing program 4: fork() (fail_nth: 21) 01:58:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1196.830623] FAULT_INJECTION: forcing a failure. [ 1196.830623] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.833345] CPU: 0 PID: 12612 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1196.834797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.836515] Call Trace: [ 1196.837073] dump_stack+0x107/0x167 [ 1196.837842] should_fail.cold+0x5/0xa [ 1196.838637] ? create_object.isra.0+0x3a/0xa30 [ 1196.839592] should_failslab+0x5/0x20 [ 1196.840374] kmem_cache_alloc+0x5b/0x310 [ 1196.841226] create_object.isra.0+0x3a/0xa30 [ 1196.842132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1196.843193] kmem_cache_alloc_trace+0x151/0x320 [ 1196.844160] ? alloc_pages_current+0x18f/0x280 [ 1196.845123] io_uring_setup+0x17ed/0x2980 [ 1196.846005] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1196.847068] ? wait_for_completion_io+0x270/0x270 [ 1196.848107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.849203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.850289] do_syscall_64+0x33/0x40 [ 1196.851057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.852107] RIP: 0033:0x7feb2b3bab19 [ 1196.852885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.856662] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1196.858255] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1196.859737] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1196.861205] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1196.862676] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1196.864142] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1196.915079] FAULT_INJECTION: forcing a failure. [ 1196.915079] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.917592] CPU: 1 PID: 12646 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1196.919083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.920891] Call Trace: [ 1196.921470] dump_stack+0x107/0x167 [ 1196.922266] should_fail.cold+0x5/0xa [ 1196.923084] ? create_object.isra.0+0x3a/0xa30 [ 1196.924136] should_failslab+0x5/0x20 [ 1196.925079] kmem_cache_alloc+0x5b/0x310 [ 1196.926017] create_object.isra.0+0x3a/0xa30 [ 1196.927168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1196.928291] kmem_cache_alloc+0x159/0x310 [ 1196.929192] ? _raw_spin_unlock+0x1a/0x30 [ 1196.930083] copy_process+0x1ae7/0x78b0 [ 1196.930932] ? __lock_acquire+0xbb1/0x5b00 [ 1196.931879] ? __cleanup_sighand+0xb0/0xb0 [ 1196.932784] ? perf_trace_lock+0xac/0x490 [ 1196.933689] ? __lockdep_reset_lock+0x180/0x180 [ 1196.934694] ? find_held_lock+0x2c/0x110 [ 1196.935570] kernel_clone+0xe7/0x980 [ 1196.936377] ? lock_downgrade+0x6d0/0x6d0 [ 1196.937461] ? find_held_lock+0x2c/0x110 [ 1196.938366] ? create_io_thread+0xf0/0xf0 [ 1196.939292] ? ksys_write+0x12d/0x260 [ 1196.940298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.941592] __do_sys_fork+0x8a/0xc0 [ 1196.942486] ? kernel_thread+0xf0/0xf0 [ 1196.943419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.944578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.945733] ? trace_hardirqs_on+0x5b/0x180 [ 1196.946690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.947776] do_syscall_64+0x33/0x40 [ 1196.948583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.949711] RIP: 0033:0x7febfa601b19 [ 1196.950536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.954586] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1196.956219] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1196.957781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.959321] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.961038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.962595] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:58:33 executing program 4: fork() (fail_nth: 22) 01:58:33 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1213.803701] FAULT_INJECTION: forcing a failure. [ 1213.803701] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.805278] CPU: 0 PID: 12730 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1213.806107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.807063] Call Trace: [ 1213.807374] dump_stack+0x107/0x167 [ 1213.807806] should_fail.cold+0x5/0xa [ 1213.808250] ? copy_process+0x3305/0x78b0 [ 1213.808514] FAULT_INJECTION: forcing a failure. [ 1213.808514] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.808747] should_failslab+0x5/0x20 [ 1213.808769] kmem_cache_alloc_node+0x55/0x330 [ 1213.812185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.812805] copy_process+0x3305/0x78b0 [ 1213.813278] ? SOFTIRQ_verbose+0x10/0x10 [ 1213.813757] ? stack_trace_save+0x8c/0xc0 [ 1213.814252] ? lock_acquire+0x197/0x470 [ 1213.814717] ? io_sq_thread_park+0x79/0xd0 [ 1213.815214] ? perf_trace_lock+0xac/0x490 [ 1213.815694] ? lock_release+0x680/0x680 [ 1213.816166] ? __cleanup_sighand+0xb0/0xb0 [ 1213.816653] ? kernel_text_address+0xf2/0x120 [ 1213.817200] ? find_held_lock+0x2c/0x110 [ 1213.817672] ? io_uring_setup+0x1c23/0x2980 [ 1213.818179] ? lock_downgrade+0x6d0/0x6d0 [ 1213.818681] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1213.819248] create_io_thread+0xb6/0xf0 [ 1213.819714] ? pidfd_prepare+0x80/0x80 [ 1213.820171] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1213.820761] io_uring_setup+0x1d79/0x2980 [ 1213.821270] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1213.821863] ? wait_for_completion_io+0x270/0x270 [ 1213.822444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.823063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.823663] do_syscall_64+0x33/0x40 [ 1213.824104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.824704] RIP: 0033:0x7feb2b3bab19 [ 1213.825139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.827309] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1213.828189] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1213.829030] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1213.829861] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1213.830697] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1213.831522] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1213.832382] CPU: 1 PID: 12729 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1213.833951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.835792] Call Trace: [ 1213.836387] dump_stack+0x107/0x167 [ 1213.837214] should_fail.cold+0x5/0xa [ 1213.838072] ? copy_process+0x1c65/0x78b0 [ 1213.838996] should_failslab+0x5/0x20 01:58:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:33 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 16) 01:58:33 executing program 2: fork() (fail_nth: 16) [ 1213.839852] kmem_cache_alloc+0x5b/0x310 [ 1213.840930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.841186] FAULT_INJECTION: forcing a failure. [ 1213.841186] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.842116] copy_process+0x1c65/0x78b0 [ 1213.842146] ? __lock_acquire+0xbb1/0x5b00 [ 1213.842194] ? __cleanup_sighand+0xb0/0xb0 [ 1213.842213] ? perf_trace_lock+0xac/0x490 [ 1213.842242] ? __lockdep_reset_lock+0x180/0x180 [ 1213.842273] ? find_held_lock+0x2c/0x110 [ 1213.842300] kernel_clone+0xe7/0x980 [ 1213.849886] ? lock_downgrade+0x6d0/0x6d0 [ 1213.850808] ? find_held_lock+0x2c/0x110 [ 1213.851708] ? create_io_thread+0xf0/0xf0 [ 1213.852636] ? ksys_write+0x12d/0x260 [ 1213.853499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1213.854586] __do_sys_fork+0x8a/0xc0 [ 1213.855411] ? kernel_thread+0xf0/0xf0 [ 1213.856299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.857473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.858598] ? trace_hardirqs_on+0x5b/0x180 [ 1213.859555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.860699] do_syscall_64+0x33/0x40 [ 1213.861532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.862664] RIP: 0033:0x7febfa601b19 [ 1213.863487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.867535] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1213.869216] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1213.870788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1213.872353] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.873926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.875487] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1213.877084] CPU: 0 PID: 12734 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1213.877892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.878845] Call Trace: [ 1213.879151] dump_stack+0x107/0x167 [ 1213.879581] should_fail.cold+0x5/0xa [ 1213.880024] ? kvmalloc_node+0x119/0x170 [ 1213.880493] should_failslab+0x5/0x20 [ 1213.880941] __kmalloc_node+0x76/0x420 [ 1213.881402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.881982] kvmalloc_node+0x119/0x170 [ 1213.882431] alloc_fdtable+0x159/0x2c0 [ 1213.882880] dup_fd+0x92d/0xe40 [ 1213.883268] copy_process+0x197c/0x78b0 [ 1213.883725] ? __lock_acquire+0xbb1/0x5b00 [ 1213.884221] ? __cleanup_sighand+0xb0/0xb0 [ 1213.884712] ? perf_trace_lock+0xac/0x490 [ 1213.885200] ? __lockdep_reset_lock+0x180/0x180 [ 1213.885744] ? find_held_lock+0x2c/0x110 [ 1213.886213] kernel_clone+0xe7/0x980 [ 1213.886642] ? lock_downgrade+0x6d0/0x6d0 [ 1213.887124] ? find_held_lock+0x2c/0x110 [ 1213.887591] ? create_io_thread+0xf0/0xf0 [ 1213.888068] ? ksys_write+0x12d/0x260 [ 1213.888508] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1213.889099] __do_sys_fork+0x8a/0xc0 [ 1213.889536] ? kernel_thread+0xf0/0xf0 [ 1213.889996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.890606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.891197] ? trace_hardirqs_on+0x5b/0x180 [ 1213.891710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.892299] do_syscall_64+0x33/0x40 [ 1213.892727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.893324] RIP: 0033:0x7f3592ea1b19 [ 1213.893753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.895850] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1213.896775] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1213.897611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1213.898454] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.899275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.900111] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:58:33 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:58:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:34 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:34 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 17) [ 1214.041565] FAULT_INJECTION: forcing a failure. [ 1214.041565] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.043164] CPU: 0 PID: 12754 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1214.043972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.044922] Call Trace: [ 1214.045239] dump_stack+0x107/0x167 [ 1214.045655] should_fail.cold+0x5/0xa [ 1214.046103] ? create_object.isra.0+0x3a/0xa30 [ 1214.046621] should_failslab+0x5/0x20 [ 1214.047065] kmem_cache_alloc+0x5b/0x310 [ 1214.047532] create_object.isra.0+0x3a/0xa30 [ 1214.048037] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.048617] kmem_cache_alloc_node+0x169/0x330 [ 1214.049155] copy_process+0x3305/0x78b0 [ 1214.049608] ? SOFTIRQ_verbose+0x10/0x10 [ 1214.050091] ? stack_trace_save+0x8c/0xc0 [ 1214.050569] ? lock_acquire+0x197/0x470 [ 1214.051031] ? io_sq_thread_park+0x79/0xd0 [ 1214.051518] ? perf_trace_lock+0xac/0x490 [ 1214.051992] ? lock_release+0x680/0x680 [ 1214.052449] ? __cleanup_sighand+0xb0/0xb0 [ 1214.052935] ? kernel_text_address+0xf2/0x120 [ 1214.053471] ? find_held_lock+0x2c/0x110 [ 1214.053943] ? io_uring_setup+0x1c23/0x2980 [ 1214.054443] ? lock_downgrade+0x6d0/0x6d0 [ 1214.054923] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1214.055494] create_io_thread+0xb6/0xf0 [ 1214.055957] ? pidfd_prepare+0x80/0x80 [ 1214.056413] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1214.056988] io_uring_setup+0x1d79/0x2980 [ 1214.057479] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1214.058065] ? wait_for_completion_io+0x270/0x270 [ 1214.058637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.059238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.059826] do_syscall_64+0x33/0x40 [ 1214.060257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.060842] RIP: 0033:0x7feb2b3bab19 [ 1214.061281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.063378] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1214.064246] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1214.065072] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1214.065887] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1214.066696] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1214.067524] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:58:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:58:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:34 executing program 2: fork() (fail_nth: 17) 01:58:34 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1214.166754] FAULT_INJECTION: forcing a failure. [ 1214.166754] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.168424] CPU: 0 PID: 12765 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1214.169235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.170194] Call Trace: [ 1214.170504] dump_stack+0x107/0x167 [ 1214.170925] should_fail.cold+0x5/0xa [ 1214.171376] ? create_object.isra.0+0x3a/0xa30 [ 1214.171902] should_failslab+0x5/0x20 [ 1214.172341] kmem_cache_alloc+0x5b/0x310 [ 1214.172814] create_object.isra.0+0x3a/0xa30 [ 1214.173326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.173909] __kmalloc_node+0x1ae/0x420 [ 1214.174373] kvmalloc_node+0x119/0x170 [ 1214.174825] alloc_fdtable+0x159/0x2c0 [ 1214.175272] dup_fd+0x92d/0xe40 [ 1214.175660] copy_process+0x197c/0x78b0 [ 1214.176128] ? __lock_acquire+0xbb1/0x5b00 [ 1214.176628] ? __cleanup_sighand+0xb0/0xb0 [ 1214.177117] ? perf_trace_lock+0xac/0x490 [ 1214.177595] ? __lockdep_reset_lock+0x180/0x180 [ 1214.178139] ? find_held_lock+0x2c/0x110 [ 1214.178608] kernel_clone+0xe7/0x980 [ 1214.179043] ? lock_downgrade+0x6d0/0x6d0 [ 1214.179521] ? find_held_lock+0x2c/0x110 [ 1214.179989] ? create_io_thread+0xf0/0xf0 [ 1214.180467] ? ksys_write+0x12d/0x260 [ 1214.180917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1214.181510] __do_sys_fork+0x8a/0xc0 [ 1214.181943] ? kernel_thread+0xf0/0xf0 [ 1214.182407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.183009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.183604] ? trace_hardirqs_on+0x5b/0x180 [ 1214.184104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.184699] do_syscall_64+0x33/0x40 [ 1214.185146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.185736] RIP: 0033:0x7f3592ea1b19 [ 1214.186166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.188278] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1214.189156] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1214.189977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.190796] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1214.191611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.192433] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:58:52 executing program 2: fork() (fail_nth: 18) 01:58:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:52 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:52 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:52 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 18) 01:58:52 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:52 executing program 4: fork() (fail_nth: 23) [ 1232.704618] FAULT_INJECTION: forcing a failure. [ 1232.704618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1232.707544] CPU: 1 PID: 12882 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1232.709145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1232.711066] Call Trace: [ 1232.711696] dump_stack+0x107/0x167 [ 1232.712555] should_fail.cold+0x5/0xa [ 1232.713465] __alloc_pages_nodemask+0x182/0x600 [ 1232.714542] ? lock_downgrade+0x6d0/0x6d0 [ 1232.715511] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1232.716903] ? memcg_slab_post_alloc_hook+0x17a/0x430 01:58:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1232.718126] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1232.719393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1232.720621] copy_process+0x62b/0x78b0 [ 1232.721541] ? SOFTIRQ_verbose+0x10/0x10 [ 1232.722202] FAULT_INJECTION: forcing a failure. [ 1232.722202] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.722481] ? stack_trace_save+0x8c/0xc0 [ 1232.725239] ? lock_acquire+0x197/0x470 [ 1232.726169] ? io_sq_thread_park+0x79/0xd0 [ 1232.727153] ? perf_trace_lock+0xac/0x490 [ 1232.728118] ? lock_release+0x680/0x680 [ 1232.729042] ? __cleanup_sighand+0xb0/0xb0 [ 1232.730036] ? kernel_text_address+0xf2/0x120 [ 1232.731080] ? find_held_lock+0x2c/0x110 [ 1232.732023] ? io_uring_setup+0x1c23/0x2980 [ 1232.733020] ? lock_downgrade+0x6d0/0x6d0 [ 1232.733990] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1232.735129] create_io_thread+0xb6/0xf0 [ 1232.736045] ? pidfd_prepare+0x80/0x80 [ 1232.736959] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1232.738123] io_uring_setup+0x1d79/0x2980 [ 1232.739086] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1232.740253] ? wait_for_completion_io+0x270/0x270 [ 1232.741412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1232.742638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.743864] do_syscall_64+0x33/0x40 [ 1232.744755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1232.745976] RIP: 0033:0x7feb2b3bab19 [ 1232.746865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.751222] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1232.753020] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1232.754712] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1232.756397] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1232.758091] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1232.759774] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1232.761498] CPU: 0 PID: 12887 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1232.762622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1232.763956] Call Trace: [ 1232.764388] dump_stack+0x107/0x167 [ 1232.764978] should_fail.cold+0x5/0xa [ 1232.765604] ? create_object.isra.0+0x3a/0xa30 [ 1232.766344] should_failslab+0x5/0x20 [ 1232.766961] kmem_cache_alloc+0x5b/0x310 [ 1232.767629] create_object.isra.0+0x3a/0xa30 [ 1232.768344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1232.769169] kmem_cache_alloc+0x159/0x310 [ 1232.769841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1232.769872] FAULT_INJECTION: forcing a failure. [ 1232.769872] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.770690] copy_process+0x1c65/0x78b0 [ 1232.773946] ? __lock_acquire+0xbb1/0x5b00 [ 1232.774647] ? __cleanup_sighand+0xb0/0xb0 [ 1232.775327] ? perf_trace_lock+0xac/0x490 [ 1232.775996] ? __lockdep_reset_lock+0x180/0x180 [ 1232.776749] ? find_held_lock+0x2c/0x110 [ 1232.777419] kernel_clone+0xe7/0x980 [ 1232.778018] ? lock_downgrade+0x6d0/0x6d0 [ 1232.778687] ? find_held_lock+0x2c/0x110 [ 1232.779342] ? create_io_thread+0xf0/0xf0 [ 1232.780008] ? ksys_write+0x12d/0x260 [ 1232.780622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1232.781422] __do_sys_fork+0x8a/0xc0 [ 1232.782021] ? kernel_thread+0xf0/0xf0 [ 1232.782662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1232.783496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.784307] ? trace_hardirqs_on+0x5b/0x180 [ 1232.784993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.785838] do_syscall_64+0x33/0x40 [ 1232.786447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1232.787284] RIP: 0033:0x7febfa601b19 [ 1232.787890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.790859] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1232.792075] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1232.793227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.794369] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.795535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.796686] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1232.797885] CPU: 1 PID: 12883 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1232.799552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1232.801546] Call Trace: [ 1232.802186] dump_stack+0x107/0x167 [ 1232.803070] should_fail.cold+0x5/0xa [ 1232.803989] ? copy_fs_struct+0x45/0x340 [ 1232.804955] should_failslab+0x5/0x20 [ 1232.805877] kmem_cache_alloc+0x5b/0x310 [ 1232.806855] copy_fs_struct+0x45/0x340 [ 1232.807796] copy_process+0x34b5/0x78b0 [ 1232.808754] ? __lock_acquire+0xbb1/0x5b00 [ 1232.809804] ? __cleanup_sighand+0xb0/0xb0 [ 1232.810819] ? perf_trace_lock+0xac/0x490 [ 1232.811821] ? __lockdep_reset_lock+0x180/0x180 [ 1232.812939] ? find_held_lock+0x2c/0x110 [ 1232.813928] kernel_clone+0xe7/0x980 [ 1232.814813] ? lock_downgrade+0x6d0/0x6d0 [ 1232.815800] ? find_held_lock+0x2c/0x110 [ 1232.816763] ? create_io_thread+0xf0/0xf0 [ 1232.817764] ? ksys_write+0x12d/0x260 [ 1232.818678] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1232.819842] __do_sys_fork+0x8a/0xc0 [ 1232.820725] ? kernel_thread+0xf0/0xf0 [ 1232.821686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1232.822935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.824163] ? trace_hardirqs_on+0x5b/0x180 [ 1232.825190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1232.826448] do_syscall_64+0x33/0x40 [ 1232.827333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1232.828562] RIP: 0033:0x7f3592ea1b19 [ 1232.829457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.833840] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1232.835648] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1232.837353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.839045] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1232.840739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.842457] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:58:52 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:52 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:53 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:53 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:58:53 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:53 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:53 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1233.105836] FAULT_INJECTION: forcing a failure. [ 1233.105836] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.107263] CPU: 1 PID: 13016 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1233.108108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1233.109092] Call Trace: [ 1233.109415] dump_stack+0x107/0x167 [ 1233.109851] should_fail.cold+0x5/0xa 01:58:53 executing program 2: fork() (fail_nth: 19) 01:58:53 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 19) [ 1233.110301] ? __delayacct_tsk_init+0x1b/0x80 [ 1233.111103] should_failslab+0x5/0x20 [ 1233.111551] kmem_cache_alloc+0x5b/0x310 [ 1233.112029] __delayacct_tsk_init+0x1b/0x80 [ 1233.112533] copy_process+0x3399/0x78b0 [ 1233.112996] ? SOFTIRQ_verbose+0x10/0x10 [ 1233.113488] ? stack_trace_save+0x8c/0xc0 [ 1233.113978] ? lock_acquire+0x197/0x470 [ 1233.114453] ? io_sq_thread_park+0x79/0xd0 [ 1233.114955] ? __cleanup_sighand+0xb0/0xb0 [ 1233.115450] ? kernel_text_address+0xf2/0x120 [ 1233.115985] ? find_held_lock+0x2c/0x110 [ 1233.116462] ? io_uring_setup+0x1c23/0x2980 [ 1233.116978] ? lock_downgrade+0x6d0/0x6d0 [ 1233.117476] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1233.118047] create_io_thread+0xb6/0xf0 [ 1233.118513] ? pidfd_prepare+0x80/0x80 [ 1233.118969] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1233.119562] io_uring_setup+0x1d79/0x2980 [ 1233.120055] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1233.120648] ? wait_for_completion_io+0x270/0x270 [ 1233.121235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1233.121850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.122482] do_syscall_64+0x33/0x40 [ 1233.122921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1233.123522] RIP: 0033:0x7feb2b3bab19 [ 1233.123955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.126541] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1233.127437] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1233.128280] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1233.129122] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1233.129970] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1233.130846] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:58:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:58:53 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:53 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1233.164429] FAULT_INJECTION: forcing a failure. [ 1233.164429] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.166561] CPU: 0 PID: 13024 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1233.167650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1233.168953] Call Trace: [ 1233.169386] dump_stack+0x107/0x167 [ 1233.169968] should_fail.cold+0x5/0xa [ 1233.170567] ? create_object.isra.0+0x3a/0xa30 [ 1233.171284] should_failslab+0x5/0x20 [ 1233.171889] kmem_cache_alloc+0x5b/0x310 [ 1233.172538] create_object.isra.0+0x3a/0xa30 [ 1233.173243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1233.174071] kmem_cache_alloc+0x159/0x310 [ 1233.174746] copy_fs_struct+0x45/0x340 [ 1233.175379] copy_process+0x34b5/0x78b0 [ 1233.176036] ? __lock_acquire+0xbb1/0x5b00 [ 1233.176743] ? __cleanup_sighand+0xb0/0xb0 [ 1233.177442] ? perf_trace_lock+0xac/0x490 [ 1233.178125] ? __lockdep_reset_lock+0x180/0x180 [ 1233.178889] ? find_held_lock+0x2c/0x110 [ 1233.179565] kernel_clone+0xe7/0x980 [ 1233.180188] ? lock_downgrade+0x6d0/0x6d0 [ 1233.180868] ? find_held_lock+0x2c/0x110 [ 1233.181542] ? create_io_thread+0xf0/0xf0 [ 1233.182232] ? ksys_write+0x12d/0x260 [ 1233.182869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1233.183671] __do_sys_fork+0x8a/0xc0 [ 1233.184285] ? kernel_thread+0xf0/0xf0 [ 1233.184950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1233.185831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.186686] ? trace_hardirqs_on+0x5b/0x180 [ 1233.187401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.188247] do_syscall_64+0x33/0x40 [ 1233.188869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1233.189720] RIP: 0033:0x7f3592ea1b19 [ 1233.190334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.193376] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1233.194637] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1233.195814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.196987] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.198164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1233.199328] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:58:53 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:58:53 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:58:53 executing program 4: fork() (fail_nth: 24) 01:58:53 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 20) [ 1233.274032] FAULT_INJECTION: forcing a failure. [ 1233.274032] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.275421] CPU: 1 PID: 13064 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1233.276229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1233.277199] Call Trace: [ 1233.277526] dump_stack+0x107/0x167 [ 1233.277959] should_fail.cold+0x5/0xa [ 1233.278409] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1233.279025] should_failslab+0x5/0x20 [ 1233.279476] __kmalloc_node+0x76/0x420 [ 1233.279936] ? lock_downgrade+0x6d0/0x6d0 [ 1233.280422] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1233.281021] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1233.281614] ? trace_hardirqs_on+0x5b/0x180 [ 1233.282123] kmem_cache_alloc_node+0x181/0x330 [ 1233.282664] copy_process+0x3305/0x78b0 [ 1233.283128] ? SOFTIRQ_verbose+0x10/0x10 [ 1233.283608] ? stack_trace_save+0x8c/0xc0 [ 1233.284101] ? lock_acquire+0x197/0x470 [ 1233.284570] ? io_sq_thread_park+0x79/0xd0 [ 1233.285064] ? perf_trace_lock+0xac/0x490 [ 1233.285561] ? lock_release+0x680/0x680 [ 1233.286031] ? __cleanup_sighand+0xb0/0xb0 [ 1233.286525] ? kernel_text_address+0xf2/0x120 [ 1233.287055] ? find_held_lock+0x2c/0x110 [ 1233.287541] ? io_uring_setup+0x1c23/0x2980 [ 1233.288096] ? lock_downgrade+0x6d0/0x6d0 [ 1233.288588] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1233.289157] create_io_thread+0xb6/0xf0 [ 1233.289631] ? pidfd_prepare+0x80/0x80 [ 1233.290090] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1233.290676] io_uring_setup+0x1d79/0x2980 [ 1233.291165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1233.291756] ? wait_for_completion_io+0x270/0x270 [ 1233.292336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1233.292953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.293577] do_syscall_64+0x33/0x40 [ 1233.294012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1233.294613] RIP: 0033:0x7feb2b3bab19 [ 1233.295050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.297203] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1233.298102] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1233.298939] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1233.299781] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1233.300609] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1233.301454] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1233.333502] FAULT_INJECTION: forcing a failure. [ 1233.333502] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.335663] CPU: 0 PID: 13128 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1233.336802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1233.338171] Call Trace: [ 1233.338615] dump_stack+0x107/0x167 [ 1233.339228] should_fail.cold+0x5/0xa [ 1233.339855] ? copy_process+0x2514/0x78b0 [ 1233.340530] should_failslab+0x5/0x20 [ 1233.341157] kmem_cache_alloc+0x5b/0x310 [ 1233.341830] copy_process+0x2514/0x78b0 [ 1233.342487] ? __lock_acquire+0xbb1/0x5b00 [ 1233.343198] ? __cleanup_sighand+0xb0/0xb0 [ 1233.343879] ? perf_trace_lock+0xac/0x490 [ 1233.344560] ? __lockdep_reset_lock+0x180/0x180 [ 1233.345326] ? find_held_lock+0x2c/0x110 [ 1233.345986] kernel_clone+0xe7/0x980 [ 1233.346595] ? lock_downgrade+0x6d0/0x6d0 [ 1233.347261] ? find_held_lock+0x2c/0x110 [ 1233.347909] ? create_io_thread+0xf0/0xf0 [ 1233.348578] ? ksys_write+0x12d/0x260 [ 1233.349192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1233.350003] __do_sys_fork+0x8a/0xc0 [ 1233.350614] ? kernel_thread+0xf0/0xf0 [ 1233.351274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1233.352128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.352957] ? trace_hardirqs_on+0x5b/0x180 [ 1233.353683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1233.354523] do_syscall_64+0x33/0x40 [ 1233.355128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1233.355949] RIP: 0033:0x7febfa601b19 [ 1233.356556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1233.359510] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1233.360738] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1233.361896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.363053] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.364201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1233.365360] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:59:10 executing program 4: fork() (fail_nth: 25) 01:59:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:59:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:59:10 executing program 3: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 21) 01:59:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:59:10 executing program 2: fork() (fail_nth: 20) [ 1250.676151] FAULT_INJECTION: forcing a failure. [ 1250.676151] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.678949] CPU: 1 PID: 13155 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1250.680563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.682516] Call Trace: [ 1250.683140] dump_stack+0x107/0x167 [ 1250.684003] should_fail.cold+0x5/0xa [ 1250.684906] ? alloc_pid+0xd7/0xd30 [ 1250.685759] should_failslab+0x5/0x20 [ 1250.686651] kmem_cache_alloc+0x5b/0x310 01:59:10 executing program 3: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1250.687613] alloc_pid+0xd7/0xd30 [ 1250.688590] ? copy_namespaces+0x1ca/0x4f0 [ 1250.689593] copy_process+0x3b8b/0x78b0 [ 1250.690516] ? SOFTIRQ_verbose+0x10/0x10 [ 1250.691481] ? stack_trace_save+0x8c/0xc0 [ 1250.692487] ? __cleanup_sighand+0xb0/0xb0 [ 1250.693478] ? kernel_text_address+0xf2/0x120 [ 1250.694555] ? find_held_lock+0x2c/0x110 [ 1250.695527] ? io_uring_setup+0x1c23/0x2980 [ 1250.696540] ? lock_downgrade+0x6d0/0x6d0 [ 1250.697509] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1250.698653] create_io_thread+0xb6/0xf0 [ 1250.699574] ? pidfd_prepare+0x80/0x80 [ 1250.700488] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1250.701646] io_uring_setup+0x1d79/0x2980 [ 1250.702620] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1250.703790] ? wait_for_completion_io+0x270/0x270 [ 1250.704947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.706165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.707360] do_syscall_64+0x33/0x40 [ 1250.708230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.709439] RIP: 0033:0x7feb2b3bab19 [ 1250.710307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.714553] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1250.716319] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1250.717981] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1250.719629] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1250.721307] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1250.722971] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1250.736588] FAULT_INJECTION: forcing a failure. [ 1250.736588] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.739376] CPU: 1 PID: 13164 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1250.740989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.742936] Call Trace: [ 1250.743547] dump_stack+0x107/0x167 [ 1250.744401] should_fail.cold+0x5/0xa 01:59:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1250.745305] ? create_object.isra.0+0x3a/0xa30 [ 1250.746542] should_failslab+0x5/0x20 [ 1250.747430] kmem_cache_alloc+0x5b/0x310 [ 1250.748394] create_object.isra.0+0x3a/0xa30 [ 1250.749425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1250.750611] kmem_cache_alloc+0x159/0x310 [ 1250.751597] copy_process+0x2514/0x78b0 [ 1250.752532] ? __lock_acquire+0xbb1/0x5b00 [ 1250.753557] ? __cleanup_sighand+0xb0/0xb0 [ 1250.754551] ? perf_trace_lock+0xac/0x490 [ 1250.755530] ? __lockdep_reset_lock+0x180/0x180 [ 1250.756621] ? find_held_lock+0x2c/0x110 [ 1250.757588] kernel_clone+0xe7/0x980 [ 1250.758457] ? lock_downgrade+0x6d0/0x6d0 [ 1250.759418] ? find_held_lock+0x2c/0x110 [ 1250.760372] ? create_io_thread+0xf0/0xf0 [ 1250.761341] ? ksys_write+0x12d/0x260 [ 1250.762264] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1250.763398] __do_sys_fork+0x8a/0xc0 [ 1250.764270] ? kernel_thread+0xf0/0xf0 [ 1250.765199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.766431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.767635] ? trace_hardirqs_on+0x5b/0x180 [ 1250.768645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.769840] do_syscall_64+0x33/0x40 [ 1250.770709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.771913] RIP: 0033:0x7febfa601b19 [ 1250.772785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.777110] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1250.778899] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1250.780585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.782239] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.783909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.785573] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1250.793293] FAULT_INJECTION: forcing a failure. [ 1250.793293] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.795941] CPU: 1 PID: 13162 Comm: syz-executor.2 Not tainted 5.10.262 #1 01:59:10 executing program 3: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1250.797562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.799665] Call Trace: [ 1250.800305] dump_stack+0x107/0x167 [ 1250.801160] should_fail.cold+0x5/0xa [ 1250.802065] ? copy_process+0x1ae7/0x78b0 [ 1250.803049] should_failslab+0x5/0x20 [ 1250.803944] kmem_cache_alloc+0x5b/0x310 [ 1250.804888] ? _raw_spin_unlock+0x1a/0x30 [ 1250.805861] copy_process+0x1ae7/0x78b0 [ 1250.806805] ? __lock_acquire+0xbb1/0x5b00 [ 1250.807828] ? __cleanup_sighand+0xb0/0xb0 [ 1250.808815] ? perf_trace_lock+0xac/0x490 [ 1250.809787] ? __lockdep_reset_lock+0x180/0x180 [ 1250.810893] ? find_held_lock+0x2c/0x110 [ 1250.811843] kernel_clone+0xe7/0x980 [ 1250.812729] ? lock_downgrade+0x6d0/0x6d0 [ 1250.813687] ? find_held_lock+0x2c/0x110 [ 1250.814644] ? create_io_thread+0xf0/0xf0 [ 1250.815617] ? ksys_write+0x12d/0x260 [ 1250.816509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1250.817667] __do_sys_fork+0x8a/0xc0 [ 1250.818536] ? kernel_thread+0xf0/0xf0 [ 1250.819461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.820682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.821869] ? trace_hardirqs_on+0x5b/0x180 [ 1250.822876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.824070] do_syscall_64+0x33/0x40 [ 1250.824942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1250.826148] RIP: 0033:0x7f3592ea1b19 [ 1250.827037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.831325] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1250.833097] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1250.834762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.836423] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.838104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.839778] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:59:28 executing program 4: fork() (fail_nth: 26) 01:59:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:59:28 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 22) 01:59:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:28 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:59:28 executing program 2: fork() (fail_nth: 21) [ 1268.338400] FAULT_INJECTION: forcing a failure. [ 1268.338400] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.340645] CPU: 1 PID: 13282 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1268.342002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.343622] Call Trace: [ 1268.344144] dump_stack+0x107/0x167 [ 1268.344855] should_fail.cold+0x5/0xa [ 1268.345619] ? create_object.isra.0+0x3a/0xa30 [ 1268.346507] should_failslab+0x5/0x20 [ 1268.347258] kmem_cache_alloc+0x5b/0x310 [ 1268.348059] create_object.isra.0+0x3a/0xa30 [ 1268.348922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1268.349924] kmem_cache_alloc+0x159/0x310 [ 1268.350735] copy_process+0x1ae7/0x78b0 [ 1268.351512] ? __lock_acquire+0xbb1/0x5b00 [ 1268.352347] ? __cleanup_sighand+0xb0/0xb0 [ 1268.353165] ? perf_trace_lock+0xac/0x490 [ 1268.353973] ? __lockdep_reset_lock+0x180/0x180 [ 1268.354880] ? find_held_lock+0x2c/0x110 [ 1268.355662] kernel_clone+0xe7/0x980 [ 1268.356389] ? lock_downgrade+0x6d0/0x6d0 [ 1268.357179] ? find_held_lock+0x2c/0x110 [ 1268.357973] ? create_io_thread+0xf0/0xf0 [ 1268.358768] ? ksys_write+0x12d/0x260 [ 1268.359513] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1268.360445] __do_sys_fork+0x8a/0xc0 [ 1268.361162] ? kernel_thread+0xf0/0xf0 [ 1268.361941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.362947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.363937] ? trace_hardirqs_on+0x5b/0x180 [ 1268.364773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.365771] do_syscall_64+0x33/0x40 [ 1268.366487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1268.367472] RIP: 0033:0x7f3592ea1b19 [ 1268.368182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.371223] FAULT_INJECTION: forcing a failure. [ 1268.371223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1268.371703] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1268.371723] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1268.371744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.378400] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.379757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.381110] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1268.382500] CPU: 0 PID: 13286 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1268.384001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.385801] Call Trace: [ 1268.386385] dump_stack+0x107/0x167 [ 1268.387188] should_fail.cold+0x5/0xa [ 1268.388021] __alloc_pages_nodemask+0x182/0x600 [ 1268.389112] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1268.390550] alloc_pages_current+0x187/0x280 [ 1268.391486] __get_free_pages+0xc/0xa0 [ 1268.392328] pgd_alloc+0x84/0x4e0 [ 1268.393069] ? pgd_page_get_mm+0x40/0x40 [ 1268.393936] ? lockdep_init_map_type+0x2c7/0x780 [ 1268.394933] ? lockdep_init_map_type+0x2c7/0x780 [ 1268.395961] mm_init+0x670/0xab0 [ 1268.396682] copy_process+0x257b/0x78b0 [ 1268.397556] ? __lock_acquire+0xbb1/0x5b00 [ 1268.398507] ? __cleanup_sighand+0xb0/0xb0 [ 1268.399399] ? perf_trace_lock+0xac/0x490 [ 1268.400322] ? __lockdep_reset_lock+0x180/0x180 [ 1268.401320] ? find_held_lock+0x2c/0x110 [ 1268.402199] kernel_clone+0xe7/0x980 [ 1268.403004] ? lock_downgrade+0x6d0/0x6d0 [ 1268.403886] ? find_held_lock+0x2c/0x110 [ 1268.404767] ? create_io_thread+0xf0/0xf0 [ 1268.405672] ? ksys_write+0x12d/0x260 [ 1268.406501] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1268.407527] __do_sys_fork+0x8a/0xc0 [ 1268.408326] ? kernel_thread+0xf0/0xf0 [ 1268.409167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.410291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.411380] ? trace_hardirqs_on+0x5b/0x180 [ 1268.412292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.413380] do_syscall_64+0x33/0x40 [ 1268.414181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1268.415267] RIP: 0033:0x7febfa601b19 [ 1268.416054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.419937] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1268.421557] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1268.423077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.424591] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.426115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.427619] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1268.463241] FAULT_INJECTION: forcing a failure. [ 1268.463241] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.466033] CPU: 0 PID: 13360 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1268.467515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.469261] Call Trace: [ 1268.469841] dump_stack+0x107/0x167 [ 1268.470624] should_fail.cold+0x5/0xa [ 1268.471439] ? create_object.isra.0+0x3a/0xa30 [ 1268.472411] should_failslab+0x5/0x20 [ 1268.473232] kmem_cache_alloc+0x5b/0x310 [ 1268.474111] create_object.isra.0+0x3a/0xa30 [ 1268.475042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1268.476131] kmem_cache_alloc+0x159/0x310 [ 1268.477027] alloc_pid+0xd7/0xd30 [ 1268.477787] ? copy_namespaces+0x1ca/0x4f0 [ 1268.478695] copy_process+0x3b8b/0x78b0 [ 1268.479583] ? SOFTIRQ_verbose+0x10/0x10 [ 1268.480623] ? stack_trace_save+0x8c/0xc0 [ 1268.481720] ? __cleanup_sighand+0xb0/0xb0 [ 1268.482787] ? kernel_text_address+0xf2/0x120 [ 1268.483932] ? find_held_lock+0x2c/0x110 [ 1268.484966] ? io_uring_setup+0x1c23/0x2980 [ 1268.486076] ? lock_downgrade+0x6d0/0x6d0 [ 1268.487137] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1268.488395] create_io_thread+0xb6/0xf0 [ 1268.489410] ? pidfd_prepare+0x80/0x80 [ 1268.490407] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 1268.491662] io_uring_setup+0x1d79/0x2980 [ 1268.492726] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1268.494011] ? wait_for_completion_io+0x270/0x270 [ 1268.495262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.496578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.497898] do_syscall_64+0x33/0x40 [ 1268.498835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1268.500133] RIP: 0033:0x7feb2b3bab19 [ 1268.501072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.505696] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1268.507610] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1268.509381] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1268.511158] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1268.512921] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1268.514698] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:59:28 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:59:28 executing program 2: fork() (fail_nth: 22) 01:59:28 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 23) [ 1268.694931] FAULT_INJECTION: forcing a failure. [ 1268.694931] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.696698] CPU: 1 PID: 13512 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1268.697764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.698998] Call Trace: [ 1268.699398] dump_stack+0x107/0x167 [ 1268.699955] should_fail.cold+0x5/0xa [ 1268.700527] ? copy_process+0x1c65/0x78b0 [ 1268.701152] should_failslab+0x5/0x20 [ 1268.701738] kmem_cache_alloc+0x5b/0x310 [ 1268.702358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.703153] copy_process+0x1c65/0x78b0 [ 1268.703756] ? __lock_acquire+0xbb1/0x5b00 [ 1268.704404] ? __cleanup_sighand+0xb0/0xb0 [ 1268.705051] ? perf_trace_lock+0xac/0x490 [ 1268.705686] ? __lockdep_reset_lock+0x180/0x180 [ 1268.706390] ? find_held_lock+0x2c/0x110 [ 1268.707008] kernel_clone+0xe7/0x980 [ 1268.707560] ? lock_downgrade+0x6d0/0x6d0 [ 1268.708193] ? find_held_lock+0x2c/0x110 [ 1268.708789] ? create_io_thread+0xf0/0xf0 [ 1268.709411] ? ksys_write+0x12d/0x260 [ 1268.710000] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1268.710731] __do_sys_fork+0x8a/0xc0 [ 1268.711299] ? kernel_thread+0xf0/0xf0 [ 1268.711897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.712676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.713433] ? trace_hardirqs_on+0x5b/0x180 [ 1268.714082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.714846] do_syscall_64+0x33/0x40 [ 1268.715412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1268.716163] RIP: 0033:0x7f3592ea1b19 [ 1268.716718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.719437] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1268.720551] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1268.721601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.722657] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.723695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1268.724739] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1268.837174] FAULT_INJECTION: forcing a failure. [ 1268.837174] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.840098] CPU: 0 PID: 13607 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1268.841683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1268.843632] Call Trace: [ 1268.844249] dump_stack+0x107/0x167 [ 1268.845099] should_fail.cold+0x5/0xa [ 1268.845988] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1268.847200] should_failslab+0x5/0x20 [ 1268.848080] kmem_cache_alloc_trace+0x55/0x320 [ 1268.849153] io_uring_alloc_task_context+0x99/0x6a0 [ 1268.850366] ? io_import_iovec+0x1120/0x1120 [ 1268.851411] io_uring_setup+0x1dd1/0x2980 [ 1268.852367] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1268.853538] ? wait_for_completion_io+0x270/0x270 [ 1268.854696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1268.855887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1268.857073] do_syscall_64+0x33/0x40 [ 1268.857925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1268.859108] RIP: 0033:0x7feb2b3bab19 [ 1268.859958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1268.864189] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1268.865937] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1268.867612] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1268.869267] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1268.870927] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1268.872621] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:59:45 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 24) 01:59:45 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:45 executing program 2: fork() (fail_nth: 23) 01:59:45 executing program 4: fork() (fail_nth: 27) 01:59:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1285.344159] FAULT_INJECTION: forcing a failure. [ 1285.344159] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.347206] CPU: 0 PID: 13617 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1285.348818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.350767] Call Trace: [ 1285.351387] dump_stack+0x107/0x167 [ 1285.352242] should_fail.cold+0x5/0xa [ 1285.353137] ? create_object.isra.0+0x3a/0xa30 [ 1285.354216] should_failslab+0x5/0x20 [ 1285.355107] kmem_cache_alloc+0x5b/0x310 [ 1285.356066] create_object.isra.0+0x3a/0xa30 [ 1285.357107] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.358308] kmem_cache_alloc+0x159/0x310 [ 1285.359297] copy_process+0x1c65/0x78b0 [ 1285.360226] ? __lock_acquire+0xbb1/0x5b00 [ 1285.361255] ? __cleanup_sighand+0xb0/0xb0 [ 1285.362243] ? perf_trace_lock+0xac/0x490 [ 1285.363218] ? __lockdep_reset_lock+0x180/0x180 [ 1285.364311] ? find_held_lock+0x2c/0x110 [ 1285.365261] kernel_clone+0xe7/0x980 [ 1285.366146] ? lock_downgrade+0x6d0/0x6d0 [ 1285.367113] ? find_held_lock+0x2c/0x110 [ 1285.368057] ? create_io_thread+0xf0/0xf0 [ 1285.369027] ? ksys_write+0x12d/0x260 [ 1285.369941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.371074] __do_sys_fork+0x8a/0xc0 [ 1285.371949] ? kernel_thread+0xf0/0xf0 [ 1285.372877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.374107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.375308] ? trace_hardirqs_on+0x5b/0x180 [ 1285.376320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.377520] do_syscall_64+0x33/0x40 [ 1285.378398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.379599] RIP: 0033:0x7f3592ea1b19 [ 1285.380459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.384724] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1285.386481] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1285.388118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.389761] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.391417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.393056] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:59:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1285.400614] FAULT_INJECTION: forcing a failure. [ 1285.400614] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.402947] CPU: 1 PID: 13625 Comm: syz-executor.6 Not tainted 5.10.262 #1 01:59:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1285.404300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.406074] Call Trace: [ 1285.406588] dump_stack+0x107/0x167 [ 1285.407297] should_fail.cold+0x5/0xa [ 1285.408038] ? create_object.isra.0+0x3a/0xa30 [ 1285.408924] should_failslab+0x5/0x20 [ 1285.409663] kmem_cache_alloc+0x5b/0x310 [ 1285.410465] create_object.isra.0+0x3a/0xa30 [ 1285.411308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.411473] FAULT_INJECTION: forcing a failure. [ 1285.411473] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.412297] kmem_cache_alloc_trace+0x151/0x320 [ 1285.412326] io_uring_alloc_task_context+0x99/0x6a0 [ 1285.412347] ? io_import_iovec+0x1120/0x1120 [ 1285.412385] io_uring_setup+0x1dd1/0x2980 [ 1285.412414] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1285.412429] ? wait_for_completion_io+0x270/0x270 [ 1285.412473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.412493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.412517] do_syscall_64+0x33/0x40 [ 1285.412537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.412548] RIP: 0033:0x7feb2b3bab19 [ 1285.412564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.412575] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1285.412594] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1285.412605] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1285.412615] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1285.412625] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1285.412636] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1285.449679] CPU: 0 PID: 13627 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1285.451306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.453206] Call Trace: [ 1285.453830] dump_stack+0x107/0x167 [ 1285.454677] should_fail.cold+0x5/0xa [ 1285.455574] ? vm_area_dup+0x78/0x290 [ 1285.456451] should_failslab+0x5/0x20 [ 1285.457339] kmem_cache_alloc+0x5b/0x310 [ 1285.458309] vm_area_dup+0x78/0x290 [ 1285.459168] ? __lock_acquire+0xbb1/0x5b00 [ 1285.460184] ? perf_trace_lock+0xac/0x490 [ 1285.461147] ? SOFTIRQ_verbose+0x10/0x10 [ 1285.462111] ? __lockdep_reset_lock+0x180/0x180 [ 1285.463198] ? vm_area_alloc+0x110/0x110 [ 1285.464135] ? find_held_lock+0x2c/0x110 [ 1285.465081] ? get_mm_exe_file+0x139/0x310 [ 1285.466060] ? lock_downgrade+0x6d0/0x6d0 [ 1285.467021] ? down_write_nested+0xe4/0x160 [ 1285.468015] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1285.469188] ? get_mm_exe_file+0x162/0x310 [ 1285.470169] copy_process+0x298b/0x78b0 [ 1285.471129] ? __cleanup_sighand+0xb0/0xb0 [ 1285.472108] ? perf_trace_lock+0xac/0x490 [ 1285.473089] ? find_held_lock+0x2c/0x110 [ 1285.474043] kernel_clone+0xe7/0x980 [ 1285.474896] ? lock_downgrade+0x6d0/0x6d0 [ 1285.475848] ? find_held_lock+0x2c/0x110 [ 1285.476776] ? create_io_thread+0xf0/0xf0 [ 1285.477724] ? ksys_write+0x12d/0x260 [ 1285.478616] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.479727] __do_sys_fork+0x8a/0xc0 [ 1285.480575] ? kernel_thread+0xf0/0xf0 [ 1285.481487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.482699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.483856] ? trace_hardirqs_on+0x5b/0x180 [ 1285.484837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.486011] do_syscall_64+0x33/0x40 [ 1285.486851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.488006] RIP: 0033:0x7febfa601b19 [ 1285.488853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.492997] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1285.494718] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1285.496320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.497931] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.499539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.501146] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:59:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:45 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:45 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 25) [ 1285.621830] FAULT_INJECTION: forcing a failure. [ 1285.621830] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.623876] CPU: 1 PID: 13668 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1285.625063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.626487] Call Trace: [ 1285.626946] dump_stack+0x107/0x167 [ 1285.627568] should_fail.cold+0x5/0xa [ 1285.628229] ? create_object.isra.0+0x3a/0xa30 [ 1285.629005] should_failslab+0x5/0x20 [ 1285.629661] kmem_cache_alloc+0x5b/0x310 [ 1285.630367] create_object.isra.0+0x3a/0xa30 [ 1285.631135] kmemleak_alloc_percpu+0xa0/0x100 [ 1285.631912] pcpu_alloc+0x4e2/0x1240 [ 1285.632568] __percpu_counter_init+0x10d/0x2d0 [ 1285.633350] io_uring_alloc_task_context+0xcc/0x6a0 [ 1285.634216] ? io_import_iovec+0x1120/0x1120 [ 1285.634979] io_uring_setup+0x1dd1/0x2980 [ 1285.635694] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1285.636549] ? wait_for_completion_io+0x270/0x270 [ 1285.637383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.638254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.639125] do_syscall_64+0x33/0x40 [ 1285.639757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.640639] RIP: 0033:0x7feb2b3bab19 [ 1285.641272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.644381] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1285.645665] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1285.646878] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1285.648070] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1285.649268] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1285.650472] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:59:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:59:45 executing program 2: fork() (fail_nth: 24) 01:59:45 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:59:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1285.742183] FAULT_INJECTION: forcing a failure. [ 1285.742183] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.743959] CPU: 1 PID: 13716 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1285.745027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.746303] Call Trace: [ 1285.746722] dump_stack+0x107/0x167 [ 1285.747290] should_fail.cold+0x5/0xa [ 1285.747876] ? copy_process+0x2514/0x78b0 [ 1285.748522] should_failslab+0x5/0x20 [ 1285.749108] kmem_cache_alloc+0x5b/0x310 [ 1285.749757] copy_process+0x2514/0x78b0 [ 1285.750396] ? __lock_acquire+0xbb1/0x5b00 [ 1285.751093] ? __cleanup_sighand+0xb0/0xb0 [ 1285.751746] ? perf_trace_lock+0xac/0x490 [ 1285.752401] ? __lockdep_reset_lock+0x180/0x180 [ 1285.753135] ? find_held_lock+0x2c/0x110 [ 1285.753782] kernel_clone+0xe7/0x980 [ 1285.754369] ? lock_downgrade+0x6d0/0x6d0 [ 1285.754996] ? find_held_lock+0x2c/0x110 [ 1285.755631] ? create_io_thread+0xf0/0xf0 [ 1285.756275] ? ksys_write+0x12d/0x260 [ 1285.756862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.757610] __do_sys_fork+0x8a/0xc0 [ 1285.758194] ? kernel_thread+0xf0/0xf0 [ 1285.758817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.759642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.760434] ? trace_hardirqs_on+0x5b/0x180 [ 1285.761129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.761963] do_syscall_64+0x33/0x40 [ 1285.762555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.763362] RIP: 0033:0x7f3592ea1b19 [ 1285.763955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.766785] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1285.767977] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1285.769081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.770179] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.771283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.772403] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:59:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:45 executing program 4: fork() (fail_nth: 28) 01:59:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 01:59:45 executing program 2: fork() (fail_nth: 25) [ 1285.915506] FAULT_INJECTION: forcing a failure. [ 1285.915506] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.917100] CPU: 1 PID: 13758 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1285.918056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.919181] Call Trace: [ 1285.919547] dump_stack+0x107/0x167 [ 1285.920045] should_fail.cold+0x5/0xa [ 1285.920563] ? create_object.isra.0+0x3a/0xa30 [ 1285.921186] should_failslab+0x5/0x20 [ 1285.921700] kmem_cache_alloc+0x5b/0x310 [ 1285.922267] create_object.isra.0+0x3a/0xa30 [ 1285.922864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.923557] kmem_cache_alloc+0x159/0x310 [ 1285.924135] vm_area_dup+0x78/0x290 [ 1285.924639] ? __lock_acquire+0xbb1/0x5b00 [ 1285.925235] ? perf_trace_lock+0xac/0x490 [ 1285.925795] ? SOFTIRQ_verbose+0x10/0x10 [ 1285.926352] ? __lockdep_reset_lock+0x180/0x180 [ 1285.926983] ? vm_area_alloc+0x110/0x110 [ 1285.927525] ? find_held_lock+0x2c/0x110 [ 1285.928075] ? get_mm_exe_file+0x139/0x310 [ 1285.928644] ? lock_downgrade+0x6d0/0x6d0 [ 1285.929202] ? down_write_nested+0xe4/0x160 [ 1285.929784] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1285.930473] ? get_mm_exe_file+0x162/0x310 [ 1285.931044] copy_process+0x298b/0x78b0 [ 1285.931612] ? __cleanup_sighand+0xb0/0xb0 [ 1285.932180] ? perf_trace_lock+0xac/0x490 [ 1285.932759] ? find_held_lock+0x2c/0x110 [ 1285.933314] kernel_clone+0xe7/0x980 [ 1285.933823] ? lock_downgrade+0x6d0/0x6d0 [ 1285.934385] ? find_held_lock+0x2c/0x110 [ 1285.934928] ? create_io_thread+0xf0/0xf0 [ 1285.935493] ? ksys_write+0x12d/0x260 [ 1285.936015] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.936676] __do_sys_fork+0x8a/0xc0 [ 1285.937180] ? kernel_thread+0xf0/0xf0 [ 1285.937713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.938428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.939114] ? trace_hardirqs_on+0x5b/0x180 [ 1285.939699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.940391] do_syscall_64+0x33/0x40 [ 1285.940890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1285.941578] RIP: 0033:0x7febfa601b19 [ 1285.942080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.944534] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1285.945563] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1285.946542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.947510] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.948476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.949427] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 01:59:46 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1285.983176] FAULT_INJECTION: forcing a failure. [ 1285.983176] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.984655] CPU: 1 PID: 13762 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1285.985550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.986630] Call Trace: [ 1285.986972] dump_stack+0x107/0x167 [ 1285.987443] should_fail.cold+0x5/0xa [ 1285.987936] ? create_object.isra.0+0x3a/0xa30 [ 1285.988521] should_failslab+0x5/0x20 [ 1285.989013] kmem_cache_alloc+0x5b/0x310 [ 1285.989550] create_object.isra.0+0x3a/0xa30 [ 1285.990122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.990791] kmem_cache_alloc+0x159/0x310 [ 1285.991329] copy_process+0x2514/0x78b0 [ 1285.991846] ? __lock_acquire+0xbb1/0x5b00 [ 1285.992407] ? __cleanup_sighand+0xb0/0xb0 [ 1285.992957] ? perf_trace_lock+0xac/0x490 [ 1285.993495] ? __lockdep_reset_lock+0x180/0x180 [ 1285.994102] ? find_held_lock+0x2c/0x110 [ 1285.994635] kernel_clone+0xe7/0x980 [ 1285.995112] ? lock_downgrade+0x6d0/0x6d0 [ 1285.995642] ? find_held_lock+0x2c/0x110 [ 1285.996163] ? create_io_thread+0xf0/0xf0 [ 1285.996692] ? ksys_write+0x12d/0x260 [ 1285.997185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.997813] __do_sys_fork+0x8a/0xc0 [ 1285.998296] ? kernel_thread+0xf0/0xf0 [ 1285.998806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.999475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.000130] ? trace_hardirqs_on+0x5b/0x180 [ 1286.000686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.001344] do_syscall_64+0x33/0x40 [ 1286.001830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1286.002491] RIP: 0033:0x7f3592ea1b19 [ 1286.002965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.005318] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1286.006295] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1286.007209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1286.008120] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.009030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.009946] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 01:59:46 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 26) 01:59:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1286.048282] FAULT_INJECTION: forcing a failure. [ 1286.048282] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.050991] CPU: 0 PID: 13767 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1286.052442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.054185] Call Trace: [ 1286.054742] dump_stack+0x107/0x167 [ 1286.055514] should_fail.cold+0x5/0xa [ 1286.056323] ? create_object.isra.0+0x3a/0xa30 [ 1286.057289] should_failslab+0x5/0x20 [ 1286.058100] kmem_cache_alloc+0x5b/0x310 [ 1286.058971] create_object.isra.0+0x3a/0xa30 [ 1286.059902] kmemleak_alloc_percpu+0xa0/0x100 [ 1286.060845] pcpu_alloc+0x4e2/0x1240 [ 1286.061640] __percpu_counter_init+0x10d/0x2d0 [ 1286.062616] io_uring_alloc_task_context+0xcc/0x6a0 [ 1286.063655] ? io_import_iovec+0x1120/0x1120 [ 1286.064592] io_uring_setup+0x1dd1/0x2980 [ 1286.065465] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1286.066524] ? wait_for_completion_io+0x270/0x270 [ 1286.067551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.068644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.069727] do_syscall_64+0x33/0x40 [ 1286.070510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1286.071571] RIP: 0033:0x7feb2b3bab19 [ 1286.072356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.076175] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1286.077753] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1286.079236] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1286.080718] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1286.082207] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1286.083692] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:59:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 01:59:46 executing program 4: fork() (fail_nth: 29) 01:59:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) lseek(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 01:59:46 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 27) [ 1286.221111] FAULT_INJECTION: forcing a failure. [ 1286.221111] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.223695] CPU: 0 PID: 13781 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1286.225066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.226704] Call Trace: [ 1286.227228] dump_stack+0x107/0x167 [ 1286.227950] should_fail.cold+0x5/0xa [ 1286.228707] ? create_object.isra.0+0x3a/0xa30 [ 1286.229605] should_failslab+0x5/0x20 [ 1286.230369] kmem_cache_alloc+0x5b/0x310 [ 1286.231177] create_object.isra.0+0x3a/0xa30 [ 1286.232041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1286.233050] kmem_cache_alloc+0x159/0x310 [ 1286.233894] copy_process+0x2514/0x78b0 [ 1286.234685] ? __lock_acquire+0xbb1/0x5b00 [ 1286.235545] ? __cleanup_sighand+0xb0/0xb0 [ 1286.236381] ? perf_trace_lock+0xac/0x490 [ 1286.237213] ? __lockdep_reset_lock+0x180/0x180 [ 1286.238151] ? find_held_lock+0x2c/0x110 [ 1286.238961] kernel_clone+0xe7/0x980 [ 1286.239685] FAULT_INJECTION: forcing a failure. [ 1286.239685] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.241853] ? lock_downgrade+0x6d0/0x6d0 [ 1286.241870] ? find_held_lock+0x2c/0x110 [ 1286.241889] ? create_io_thread+0xf0/0xf0 [ 1286.241909] ? ksys_write+0x12d/0x260 [ 1286.241938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1286.245820] __do_sys_fork+0x8a/0xc0 [ 1286.246546] ? kernel_thread+0xf0/0xf0 [ 1286.247329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.248347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.249349] ? trace_hardirqs_on+0x5b/0x180 [ 1286.250203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.251207] do_syscall_64+0x33/0x40 [ 1286.251931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1286.252934] RIP: 0033:0x7febfa601b19 [ 1286.253656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.257246] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1286.258728] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1286.260107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1286.261493] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.262885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.264267] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1286.265663] CPU: 1 PID: 13786 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1286.266495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.267461] Call Trace: [ 1286.267780] dump_stack+0x107/0x167 [ 1286.268212] should_fail.cold+0x5/0xa [ 1286.268677] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1286.269299] should_failslab+0x5/0x20 [ 1286.269745] kmem_cache_alloc_trace+0x55/0x320 [ 1286.270288] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1286.270878] ? io_import_iovec+0x1120/0x1120 [ 1286.271399] io_uring_setup+0x1dd1/0x2980 [ 1286.271888] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1286.272480] ? wait_for_completion_io+0x270/0x270 [ 1286.273058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.273674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.274284] do_syscall_64+0x33/0x40 [ 1286.274729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1286.275330] RIP: 0033:0x7feb2b3bab19 [ 1286.275769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.277910] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1286.278802] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1286.279634] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1286.280462] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1286.281292] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1286.282129] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 01:59:46 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:00:04 executing program 2: fork() (fail_nth: 26) 02:00:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:00:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:00:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 1) 02:00:04 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 28) 02:00:04 executing program 4: fork() (fail_nth: 30) 02:00:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:00:04 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1304.920197] FAULT_INJECTION: forcing a failure. [ 1304.920197] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.922535] CPU: 1 PID: 13899 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1304.923935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.925599] Call Trace: [ 1304.926136] dump_stack+0x107/0x167 [ 1304.926859] should_fail.cold+0x5/0xa [ 1304.927621] ? create_object.isra.0+0x3a/0xa30 [ 1304.928533] should_failslab+0x5/0x20 [ 1304.929313] kmem_cache_alloc+0x5b/0x310 [ 1304.930153] create_object.isra.0+0x3a/0xa30 [ 1304.931049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.932090] kmem_cache_alloc_trace+0x151/0x320 [ 1304.933029] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1304.934063] ? io_import_iovec+0x1120/0x1120 [ 1304.934970] io_uring_setup+0x1dd1/0x2980 [ 1304.935797] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1304.936811] ? wait_for_completion_io+0x270/0x270 [ 1304.937801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.938868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.939909] do_syscall_64+0x33/0x40 [ 1304.940662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.941700] RIP: 0033:0x7feb2b3bab19 [ 1304.942458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.946156] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1304.947683] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1304.949122] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1304.950567] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1304.951989] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1304.953417] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1304.956841] FAULT_INJECTION: forcing a failure. [ 1304.956841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1304.959206] CPU: 1 PID: 13901 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1304.960578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.962231] Call Trace: [ 1304.962741] dump_stack+0x107/0x167 [ 1304.963454] should_fail.cold+0x5/0xa [ 1304.964199] __alloc_pages_nodemask+0x182/0x600 [ 1304.965124] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1304.966331] alloc_pages_current+0x187/0x280 [ 1304.967185] __get_free_pages+0xc/0xa0 [ 1304.967941] pgd_alloc+0x84/0x4e0 [ 1304.968614] ? pgd_page_get_mm+0x40/0x40 [ 1304.969396] ? lockdep_init_map_type+0x2c7/0x780 [ 1304.970325] ? lockdep_init_map_type+0x2c7/0x780 [ 1304.971241] mm_init+0x670/0xab0 [ 1304.971898] copy_process+0x257b/0x78b0 [ 1304.972676] ? __lock_acquire+0xbb1/0x5b00 [ 1304.973520] ? __cleanup_sighand+0xb0/0xb0 [ 1304.974346] ? perf_trace_lock+0xac/0x490 [ 1304.975168] ? __lockdep_reset_lock+0x180/0x180 [ 1304.976075] ? find_held_lock+0x2c/0x110 [ 1304.976865] kernel_clone+0xe7/0x980 [ 1304.977580] ? lock_downgrade+0x6d0/0x6d0 [ 1304.978384] ? find_held_lock+0x2c/0x110 [ 1304.979165] ? create_io_thread+0xf0/0xf0 [ 1304.979957] ? ksys_write+0x12d/0x260 [ 1304.980682] FAULT_INJECTION: forcing a failure. [ 1304.980682] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.982791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.983720] __do_sys_fork+0x8a/0xc0 [ 1304.984428] ? kernel_thread+0xf0/0xf0 [ 1304.985193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.986206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.987191] ? trace_hardirqs_on+0x5b/0x180 [ 1304.988019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.989007] do_syscall_64+0x33/0x40 [ 1304.989719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.990703] RIP: 0033:0x7f3592ea1b19 [ 1304.991413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.994915] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1304.996360] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1304.997706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.999064] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.000401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.001739] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1305.003132] CPU: 0 PID: 13907 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1305.004752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.006636] Call Trace: [ 1305.007249] dump_stack+0x107/0x167 [ 1305.008081] should_fail.cold+0x5/0xa [ 1305.008954] ? create_object.isra.0+0x3a/0xa30 [ 1305.009985] should_failslab+0x5/0x20 [ 1305.010854] kmem_cache_alloc+0x5b/0x310 [ 1305.011789] create_object.isra.0+0x3a/0xa30 [ 1305.012774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.013925] kmem_cache_alloc+0x159/0x310 [ 1305.014871] vm_area_dup+0x78/0x290 [ 1305.015708] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1305.016744] ? lock_downgrade+0x6d0/0x6d0 [ 1305.017683] ? copy_page_range+0x24e9/0x3800 [ 1305.018719] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1305.019777] ? avc_has_extended_perms+0xf40/0xf40 [ 1305.020876] ? vm_area_alloc+0x110/0x110 [ 1305.021794] ? find_held_lock+0x2c/0x110 [ 1305.022714] ? selinux_vm_enough_memory+0x114/0x180 [ 1305.023837] ? selinux_sb_statfs+0x250/0x250 [ 1305.024816] ? percpu_counter_add_batch+0x8b/0x140 [ 1305.025928] ? __vm_enough_memory+0x184/0x360 [ 1305.026931] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1305.028079] copy_process+0x298b/0x78b0 [ 1305.029000] ? __cleanup_sighand+0xb0/0xb0 [ 1305.029947] ? perf_trace_lock+0xac/0x490 [ 1305.030908] ? find_held_lock+0x2c/0x110 [ 1305.031826] kernel_clone+0xe7/0x980 [ 1305.032676] ? lock_downgrade+0x6d0/0x6d0 [ 1305.033600] ? find_held_lock+0x2c/0x110 [ 1305.034542] ? create_io_thread+0xf0/0xf0 [ 1305.035483] ? ksys_write+0x12d/0x260 [ 1305.036369] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.037466] __do_sys_fork+0x8a/0xc0 [ 1305.038324] ? kernel_thread+0xf0/0xf0 [ 1305.039230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.040415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.041569] ? trace_hardirqs_on+0x5b/0x180 [ 1305.042576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.043745] do_syscall_64+0x33/0x40 [ 1305.044573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.045726] RIP: 0033:0x7febfa601b19 [ 1305.046580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.050713] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1305.052423] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1305.054047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1305.055653] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.057256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.058876] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1305.070285] FAULT_INJECTION: forcing a failure. [ 1305.070285] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.073124] CPU: 0 PID: 13910 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1305.074702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.076580] Call Trace: [ 1305.077186] dump_stack+0x107/0x167 [ 1305.078027] should_fail.cold+0x5/0xa [ 1305.078893] ? copy_process+0x3305/0x78b0 [ 1305.079827] should_failslab+0x5/0x20 [ 1305.080689] kmem_cache_alloc_node+0x55/0x330 [ 1305.081712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.082916] copy_process+0x3305/0x78b0 [ 1305.083833] ? __lock_acquire+0xbb1/0x5b00 [ 1305.084807] ? lock_downgrade+0x6d0/0x6d0 [ 1305.085762] ? __cleanup_sighand+0xb0/0xb0 [ 1305.086728] ? perf_trace_lock+0xac/0x490 [ 1305.087682] ? __lockdep_reset_lock+0x180/0x180 [ 1305.088742] ? find_held_lock+0x2c/0x110 [ 1305.089662] kernel_clone+0xe7/0x980 [ 1305.090523] ? lock_downgrade+0x6d0/0x6d0 [ 1305.091452] ? find_held_lock+0x2c/0x110 [ 1305.092375] ? create_io_thread+0xf0/0xf0 [ 1305.093307] ? ksys_write+0x12d/0x260 [ 1305.094186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.095298] __do_sys_fork+0x8a/0xc0 [ 1305.096140] ? kernel_thread+0xf0/0xf0 [ 1305.097041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.098239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.099397] ? trace_hardirqs_on+0x5b/0x180 [ 1305.100375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.101539] do_syscall_64+0x33/0x40 [ 1305.102557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.103871] RIP: 0033:0x7f8d9d7f2b19 [ 1305.104841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:00:05 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 29) [ 1305.108995] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1305.110807] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1305.112302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1305.113791] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.115302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.116802] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1305.162650] FAULT_INJECTION: forcing a failure. [ 1305.162650] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.164573] CPU: 1 PID: 13975 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1305.165757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.167164] Call Trace: [ 1305.167614] dump_stack+0x107/0x167 [ 1305.168211] should_fail.cold+0x5/0xa [ 1305.168879] ? create_object.isra.0+0x3a/0xa30 [ 1305.169668] should_failslab+0x5/0x20 [ 1305.170347] kmem_cache_alloc+0x5b/0x310 [ 1305.171053] create_object.isra.0+0x3a/0xa30 [ 1305.171809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.172680] kmem_cache_alloc_trace+0x151/0x320 [ 1305.173480] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1305.174347] ? io_import_iovec+0x1120/0x1120 [ 1305.175115] io_uring_setup+0x1dd1/0x2980 [ 1305.175827] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1305.176700] ? wait_for_completion_io+0x270/0x270 [ 1305.177547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.178452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.179333] do_syscall_64+0x33/0x40 [ 1305.179972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.180850] RIP: 0033:0x7feb2b3bab19 [ 1305.181490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.184620] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1305.185905] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1305.187110] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1305.188299] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1305.189494] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1305.190702] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:00:32 executing program 2: fork() (fail_nth: 27) 02:00:32 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 30) [ 1332.770184] FAULT_INJECTION: forcing a failure. [ 1332.770184] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.771550] CPU: 1 PID: 14027 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1332.772345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.773297] Call Trace: [ 1332.773607] dump_stack+0x107/0x167 [ 1332.774032] should_fail.cold+0x5/0xa [ 1332.774482] ? vm_area_dup+0x78/0x290 [ 1332.774921] should_failslab+0x5/0x20 [ 1332.775361] kmem_cache_alloc+0x5b/0x310 [ 1332.775839] vm_area_dup+0x78/0x290 [ 1332.776267] ? copy_page_range+0x24e9/0x3800 [ 1332.776801] ? vm_area_alloc+0x110/0x110 [ 1332.777273] ? find_held_lock+0x2c/0x110 [ 1332.777746] ? vm_iomap_memory+0x190/0x190 [ 1332.778240] ? __vma_link_rb+0x540/0x700 [ 1332.778719] copy_process+0x298b/0x78b0 [ 1332.779200] ? __cleanup_sighand+0xb0/0xb0 [ 1332.779686] ? perf_trace_lock+0xac/0x490 [ 1332.780177] ? find_held_lock+0x2c/0x110 [ 1332.780649] kernel_clone+0xe7/0x980 [ 1332.781081] ? lock_downgrade+0x6d0/0x6d0 [ 1332.781558] ? find_held_lock+0x2c/0x110 [ 1332.782023] ? create_io_thread+0xf0/0xf0 [ 1332.782510] ? ksys_write+0x12d/0x260 [ 1332.782960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1332.783524] __do_sys_fork+0x8a/0xc0 [ 1332.783952] ? kernel_thread+0xf0/0xf0 [ 1332.784411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.785023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.785620] ? trace_hardirqs_on+0x5b/0x180 [ 1332.786121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.786732] do_syscall_64+0x33/0x40 [ 1332.787177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.787806] RIP: 0033:0x7febfa601b19 [ 1332.788242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.790465] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1332.791379] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1332.792236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.793096] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.793962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.794828] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1332.799190] FAULT_INJECTION: forcing a failure. [ 1332.799190] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.800504] CPU: 1 PID: 14024 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1332.801332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.802336] Call Trace: 02:00:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:00:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:00:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:00:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:00:32 executing program 4: fork() (fail_nth: 31) 02:00:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 2) [ 1332.802658] dump_stack+0x107/0x167 [ 1332.803321] should_fail.cold+0x5/0xa [ 1332.803821] ? io_wq_create+0xeb/0xc00 [ 1332.804293] should_failslab+0x5/0x20 [ 1332.804752] __kmalloc+0x72/0x390 [ 1332.805179] io_wq_create+0xeb/0xc00 [ 1332.805634] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1332.806252] ? io_import_iovec+0x1120/0x1120 [ 1332.806786] ? io_apoll_task_func+0x2d0/0x2d0 [ 1332.807329] ? __io_req_find_next+0x300/0x300 [ 1332.807876] io_uring_setup+0x1dd1/0x2980 [ 1332.808380] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1332.808997] ? wait_for_completion_io+0x270/0x270 [ 1332.809603] FAULT_INJECTION: forcing a failure. [ 1332.809603] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.809616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.809634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.812371] do_syscall_64+0x33/0x40 [ 1332.812803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.813413] RIP: 0033:0x7feb2b3bab19 [ 1332.813844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.816055] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1332.816936] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1332.817803] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1332.818631] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1332.819489] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1332.820312] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1332.821190] CPU: 0 PID: 14038 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1332.821853] FAULT_INJECTION: forcing a failure. [ 1332.821853] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.822160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.824584] Call Trace: [ 1332.824958] dump_stack+0x107/0x167 [ 1332.825470] should_fail.cold+0x5/0xa [ 1332.826000] ? create_object.isra.0+0x3a/0xa30 [ 1332.826640] should_failslab+0x5/0x20 [ 1332.827171] kmem_cache_alloc+0x5b/0x310 [ 1332.827737] create_object.isra.0+0x3a/0xa30 [ 1332.828344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1332.829051] kmem_cache_alloc_node+0x169/0x330 [ 1332.829691] copy_process+0x3305/0x78b0 [ 1332.830247] ? __lock_acquire+0xbb1/0x5b00 [ 1332.830853] ? lock_downgrade+0x6d0/0x6d0 [ 1332.831433] ? __cleanup_sighand+0xb0/0xb0 [ 1332.832022] ? perf_trace_lock+0xac/0x490 [ 1332.832609] ? __lockdep_reset_lock+0x180/0x180 [ 1332.833264] ? find_held_lock+0x2c/0x110 [ 1332.833826] kernel_clone+0xe7/0x980 [ 1332.834348] ? lock_downgrade+0x6d0/0x6d0 [ 1332.834922] ? find_held_lock+0x2c/0x110 [ 1332.835481] ? create_io_thread+0xf0/0xf0 [ 1332.836056] ? ksys_write+0x12d/0x260 [ 1332.836590] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1332.837264] __do_sys_fork+0x8a/0xc0 [ 1332.837776] ? kernel_thread+0xf0/0xf0 [ 1332.838335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.839064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.839778] ? trace_hardirqs_on+0x5b/0x180 [ 1332.840380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.841095] do_syscall_64+0x33/0x40 [ 1332.841614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.842327] RIP: 0033:0x7f8d9d7f2b19 [ 1332.842849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.845403] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1332.846462] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1332.847451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.848440] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.849422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.850418] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1332.851414] CPU: 1 PID: 14037 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1332.852261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.853257] Call Trace: [ 1332.853578] dump_stack+0x107/0x167 [ 1332.854020] should_fail.cold+0x5/0xa [ 1332.854487] ? copy_process+0x2514/0x78b0 [ 1332.854986] should_failslab+0x5/0x20 [ 1332.855444] kmem_cache_alloc+0x5b/0x310 [ 1332.855937] copy_process+0x2514/0x78b0 [ 1332.856428] ? __lock_acquire+0xbb1/0x5b00 [ 1332.856949] ? __cleanup_sighand+0xb0/0xb0 [ 1332.857455] ? perf_trace_lock+0xac/0x490 [ 1332.857964] ? __lockdep_reset_lock+0x180/0x180 [ 1332.858540] ? find_held_lock+0x2c/0x110 [ 1332.859033] kernel_clone+0xe7/0x980 [ 1332.859477] ? lock_downgrade+0x6d0/0x6d0 [ 1332.859969] ? find_held_lock+0x2c/0x110 [ 1332.860454] ? create_io_thread+0xf0/0xf0 [ 1332.860952] ? ksys_write+0x12d/0x260 [ 1332.861417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1332.861995] __do_sys_fork+0x8a/0xc0 [ 1332.862452] ? kernel_thread+0xf0/0xf0 [ 1332.862929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.863559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.864178] ? trace_hardirqs_on+0x5b/0x180 [ 1332.864697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.865317] do_syscall_64+0x33/0x40 [ 1332.865764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.866382] RIP: 0033:0x7f3592ea1b19 [ 1332.866829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.869040] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1332.869954] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1332.870815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.871670] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.872515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.873371] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:00:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:00:33 executing program 4: fork() (fail_nth: 32) 02:00:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1332.969744] FAULT_INJECTION: forcing a failure. [ 1332.969744] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.971190] CPU: 1 PID: 14222 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1332.971982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.972928] Call Trace: [ 1332.973239] dump_stack+0x107/0x167 [ 1332.973660] should_fail.cold+0x5/0xa [ 1332.974105] ? create_object.isra.0+0x3a/0xa30 [ 1332.974641] should_failslab+0x5/0x20 [ 1332.975078] kmem_cache_alloc+0x5b/0x310 [ 1332.975556] create_object.isra.0+0x3a/0xa30 [ 1332.976056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1332.976649] kmem_cache_alloc+0x159/0x310 [ 1332.977136] vm_area_dup+0x78/0x290 [ 1332.977567] ? copy_page_range+0x24e9/0x3800 [ 1332.978098] ? vm_area_alloc+0x110/0x110 [ 1332.978572] ? find_held_lock+0x2c/0x110 [ 1332.979050] ? vm_iomap_memory+0x190/0x190 [ 1332.979548] ? __vma_link_rb+0x540/0x700 [ 1332.980020] copy_process+0x298b/0x78b0 [ 1332.980515] ? __cleanup_sighand+0xb0/0xb0 [ 1332.981000] ? perf_trace_lock+0xac/0x490 [ 1332.981496] ? find_held_lock+0x2c/0x110 [ 1332.981966] kernel_clone+0xe7/0x980 [ 1332.982401] ? lock_downgrade+0x6d0/0x6d0 [ 1332.982876] ? find_held_lock+0x2c/0x110 [ 1332.983346] ? create_io_thread+0xf0/0xf0 [ 1332.983826] ? ksys_write+0x12d/0x260 [ 1332.984272] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1332.984831] __do_sys_fork+0x8a/0xc0 [ 1332.985259] ? kernel_thread+0xf0/0xf0 [ 1332.985721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.986328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.986916] ? trace_hardirqs_on+0x5b/0x180 [ 1332.987414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.988008] do_syscall_64+0x33/0x40 [ 1332.988438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.989029] RIP: 0033:0x7febfa601b19 [ 1332.989459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.991581] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1332.992450] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1332.993262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.994117] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.995073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.995987] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1333.017097] cgroup: fork rejected by pids controller in /syz7 02:00:33 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 31) 02:00:33 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1333.076561] FAULT_INJECTION: forcing a failure. 02:00:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1333.076561] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.078102] CPU: 1 PID: 14250 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1333.078958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.079922] Call Trace: [ 1333.080234] dump_stack+0x107/0x167 [ 1333.080658] should_fail.cold+0x5/0xa [ 1333.081104] ? io_wq_create+0x6ef/0xc00 [ 1333.081563] should_failslab+0x5/0x20 [ 1333.082009] kmem_cache_alloc_node_trace+0x59/0x340 [ 1333.082593] io_wq_create+0x6ef/0xc00 [ 1333.083039] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1333.083627] ? io_import_iovec+0x1120/0x1120 [ 1333.084135] ? io_apoll_task_func+0x2d0/0x2d0 [ 1333.084650] ? __io_req_find_next+0x300/0x300 [ 1333.085177] io_uring_setup+0x1dd1/0x2980 [ 1333.085663] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1333.086250] ? wait_for_completion_io+0x270/0x270 [ 1333.086827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1333.087433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1333.088032] do_syscall_64+0x33/0x40 [ 1333.088465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1333.089059] RIP: 0033:0x7feb2b3bab19 [ 1333.089490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.091613] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1333.092494] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1333.093317] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1333.094138] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1333.094974] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1333.095797] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:00:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:00:33 executing program 4: fork() (fail_nth: 33) [ 1333.202626] FAULT_INJECTION: forcing a failure. [ 1333.202626] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.204311] CPU: 0 PID: 14263 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1333.205164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.206186] Call Trace: [ 1333.206529] dump_stack+0x107/0x167 [ 1333.206979] should_fail.cold+0x5/0xa [ 1333.207454] ? vm_area_dup+0x78/0x290 [ 1333.207922] should_failslab+0x5/0x20 [ 1333.208397] kmem_cache_alloc+0x5b/0x310 [ 1333.208905] vm_area_dup+0x78/0x290 [ 1333.209365] ? copy_page_range+0x24e9/0x3800 [ 1333.209933] ? vm_area_alloc+0x110/0x110 [ 1333.210442] ? find_held_lock+0x2c/0x110 [ 1333.210941] ? vm_iomap_memory+0x190/0x190 [ 1333.211468] ? __vma_link_rb+0x540/0x700 [ 1333.211967] copy_process+0x298b/0x78b0 [ 1333.212480] ? __cleanup_sighand+0xb0/0xb0 [ 1333.212996] ? perf_trace_lock+0xac/0x490 [ 1333.213524] ? find_held_lock+0x2c/0x110 [ 1333.214031] kernel_clone+0xe7/0x980 [ 1333.214496] ? lock_downgrade+0x6d0/0x6d0 [ 1333.214998] ? find_held_lock+0x2c/0x110 [ 1333.215492] ? create_io_thread+0xf0/0xf0 [ 1333.216001] ? ksys_write+0x12d/0x260 [ 1333.216472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1333.217065] __do_sys_fork+0x8a/0xc0 [ 1333.217519] ? kernel_thread+0xf0/0xf0 [ 1333.218010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1333.218659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1333.219286] ? trace_hardirqs_on+0x5b/0x180 [ 1333.219815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1333.220456] do_syscall_64+0x33/0x40 [ 1333.220918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1333.221545] RIP: 0033:0x7febfa601b19 [ 1333.222000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.224253] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1333.225184] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1333.226049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.226915] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.227793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.228663] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:00:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 3) 02:00:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1350.440987] FAULT_INJECTION: forcing a failure. [ 1350.440987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.443791] CPU: 1 PID: 14269 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1350.445415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.447352] Call Trace: [ 1350.447978] dump_stack+0x107/0x167 [ 1350.448839] should_fail.cold+0x5/0xa [ 1350.449734] __alloc_pages_nodemask+0x182/0x600 02:00:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:00:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1350.450827] ? lock_downgrade+0x6d0/0x6d0 [ 1350.452024] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1350.453466] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1350.454689] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1350.455786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.457006] copy_process+0x62b/0x78b0 [ 1350.457915] ? __lock_acquire+0xbb1/0x5b00 [ 1350.458912] ? lock_downgrade+0x6d0/0x6d0 [ 1350.459884] ? __cleanup_sighand+0xb0/0xb0 [ 1350.460858] ? perf_trace_lock+0xac/0x490 [ 1350.461834] ? __lockdep_reset_lock+0x180/0x180 [ 1350.462943] ? find_held_lock+0x2c/0x110 [ 1350.463892] kernel_clone+0xe7/0x980 [ 1350.464754] ? lock_downgrade+0x6d0/0x6d0 [ 1350.465709] ? find_held_lock+0x2c/0x110 [ 1350.466667] ? create_io_thread+0xf0/0xf0 [ 1350.467635] ? ksys_write+0x12d/0x260 02:00:50 executing program 2: fork() (fail_nth: 28) 02:00:50 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:00:50 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 32) 02:00:50 executing program 4: fork() (fail_nth: 34) [ 1350.468521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.469792] __do_sys_fork+0x8a/0xc0 [ 1350.470671] ? kernel_thread+0xf0/0xf0 [ 1350.471434] FAULT_INJECTION: forcing a failure. [ 1350.471434] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.471586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.474337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.475540] ? trace_hardirqs_on+0x5b/0x180 [ 1350.476545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.477739] do_syscall_64+0x33/0x40 [ 1350.478574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.479740] RIP: 0033:0x7f8d9d7f2b19 [ 1350.480605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.484924] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1350.486642] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1350.488298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.489973] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.491575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.493261] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1350.494986] CPU: 0 PID: 14275 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1350.495979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.497128] Call Trace: [ 1350.497510] dump_stack+0x107/0x167 [ 1350.498033] should_fail.cold+0x5/0xa [ 1350.498577] ? create_object.isra.0+0x3a/0xa30 [ 1350.499228] should_failslab+0x5/0x20 [ 1350.499767] kmem_cache_alloc+0x5b/0x310 [ 1350.500341] create_object.isra.0+0x3a/0xa30 [ 1350.500950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1350.501661] kmem_cache_alloc+0x159/0x310 [ 1350.502244] vm_area_dup+0x78/0x290 [ 1350.502778] ? __lock_acquire+0xbb1/0x5b00 [ 1350.503385] ? perf_trace_lock+0xac/0x490 [ 1350.503966] ? SOFTIRQ_verbose+0x10/0x10 [ 1350.504547] ? __lockdep_reset_lock+0x180/0x180 [ 1350.505201] ? vm_area_alloc+0x110/0x110 [ 1350.505764] ? find_held_lock+0x2c/0x110 [ 1350.506342] ? get_mm_exe_file+0x139/0x310 [ 1350.506939] ? lock_downgrade+0x6d0/0x6d0 [ 1350.507522] ? down_write_nested+0xe4/0x160 [ 1350.508130] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1350.508843] ? get_mm_exe_file+0x162/0x310 [ 1350.509435] copy_process+0x298b/0x78b0 [ 1350.510025] ? __cleanup_sighand+0xb0/0xb0 [ 1350.510629] ? perf_trace_lock+0xac/0x490 [ 1350.511227] ? find_held_lock+0x2c/0x110 [ 1350.511801] kernel_clone+0xe7/0x980 [ 1350.512323] ? lock_downgrade+0x6d0/0x6d0 [ 1350.512897] ? find_held_lock+0x2c/0x110 [ 1350.513465] ? create_io_thread+0xf0/0xf0 [ 1350.514044] ? ksys_write+0x12d/0x260 [ 1350.514605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.515281] __do_sys_fork+0x8a/0xc0 [ 1350.515803] ? kernel_thread+0xf0/0xf0 [ 1350.516364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.517097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.517811] ? trace_hardirqs_on+0x5b/0x180 [ 1350.518416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.519140] do_syscall_64+0x33/0x40 [ 1350.519684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.520318] RIP: 0033:0x7f3592ea1b19 [ 1350.520743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.522827] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1350.523688] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1350.524499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.525314] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.526130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.526947] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1350.527014] FAULT_INJECTION: forcing a failure. [ 1350.527014] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.530524] CPU: 1 PID: 14281 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1350.532167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.534030] Call Trace: [ 1350.534664] dump_stack+0x107/0x167 [ 1350.535531] should_fail.cold+0x5/0xa [ 1350.535657] FAULT_INJECTION: forcing a failure. [ 1350.535657] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.536438] ? create_object.isra.0+0x3a/0xa30 [ 1350.536459] should_failslab+0x5/0x20 [ 1350.536480] kmem_cache_alloc+0x5b/0x310 [ 1350.536502] ? io_wq_create+0x114/0xc00 [ 1350.536528] create_object.isra.0+0x3a/0xa30 [ 1350.536546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1350.536576] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1350.536608] io_wq_create+0x6ef/0xc00 [ 1350.536642] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1350.547139] ? io_import_iovec+0x1120/0x1120 [ 1350.548168] ? io_apoll_task_func+0x2d0/0x2d0 [ 1350.549234] ? __io_req_find_next+0x300/0x300 [ 1350.550300] io_uring_setup+0x1dd1/0x2980 [ 1350.551308] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1350.552540] ? wait_for_completion_io+0x270/0x270 [ 1350.553720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.554903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.556145] do_syscall_64+0x33/0x40 [ 1350.557031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.558259] RIP: 0033:0x7feb2b3bab19 [ 1350.559140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.563386] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1350.565184] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1350.566787] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1350.568473] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1350.570188] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1350.571784] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1350.573517] CPU: 0 PID: 14283 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1350.574343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.575292] Call Trace: [ 1350.575602] dump_stack+0x107/0x167 [ 1350.576021] should_fail.cold+0x5/0xa [ 1350.576459] ? create_object.isra.0+0x3a/0xa30 [ 1350.576977] should_failslab+0x5/0x20 [ 1350.577423] kmem_cache_alloc+0x5b/0x310 [ 1350.577890] create_object.isra.0+0x3a/0xa30 [ 1350.578390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1350.578981] kmem_cache_alloc+0x159/0x310 [ 1350.579460] vm_area_dup+0x78/0x290 [ 1350.579885] ? copy_page_range+0x24e9/0x3800 [ 1350.580416] ? vm_area_alloc+0x110/0x110 [ 1350.580877] ? find_held_lock+0x2c/0x110 [ 1350.581346] ? vm_iomap_memory+0x190/0x190 [ 1350.581849] ? __vma_link_rb+0x540/0x700 [ 1350.582324] copy_process+0x298b/0x78b0 [ 1350.582824] ? __cleanup_sighand+0xb0/0xb0 [ 1350.583316] ? perf_trace_lock+0xac/0x490 [ 1350.583801] ? find_held_lock+0x2c/0x110 [ 1350.584272] kernel_clone+0xe7/0x980 [ 1350.584697] ? lock_downgrade+0x6d0/0x6d0 [ 1350.585171] ? find_held_lock+0x2c/0x110 [ 1350.585637] ? create_io_thread+0xf0/0xf0 [ 1350.586107] ? ksys_write+0x12d/0x260 [ 1350.586558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.587113] __do_sys_fork+0x8a/0xc0 [ 1350.587539] ? kernel_thread+0xf0/0xf0 [ 1350.587992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.588589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.589174] ? trace_hardirqs_on+0x5b/0x180 [ 1350.589669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.590257] do_syscall_64+0x33/0x40 [ 1350.590690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.591282] RIP: 0033:0x7febfa601b19 [ 1350.591704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.593784] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1350.594654] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1350.595464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.596274] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.597081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.597891] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:00:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 4) 02:00:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:00:50 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 33) 02:00:50 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1350.741636] FAULT_INJECTION: forcing a failure. [ 1350.741636] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.743182] CPU: 0 PID: 14349 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1350.743968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.744908] Call Trace: [ 1350.745217] dump_stack+0x107/0x167 [ 1350.745636] should_fail.cold+0x5/0xa [ 1350.746070] ? prepare_creds+0x25/0x5e0 [ 1350.746532] should_failslab+0x5/0x20 [ 1350.746967] kmem_cache_alloc+0x5b/0x310 [ 1350.747433] ? lock_downgrade+0x6d0/0x6d0 [ 1350.747905] prepare_creds+0x25/0x5e0 [ 1350.748345] copy_creds+0x72/0x580 [ 1350.748753] copy_process+0xfef/0x78b0 [ 1350.749201] ? __lock_acquire+0xbb1/0x5b00 [ 1350.749688] ? lock_downgrade+0x6d0/0x6d0 [ 1350.750164] ? __cleanup_sighand+0xb0/0xb0 [ 1350.750656] ? perf_trace_lock+0xac/0x490 [ 1350.751133] ? __lockdep_reset_lock+0x180/0x180 [ 1350.751668] ? find_held_lock+0x2c/0x110 [ 1350.752133] kernel_clone+0xe7/0x980 [ 1350.752557] ? lock_downgrade+0x6d0/0x6d0 [ 1350.753024] ? find_held_lock+0x2c/0x110 [ 1350.753486] ? create_io_thread+0xf0/0xf0 [ 1350.753964] ? ksys_write+0x12d/0x260 [ 1350.754409] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.754976] __do_sys_fork+0x8a/0xc0 [ 1350.755400] ? kernel_thread+0xf0/0xf0 [ 1350.755853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.756451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.757037] ? trace_hardirqs_on+0x5b/0x180 [ 1350.757527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.758112] do_syscall_64+0x33/0x40 [ 1350.758548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.759130] RIP: 0033:0x7f8d9d7f2b19 [ 1350.759553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.761651] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1350.762522] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1350.763335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.764144] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.764951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.765760] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:00:50 executing program 2: fork() (fail_nth: 29) [ 1350.781487] FAULT_INJECTION: forcing a failure. [ 1350.781487] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.782988] CPU: 0 PID: 14362 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1350.783783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.784720] Call Trace: [ 1350.785033] dump_stack+0x107/0x167 [ 1350.785456] should_fail.cold+0x5/0xa [ 1350.785895] ? create_object.isra.0+0x3a/0xa30 [ 1350.786417] should_failslab+0x5/0x20 [ 1350.786863] kmem_cache_alloc+0x5b/0x310 [ 1350.787328] ? io_wq_create+0x114/0xc00 [ 1350.787782] create_object.isra.0+0x3a/0xa30 [ 1350.788278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1350.788865] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1350.789444] io_wq_create+0x6ef/0xc00 [ 1350.789893] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1350.790475] ? io_import_iovec+0x1120/0x1120 [ 1350.790986] ? io_apoll_task_func+0x2d0/0x2d0 [ 1350.791494] ? __io_req_find_next+0x300/0x300 [ 1350.792012] io_uring_setup+0x1dd1/0x2980 [ 1350.792508] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1350.793086] ? wait_for_completion_io+0x270/0x270 [ 1350.793658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.794263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.794859] do_syscall_64+0x33/0x40 [ 1350.795281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.795864] RIP: 0033:0x7feb2b3bab19 [ 1350.796288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.798376] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1350.799256] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1350.800070] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1350.800881] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1350.801690] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1350.802497] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:00:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1350.828328] FAULT_INJECTION: forcing a failure. [ 1350.828328] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.829970] CPU: 0 PID: 14400 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1350.830777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.831731] Call Trace: [ 1350.832044] dump_stack+0x107/0x167 [ 1350.832469] should_fail.cold+0x5/0xa [ 1350.832914] ? vm_area_dup+0x78/0x290 [ 1350.833350] should_failslab+0x5/0x20 [ 1350.833788] kmem_cache_alloc+0x5b/0x310 [ 1350.834258] vm_area_dup+0x78/0x290 [ 1350.834690] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1350.835233] ? lock_downgrade+0x6d0/0x6d0 [ 1350.835707] ? copy_page_range+0x24e9/0x3800 [ 1350.836227] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1350.836758] ? avc_has_extended_perms+0xf40/0xf40 [ 1350.837315] ? vm_area_alloc+0x110/0x110 [ 1350.837777] ? find_held_lock+0x2c/0x110 [ 1350.838245] ? selinux_vm_enough_memory+0x114/0x180 [ 1350.838832] ? selinux_sb_statfs+0x250/0x250 [ 1350.839345] ? percpu_counter_add_batch+0x8b/0x140 [ 1350.839909] ? __vm_enough_memory+0x184/0x360 [ 1350.840419] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1350.841009] copy_process+0x298b/0x78b0 [ 1350.841488] ? __cleanup_sighand+0xb0/0xb0 [ 1350.841974] ? perf_trace_lock+0xac/0x490 [ 1350.842463] ? find_held_lock+0x2c/0x110 [ 1350.842942] kernel_clone+0xe7/0x980 [ 1350.843373] ? lock_downgrade+0x6d0/0x6d0 [ 1350.843843] ? find_held_lock+0x2c/0x110 [ 1350.844315] ? create_io_thread+0xf0/0xf0 [ 1350.844792] ? ksys_write+0x12d/0x260 [ 1350.845233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.845787] __do_sys_fork+0x8a/0xc0 [ 1350.846213] ? kernel_thread+0xf0/0xf0 [ 1350.846687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.847298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.847884] ? trace_hardirqs_on+0x5b/0x180 [ 1350.848378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.848970] do_syscall_64+0x33/0x40 [ 1350.849398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.849982] RIP: 0033:0x7f3592ea1b19 [ 1350.850411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.852510] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1350.853382] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1350.854191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.855011] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.855828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.856646] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:01:10 executing program 4: fork() (fail_nth: 35) 02:01:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:01:10 executing program 2: fork() (fail_nth: 30) 02:01:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 5) 02:01:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:01:10 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:10 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 34) 02:01:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1370.651509] FAULT_INJECTION: forcing a failure. [ 1370.651509] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.654014] CPU: 1 PID: 14420 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1370.655525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.657320] Call Trace: [ 1370.657902] dump_stack+0x107/0x167 [ 1370.658705] should_fail.cold+0x5/0xa [ 1370.659542] ? create_object.isra.0+0x3a/0xa30 [ 1370.660694] should_failslab+0x5/0x20 [ 1370.661519] kmem_cache_alloc+0x5b/0x310 [ 1370.662766] create_object.isra.0+0x3a/0xa30 [ 1370.663925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.665543] kmem_cache_alloc+0x159/0x310 [ 1370.666663] prepare_creds+0x25/0x5e0 [ 1370.667854] copy_creds+0x72/0x580 [ 1370.668999] copy_process+0xfef/0x78b0 [ 1370.670254] ? __lock_acquire+0xbb1/0x5b00 [ 1370.671517] ? lock_downgrade+0x6d0/0x6d0 [ 1370.672622] ? __cleanup_sighand+0xb0/0xb0 [ 1370.673749] ? perf_trace_lock+0xac/0x490 [ 1370.674860] ? __lockdep_reset_lock+0x180/0x180 [ 1370.676103] ? find_held_lock+0x2c/0x110 [ 1370.677169] kernel_clone+0xe7/0x980 [ 1370.678164] ? lock_downgrade+0x6d0/0x6d0 [ 1370.679093] ? find_held_lock+0x2c/0x110 [ 1370.679671] FAULT_INJECTION: forcing a failure. [ 1370.679671] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.680172] ? create_io_thread+0xf0/0xf0 [ 1370.680194] ? ksys_write+0x12d/0x260 [ 1370.680224] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.680253] __do_sys_fork+0x8a/0xc0 [ 1370.680272] ? kernel_thread+0xf0/0xf0 [ 1370.680310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.680331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.680347] ? trace_hardirqs_on+0x5b/0x180 [ 1370.680370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.680388] do_syscall_64+0x33/0x40 [ 1370.680409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1370.680422] RIP: 0033:0x7f8d9d7f2b19 [ 1370.680441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.680452] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1370.680482] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1370.702108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.703659] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.705202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.706758] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1370.708373] CPU: 0 PID: 14424 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1370.709815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.711747] Call Trace: [ 1370.712302] dump_stack+0x107/0x167 [ 1370.713062] should_fail.cold+0x5/0xa [ 1370.713826] FAULT_INJECTION: forcing a failure. [ 1370.713826] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.716061] ? create_object.isra.0+0x3a/0xa30 [ 1370.716992] should_failslab+0x5/0x20 [ 1370.717770] kmem_cache_alloc+0x5b/0x310 [ 1370.718604] create_object.isra.0+0x3a/0xa30 [ 1370.719511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.720558] kmem_cache_alloc+0x159/0x310 [ 1370.721419] vm_area_dup+0x78/0x290 [ 1370.722176] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1370.723140] ? lock_downgrade+0x6d0/0x6d0 [ 1370.723984] ? copy_page_range+0x24e9/0x3800 [ 1370.724911] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1370.725874] ? avc_has_extended_perms+0xf40/0xf40 [ 1370.726881] ? vm_area_alloc+0x110/0x110 [ 1370.727704] ? find_held_lock+0x2c/0x110 [ 1370.728537] ? selinux_vm_enough_memory+0x114/0x180 [ 1370.729548] ? selinux_sb_statfs+0x250/0x250 [ 1370.730460] ? percpu_counter_add_batch+0x8b/0x140 [ 1370.731476] ? __vm_enough_memory+0x184/0x360 [ 1370.732385] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1370.733434] copy_process+0x298b/0x78b0 [ 1370.734295] ? __cleanup_sighand+0xb0/0xb0 [ 1370.735162] ? perf_trace_lock+0xac/0x490 [ 1370.736037] ? find_held_lock+0x2c/0x110 [ 1370.736870] kernel_clone+0xe7/0x980 [ 1370.737636] ? lock_downgrade+0x6d0/0x6d0 [ 1370.738479] ? find_held_lock+0x2c/0x110 [ 1370.739324] ? create_io_thread+0xf0/0xf0 [ 1370.740161] ? ksys_write+0x12d/0x260 [ 1370.740951] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.741946] __do_sys_fork+0x8a/0xc0 [ 1370.742704] ? kernel_thread+0xf0/0xf0 [ 1370.743521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.744577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.745619] ? trace_hardirqs_on+0x5b/0x180 [ 1370.746494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.747550] do_syscall_64+0x33/0x40 [ 1370.748322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1370.749351] RIP: 0033:0x7f3592ea1b19 [ 1370.750100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.753814] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1370.755357] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1370.756788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.758237] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.759676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.761109] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1370.762616] CPU: 1 PID: 14417 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1370.764199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.766006] Call Trace: [ 1370.766598] dump_stack+0x107/0x167 [ 1370.767414] should_fail.cold+0x5/0xa [ 1370.768349] ? create_object.isra.0+0x3a/0xa30 [ 1370.769345] should_failslab+0x5/0x20 [ 1370.770357] kmem_cache_alloc+0x5b/0x310 [ 1370.771314] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1370.772388] FAULT_INJECTION: forcing a failure. [ 1370.772388] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.772655] ? trace_hardirqs_on+0x5b/0x180 [ 1370.775867] create_object.isra.0+0x3a/0xa30 [ 1370.776826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.777942] kmem_cache_alloc_trace+0x151/0x320 [ 1370.778982] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1370.780165] io_uring_setup+0x14f6/0x2980 [ 1370.781084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1370.782174] ? wait_for_completion_io+0x270/0x270 [ 1370.783270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.784402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.785536] do_syscall_64+0x33/0x40 [ 1370.786344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1370.787473] RIP: 0033:0x7feb2b3bab19 [ 1370.788291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.792249] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1370.793904] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1370.795453] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1370.796989] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1370.798534] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1370.800080] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1370.801651] CPU: 0 PID: 14425 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1370.803123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.804850] Call Trace: [ 1370.805405] dump_stack+0x107/0x167 [ 1370.806172] should_fail.cold+0x5/0xa [ 1370.806978] ? vm_area_dup+0x78/0x290 [ 1370.807777] should_failslab+0x5/0x20 [ 1370.808569] kmem_cache_alloc+0x5b/0x310 [ 1370.809427] vm_area_dup+0x78/0x290 [ 1370.810212] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1370.811199] ? lock_downgrade+0x6d0/0x6d0 [ 1370.812065] ? copy_page_range+0x24e9/0x3800 [ 1370.812981] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1370.814100] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1370.815090] ? avc_has_extended_perms+0xf40/0xf40 [ 1370.816102] ? lock_downgrade+0x6d0/0x6d0 [ 1370.816972] ? vm_area_alloc+0x110/0x110 [ 1370.817831] ? find_held_lock+0x2c/0x110 [ 1370.818708] ? selinux_vm_enough_memory+0x114/0x180 [ 1370.819778] ? selinux_sb_statfs+0x250/0x250 [ 1370.820717] ? up_write+0x191/0x550 [ 1370.821501] ? percpu_counter_add_batch+0x8b/0x140 [ 1370.822531] ? __vm_enough_memory+0x184/0x360 [ 1370.823470] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1370.824545] copy_process+0x298b/0x78b0 [ 1370.825416] ? __cleanup_sighand+0xb0/0xb0 [ 1370.826298] ? perf_trace_lock+0xac/0x490 [ 1370.827202] ? find_held_lock+0x2c/0x110 [ 1370.828049] kernel_clone+0xe7/0x980 [ 1370.828837] ? lock_downgrade+0x6d0/0x6d0 [ 1370.829696] ? find_held_lock+0x2c/0x110 [ 1370.830521] ? create_io_thread+0xf0/0xf0 [ 1370.831393] ? ksys_write+0x12d/0x260 [ 1370.832182] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.833184] __do_sys_fork+0x8a/0xc0 [ 1370.833955] ? kernel_thread+0xf0/0xf0 [ 1370.834784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.835872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.836929] ? trace_hardirqs_on+0x5b/0x180 [ 1370.837815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.838871] do_syscall_64+0x33/0x40 [ 1370.839648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1370.840685] RIP: 0033:0x7febfa601b19 [ 1370.841449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.845213] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1370.846768] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1370.848234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.849701] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.851156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.852605] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:01:11 executing program 2: fork() (fail_nth: 31) 02:01:11 executing program 4: fork() (fail_nth: 36) 02:01:11 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1371.019531] FAULT_INJECTION: forcing a failure. [ 1371.019531] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.022087] CPU: 1 PID: 14487 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1371.023606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.025402] Call Trace: [ 1371.025996] dump_stack+0x107/0x167 [ 1371.026810] should_fail.cold+0x5/0xa [ 1371.027645] ? vm_area_dup+0x78/0x290 [ 1371.028477] should_failslab+0x5/0x20 [ 1371.029310] kmem_cache_alloc+0x5b/0x310 [ 1371.030213] vm_area_dup+0x78/0x290 [ 1371.031043] ? copy_page_range+0x24e9/0x3800 [ 1371.032056] ? vm_area_alloc+0x110/0x110 [ 1371.032940] ? find_held_lock+0x2c/0x110 02:01:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1371.033834] ? vm_iomap_memory+0x190/0x190 [ 1371.034957] ? __vma_link_rb+0x540/0x700 [ 1371.035908] copy_process+0x298b/0x78b0 [ 1371.036827] ? __cleanup_sighand+0xb0/0xb0 [ 1371.037747] ? perf_trace_lock+0xac/0x490 [ 1371.038686] ? find_held_lock+0x2c/0x110 [ 1371.039590] kernel_clone+0xe7/0x980 [ 1371.040402] ? lock_downgrade+0x6d0/0x6d0 [ 1371.041307] ? find_held_lock+0x2c/0x110 [ 1371.042190] ? create_io_thread+0xf0/0xf0 [ 1371.043109] ? ksys_write+0x12d/0x260 [ 1371.043948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.045012] __do_sys_fork+0x8a/0xc0 [ 1371.045826] ? kernel_thread+0xf0/0xf0 [ 1371.046701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.047858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.049003] ? trace_hardirqs_on+0x5b/0x180 [ 1371.049949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.051093] do_syscall_64+0x33/0x40 [ 1371.051914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.053027] RIP: 0033:0x7f3592ea1b19 [ 1371.053845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.057841] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1371.059500] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1371.061053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.062603] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.064143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.065702] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1371.077457] FAULT_INJECTION: forcing a failure. [ 1371.077457] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.080086] CPU: 1 PID: 14506 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1371.081587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.083414] Call Trace: [ 1371.084005] dump_stack+0x107/0x167 [ 1371.084816] should_fail.cold+0x5/0xa [ 1371.085664] ? vm_area_dup+0x78/0x290 [ 1371.086496] should_failslab+0x5/0x20 [ 1371.087339] kmem_cache_alloc+0x5b/0x310 [ 1371.088241] vm_area_dup+0x78/0x290 [ 1371.089055] ? copy_page_range+0x24e9/0x3800 [ 1371.090064] ? vm_area_alloc+0x110/0x110 [ 1371.090965] ? find_held_lock+0x2c/0x110 [ 1371.091859] ? vm_iomap_memory+0x190/0x190 [ 1371.092798] ? __vma_link_rb+0x540/0x700 [ 1371.093694] copy_process+0x298b/0x78b0 [ 1371.094618] ? __cleanup_sighand+0xb0/0xb0 [ 1371.095547] ? perf_trace_lock+0xac/0x490 [ 1371.096479] ? find_held_lock+0x2c/0x110 [ 1371.097374] kernel_clone+0xe7/0x980 [ 1371.098190] ? lock_downgrade+0x6d0/0x6d0 [ 1371.099109] ? find_held_lock+0x2c/0x110 [ 1371.100012] ? create_io_thread+0xf0/0xf0 [ 1371.100918] ? ksys_write+0x12d/0x260 [ 1371.101766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.102851] __do_sys_fork+0x8a/0xc0 [ 1371.103667] ? kernel_thread+0xf0/0xf0 [ 1371.104552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.105697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.106818] ? trace_hardirqs_on+0x5b/0x180 [ 1371.107776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.108903] do_syscall_64+0x33/0x40 [ 1371.109720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.110845] RIP: 0033:0x7febfa601b19 [ 1371.111659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.115625] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1371.117285] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1371.118842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.120404] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.121946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.123502] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:01:11 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 35) 02:01:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1371.206484] FAULT_INJECTION: forcing a failure. [ 1371.206484] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.209024] CPU: 1 PID: 14544 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1371.210540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.212348] Call Trace: [ 1371.212940] dump_stack+0x107/0x167 [ 1371.213748] should_fail.cold+0x5/0xa [ 1371.214586] ? create_object.isra.0+0x3a/0xa30 [ 1371.215591] should_failslab+0x5/0x20 [ 1371.216427] kmem_cache_alloc+0x5b/0x310 [ 1371.217333] create_object.isra.0+0x3a/0xa30 [ 1371.218311] kmemleak_alloc_percpu+0xa0/0x100 [ 1371.219311] pcpu_alloc+0x4e2/0x1240 [ 1371.220151] ? io_async_queue_proc+0x80/0x80 [ 1371.221117] percpu_ref_init+0x31/0x3d0 [ 1371.221994] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1371.223188] io_uring_setup+0x14f6/0x2980 [ 1371.224109] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1371.225214] ? wait_for_completion_io+0x270/0x270 [ 1371.226300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.227458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.228588] do_syscall_64+0x33/0x40 02:01:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(0x0, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1371.229529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.230669] RIP: 0033:0x7feb2b3bab19 [ 1371.231651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.235603] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1371.237249] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1371.238797] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1371.240338] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1371.241883] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1371.243421] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:01:11 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 6) 02:01:11 executing program 2: fork() (fail_nth: 32) [ 1371.338470] FAULT_INJECTION: forcing a failure. [ 1371.338470] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.341058] CPU: 1 PID: 14552 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1371.342569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.344394] Call Trace: [ 1371.344990] dump_stack+0x107/0x167 [ 1371.345788] should_fail.cold+0x5/0xa [ 1371.346625] ? security_prepare_creds+0x112/0x190 [ 1371.347683] should_failslab+0x5/0x20 [ 1371.348506] __kmalloc+0x72/0x390 [ 1371.349280] security_prepare_creds+0x112/0x190 [ 1371.350303] prepare_creds+0x452/0x5e0 [ 1371.351167] copy_creds+0x72/0x580 [ 1371.351960] copy_process+0xfef/0x78b0 [ 1371.352833] ? __lock_acquire+0xbb1/0x5b00 [ 1371.353778] ? lock_downgrade+0x6d0/0x6d0 [ 1371.354692] ? __cleanup_sighand+0xb0/0xb0 [ 1371.355626] ? perf_trace_lock+0xac/0x490 [ 1371.356545] ? __lockdep_reset_lock+0x180/0x180 [ 1371.357574] ? find_held_lock+0x2c/0x110 [ 1371.358459] kernel_clone+0xe7/0x980 [ 1371.359290] ? lock_downgrade+0x6d0/0x6d0 [ 1371.360193] ? find_held_lock+0x2c/0x110 [ 1371.361081] ? create_io_thread+0xf0/0xf0 [ 1371.361996] ? ksys_write+0x12d/0x260 [ 1371.362848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.363903] __do_sys_fork+0x8a/0xc0 [ 1371.364725] ? kernel_thread+0xf0/0xf0 [ 1371.365610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.366774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.367898] ? trace_hardirqs_on+0x5b/0x180 [ 1371.368842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.369963] do_syscall_64+0x33/0x40 [ 1371.370800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.371921] RIP: 0033:0x7f8d9d7f2b19 [ 1371.372740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.376744] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1371.378411] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1371.379973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.381530] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.383110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.384661] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1371.418258] FAULT_INJECTION: forcing a failure. [ 1371.418258] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.420949] CPU: 1 PID: 14596 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1371.422444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.424254] Call Trace: [ 1371.424840] dump_stack+0x107/0x167 [ 1371.425645] should_fail.cold+0x5/0xa [ 1371.426476] ? create_object.isra.0+0x3a/0xa30 [ 1371.427477] should_failslab+0x5/0x20 [ 1371.428311] kmem_cache_alloc+0x5b/0x310 [ 1371.429209] create_object.isra.0+0x3a/0xa30 [ 1371.430169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1371.431303] kmem_cache_alloc+0x159/0x310 [ 1371.432217] vm_area_dup+0x78/0x290 [ 1371.433032] ? copy_page_range+0x24e9/0x3800 [ 1371.434040] ? vm_area_alloc+0x110/0x110 [ 1371.434937] ? find_held_lock+0x2c/0x110 [ 1371.435845] ? vm_iomap_memory+0x190/0x190 [ 1371.436789] ? __vma_link_rb+0x540/0x700 [ 1371.437687] copy_process+0x298b/0x78b0 [ 1371.438596] ? __cleanup_sighand+0xb0/0xb0 [ 1371.439531] ? perf_trace_lock+0xac/0x490 [ 1371.440462] ? find_held_lock+0x2c/0x110 [ 1371.441355] kernel_clone+0xe7/0x980 [ 1371.442173] ? lock_downgrade+0x6d0/0x6d0 [ 1371.443077] ? find_held_lock+0x2c/0x110 [ 1371.443967] ? create_io_thread+0xf0/0xf0 [ 1371.444864] ? ksys_write+0x12d/0x260 [ 1371.445714] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1371.446782] __do_sys_fork+0x8a/0xc0 [ 1371.447598] ? kernel_thread+0xf0/0xf0 [ 1371.448472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1371.449622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.450733] ? trace_hardirqs_on+0x5b/0x180 [ 1371.451686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1371.452812] do_syscall_64+0x33/0x40 [ 1371.453625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1371.454731] RIP: 0033:0x7f3592ea1b19 [ 1371.455551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.459531] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1371.461175] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1371.462723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.464290] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.465835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.467391] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1388.727036] FAULT_INJECTION: forcing a failure. [ 1388.727036] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.730339] CPU: 1 PID: 14669 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1388.732372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1388.734791] Call Trace: [ 1388.735575] dump_stack+0x107/0x167 [ 1388.736650] should_fail.cold+0x5/0xa [ 1388.737761] ? create_object.isra.0+0x3a/0xa30 [ 1388.739095] should_failslab+0x5/0x20 [ 1388.740186] kmem_cache_alloc+0x5b/0x310 [ 1388.741366] create_object.isra.0+0x3a/0xa30 [ 1388.742624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1388.744096] __kmalloc+0x16e/0x390 [ 1388.745134] security_prepare_creds+0x112/0x190 [ 1388.746491] prepare_creds+0x452/0x5e0 [ 1388.747642] copy_creds+0x72/0x580 [ 1388.748682] copy_process+0xfef/0x78b0 [ 1388.749825] ? __lock_acquire+0xbb1/0x5b00 [ 1388.751075] ? lock_downgrade+0x6d0/0x6d0 [ 1388.752282] ? __cleanup_sighand+0xb0/0xb0 [ 1388.753499] ? perf_trace_lock+0xac/0x490 [ 1388.754692] ? __lockdep_reset_lock+0x180/0x180 [ 1388.756060] ? find_held_lock+0x2c/0x110 [ 1388.757235] kernel_clone+0xe7/0x980 [ 1388.758303] ? lock_downgrade+0x6d0/0x6d0 [ 1388.759495] ? find_held_lock+0x2c/0x110 [ 1388.760675] ? create_io_thread+0xf0/0xf0 [ 1388.761850] ? ksys_write+0x12d/0x260 [ 1388.762955] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1388.764340] __do_sys_fork+0x8a/0xc0 [ 1388.765393] ? kernel_thread+0xf0/0xf0 [ 1388.766520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1388.768012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.769255] ? trace_hardirqs_on+0x5b/0x180 [ 1388.770308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.771566] do_syscall_64+0x33/0x40 [ 1388.772474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1388.773721] RIP: 0033:0x7f8d9d7f2b19 [ 1388.774630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.779131] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1388.780973] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1388.782697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.784421] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.786148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.787894] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1388.788139] FAULT_INJECTION: forcing a failure. [ 1388.788139] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.791298] CPU: 0 PID: 14664 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1388.792094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1388.793041] Call Trace: [ 1388.793355] dump_stack+0x107/0x167 [ 1388.793775] should_fail.cold+0x5/0xa [ 1388.794219] ? create_object.isra.0+0x3a/0xa30 [ 1388.794742] should_failslab+0x5/0x20 [ 1388.795190] kmem_cache_alloc+0x5b/0x310 [ 1388.795658] create_object.isra.0+0x3a/0xa30 [ 1388.796165] kmemleak_alloc_percpu+0xa0/0x100 [ 1388.796682] pcpu_alloc+0x4e2/0x1240 [ 1388.797125] ? io_async_queue_proc+0x80/0x80 [ 1388.797627] percpu_ref_init+0x31/0x3d0 [ 1388.798085] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1388.798707] io_uring_setup+0x14f6/0x2980 [ 1388.799200] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1388.799777] ? wait_for_completion_io+0x270/0x270 [ 1388.800348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1388.800952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.801545] do_syscall_64+0x33/0x40 [ 1388.801973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1388.802560] RIP: 0033:0x7feb2b3bab19 [ 1388.802997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.805087] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1388.805954] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1388.806765] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1388.807585] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1388.808401] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1388.809215] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:01:28 executing program 4: fork() (fail_nth: 37) 02:01:28 executing program 2: fork() (fail_nth: 33) 02:01:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(0x0, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:01:28 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 36) 02:01:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:01:28 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, 0x0, 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:01:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 7) 02:01:28 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1388.815454] FAULT_INJECTION: forcing a failure. [ 1388.815454] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.818306] CPU: 1 PID: 14677 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1388.819971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1388.821945] Call Trace: [ 1388.822582] dump_stack+0x107/0x167 [ 1388.823457] should_fail.cold+0x5/0xa [ 1388.824369] ? vm_area_dup+0x78/0x290 [ 1388.825297] should_failslab+0x5/0x20 [ 1388.826204] kmem_cache_alloc+0x5b/0x310 [ 1388.827206] vm_area_dup+0x78/0x290 [ 1388.828087] ? copy_page_range+0x24e9/0x3800 [ 1388.829162] ? vm_area_alloc+0x110/0x110 [ 1388.830130] ? find_held_lock+0x2c/0x110 [ 1388.831103] ? vm_iomap_memory+0x190/0x190 [ 1388.832121] ? __vma_link_rb+0x540/0x700 [ 1388.833085] copy_process+0x298b/0x78b0 [ 1388.834070] ? __cleanup_sighand+0xb0/0xb0 [ 1388.835070] ? perf_trace_lock+0xac/0x490 [ 1388.836083] ? find_held_lock+0x2c/0x110 [ 1388.837047] kernel_clone+0xe7/0x980 [ 1388.837947] ? lock_downgrade+0x6d0/0x6d0 [ 1388.838948] ? find_held_lock+0x2c/0x110 [ 1388.839902] ? create_io_thread+0xf0/0xf0 [ 1388.840871] ? ksys_write+0x12d/0x260 [ 1388.841781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1388.842924] __do_sys_fork+0x8a/0xc0 [ 1388.843848] ? kernel_thread+0xf0/0xf0 [ 1388.844810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1388.846075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.847351] ? trace_hardirqs_on+0x5b/0x180 [ 1388.848413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.849652] do_syscall_64+0x33/0x40 [ 1388.850555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1388.851818] RIP: 0033:0x7f3592ea1b19 [ 1388.852710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.857130] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1388.858951] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 02:01:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1388.860646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.862489] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.864198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1388.865904] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:01:28 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1388.880711] FAULT_INJECTION: forcing a failure. [ 1388.880711] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.882234] CPU: 0 PID: 14684 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1388.883038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1388.883988] Call Trace: [ 1388.884300] dump_stack+0x107/0x167 [ 1388.884719] should_fail.cold+0x5/0xa [ 1388.885164] ? anon_vma_clone+0xdc/0x590 [ 1388.885635] should_failslab+0x5/0x20 [ 1388.886070] kmem_cache_alloc+0x5b/0x310 [ 1388.886544] anon_vma_clone+0xdc/0x590 [ 1388.887010] anon_vma_fork+0x82/0x640 [ 1388.887445] ? __vm_enough_memory+0x184/0x360 [ 1388.887960] copy_process+0x72cd/0x78b0 [ 1388.888440] ? __cleanup_sighand+0xb0/0xb0 [ 1388.888927] ? perf_trace_lock+0xac/0x490 [ 1388.889419] ? find_held_lock+0x2c/0x110 [ 1388.889887] kernel_clone+0xe7/0x980 [ 1388.890316] ? lock_downgrade+0x6d0/0x6d0 [ 1388.890787] ? find_held_lock+0x2c/0x110 [ 1388.891263] ? create_io_thread+0xf0/0xf0 [ 1388.891739] ? ksys_write+0x12d/0x260 [ 1388.892181] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1388.892740] __do_sys_fork+0x8a/0xc0 [ 1388.893166] ? kernel_thread+0xf0/0xf0 [ 1388.893628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1388.894228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.894812] ? trace_hardirqs_on+0x5b/0x180 [ 1388.895320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1388.895906] do_syscall_64+0x33/0x40 [ 1388.896331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1388.896918] RIP: 0033:0x7febfa601b19 [ 1388.897344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.899446] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1388.900313] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1388.901119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.901931] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.902743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1388.903563] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:01:29 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 37) [ 1389.015396] FAULT_INJECTION: forcing a failure. [ 1389.015396] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.016937] CPU: 0 PID: 14869 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1389.017731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.018687] Call Trace: [ 1389.019009] dump_stack+0x107/0x167 [ 1389.019429] should_fail.cold+0x5/0xa [ 1389.019870] ? create_object.isra.0+0x3a/0xa30 [ 1389.020390] should_failslab+0x5/0x20 [ 1389.020825] kmem_cache_alloc+0x5b/0x310 [ 1389.021293] create_object.isra.0+0x3a/0xa30 [ 1389.021796] kmemleak_alloc_percpu+0xa0/0x100 [ 1389.022313] pcpu_alloc+0x4e2/0x1240 [ 1389.022749] ? io_async_queue_proc+0x80/0x80 [ 1389.023271] percpu_ref_init+0x31/0x3d0 [ 1389.023736] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1389.024360] io_uring_setup+0x14f6/0x2980 [ 1389.024841] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1389.025423] ? wait_for_completion_io+0x270/0x270 [ 1389.025992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.026596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.027199] do_syscall_64+0x33/0x40 [ 1389.027628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.028212] RIP: 0033:0x7feb2b3bab19 [ 1389.028639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.030743] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1389.031620] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1389.032441] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1389.033258] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1389.034070] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1389.034885] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:01:29 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 8) 02:01:49 executing program 2: fork() (fail_nth: 34) 02:01:49 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:49 executing program 4: fork() (fail_nth: 38) 02:01:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:01:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:01:49 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 38) 02:01:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(0x0, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1409.110629] FAULT_INJECTION: forcing a failure. [ 1409.110629] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.113363] CPU: 0 PID: 14903 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1409.114851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.116084] FAULT_INJECTION: forcing a failure. [ 1409.116084] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.116613] Call Trace: [ 1409.116648] dump_stack+0x107/0x167 [ 1409.120740] should_fail.cold+0x5/0xa [ 1409.121559] ? create_object.isra.0+0x3a/0xa30 [ 1409.122542] should_failslab+0x5/0x20 [ 1409.123370] kmem_cache_alloc+0x5b/0x310 [ 1409.124256] create_object.isra.0+0x3a/0xa30 [ 1409.125190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.126283] kmem_cache_alloc+0x159/0x310 [ 1409.127203] anon_vma_clone+0xdc/0x590 [ 1409.128056] anon_vma_fork+0x82/0x640 [ 1409.128875] ? __vm_enough_memory+0x184/0x360 [ 1409.129856] copy_process+0x72cd/0x78b0 [ 1409.130750] ? __cleanup_sighand+0xb0/0xb0 [ 1409.131658] ? perf_trace_lock+0xac/0x490 [ 1409.132565] ? find_held_lock+0x2c/0x110 [ 1409.133443] kernel_clone+0xe7/0x980 [ 1409.134241] ? lock_downgrade+0x6d0/0x6d0 [ 1409.135124] ? find_held_lock+0x2c/0x110 [ 1409.135993] ? create_io_thread+0xf0/0xf0 [ 1409.136890] ? ksys_write+0x12d/0x260 [ 1409.137715] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1409.138755] __do_sys_fork+0x8a/0xc0 [ 1409.139561] ? kernel_thread+0xf0/0xf0 [ 1409.140415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.141532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.142633] ? trace_hardirqs_on+0x5b/0x180 [ 1409.143565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.144670] do_syscall_64+0x33/0x40 [ 1409.145462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.146557] RIP: 0033:0x7febfa601b19 [ 1409.147368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.151261] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1409.152865] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1409.154363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.155884] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.157382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.158886] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1409.160439] CPU: 1 PID: 14905 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1409.162169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.164256] Call Trace: [ 1409.164970] dump_stack+0x107/0x167 [ 1409.165975] should_fail.cold+0x5/0xa [ 1409.166903] ? create_object.isra.0+0x3a/0xa30 [ 1409.168027] should_failslab+0x5/0x20 [ 1409.168954] kmem_cache_alloc+0x5b/0x310 [ 1409.169947] create_object.isra.0+0x3a/0xa30 [ 1409.171021] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.172267] kmem_cache_alloc_trace+0x151/0x320 [ 1409.173403] ? io_async_queue_proc+0x80/0x80 [ 1409.174480] percpu_ref_init+0xd8/0x3d0 [ 1409.175470] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1409.176791] io_uring_setup+0x14f6/0x2980 [ 1409.177815] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1409.179050] ? wait_for_completion_io+0x270/0x270 [ 1409.180256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.181524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.182772] do_syscall_64+0x33/0x40 [ 1409.183695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.184931] RIP: 0033:0x7feb2b3bab19 [ 1409.185834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.190302] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1409.192164] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1409.193886] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1409.195627] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1409.197334] FAULT_INJECTION: forcing a failure. [ 1409.197334] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.199965] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1409.201656] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1409.203392] CPU: 0 PID: 14912 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1409.204896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.206664] Call Trace: [ 1409.207235] dump_stack+0x107/0x167 [ 1409.208016] should_fail.cold+0x5/0xa [ 1409.208826] ? create_object.isra.0+0x3a/0xa30 [ 1409.209794] should_failslab+0x5/0x20 [ 1409.210602] kmem_cache_alloc+0x5b/0x310 [ 1409.211486] create_object.isra.0+0x3a/0xa30 [ 1409.212415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.213504] kmem_cache_alloc+0x159/0x310 [ 1409.214393] vm_area_dup+0x78/0x290 [ 1409.215190] ? copy_page_range+0x24e9/0x3800 [ 1409.216172] ? vm_area_alloc+0x110/0x110 [ 1409.217031] ? find_held_lock+0x2c/0x110 [ 1409.217911] ? vm_iomap_memory+0x190/0x190 [ 1409.218830] ? __vma_link_rb+0x540/0x700 [ 1409.219047] FAULT_INJECTION: forcing a failure. [ 1409.219047] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.219707] copy_process+0x298b/0x78b0 [ 1409.219774] ? __cleanup_sighand+0xb0/0xb0 [ 1409.224050] ? perf_trace_lock+0xac/0x490 [ 1409.224958] ? find_held_lock+0x2c/0x110 [ 1409.225829] kernel_clone+0xe7/0x980 [ 1409.226621] ? lock_downgrade+0x6d0/0x6d0 [ 1409.227510] ? find_held_lock+0x2c/0x110 [ 1409.228374] ? create_io_thread+0xf0/0xf0 [ 1409.229260] ? ksys_write+0x12d/0x260 [ 1409.230084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1409.231119] __do_sys_fork+0x8a/0xc0 [ 1409.231919] ? kernel_thread+0xf0/0xf0 [ 1409.232776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.233896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.234989] ? trace_hardirqs_on+0x5b/0x180 [ 1409.235913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.237002] do_syscall_64+0x33/0x40 [ 1409.237793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.238882] RIP: 0033:0x7f3592ea1b19 [ 1409.239682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.243577] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1409.245194] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1409.246710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.248230] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.249731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.251246] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1409.252803] CPU: 1 PID: 14915 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1409.254542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.256596] Call Trace: [ 1409.257249] dump_stack+0x107/0x167 [ 1409.258156] should_fail.cold+0x5/0xa [ 1409.259107] ? __delayacct_tsk_init+0x1b/0x80 [ 1409.260217] should_failslab+0x5/0x20 [ 1409.261140] kmem_cache_alloc+0x5b/0x310 [ 1409.262132] ? prepare_creds+0x466/0x5e0 [ 1409.263121] __delayacct_tsk_init+0x1b/0x80 [ 1409.264173] copy_process+0x3399/0x78b0 [ 1409.265150] ? __lock_acquire+0xbb1/0x5b00 [ 1409.266185] ? lock_downgrade+0x6d0/0x6d0 [ 1409.267208] ? __cleanup_sighand+0xb0/0xb0 [ 1409.268230] ? perf_trace_lock+0xac/0x490 [ 1409.269239] ? __lockdep_reset_lock+0x180/0x180 [ 1409.270372] ? find_held_lock+0x2c/0x110 [ 1409.271372] kernel_clone+0xe7/0x980 [ 1409.272291] ? lock_downgrade+0x6d0/0x6d0 [ 1409.273297] ? find_held_lock+0x2c/0x110 [ 1409.274281] ? create_io_thread+0xf0/0xf0 [ 1409.275304] ? ksys_write+0x12d/0x260 [ 1409.276233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1409.277409] __do_sys_fork+0x8a/0xc0 [ 1409.278312] ? kernel_thread+0xf0/0xf0 [ 1409.279286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.280559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.281781] ? trace_hardirqs_on+0x5b/0x180 [ 1409.282824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.284052] do_syscall_64+0x33/0x40 [ 1409.284942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.286155] RIP: 0033:0x7f8d9d7f2b19 [ 1409.287038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.291413] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1409.293205] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1409.294889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.296572] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.298256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.299959] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:01:49 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:01:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:01:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:01:49 executing program 4: fork() (fail_nth: 39) 02:01:49 executing program 2: fork() (fail_nth: 35) 02:01:49 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 39) 02:01:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:01:49 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1409.643924] FAULT_INJECTION: forcing a failure. [ 1409.643924] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.646957] CPU: 1 PID: 15031 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1409.648471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.650258] Call Trace: [ 1409.650838] dump_stack+0x107/0x167 [ 1409.651646] should_fail.cold+0x5/0xa [ 1409.652472] ? down_write+0xe0/0x160 [ 1409.653279] ? anon_vma_clone+0xdc/0x590 [ 1409.654161] should_failslab+0x5/0x20 [ 1409.654987] kmem_cache_alloc+0x5b/0x310 [ 1409.655886] anon_vma_clone+0xdc/0x590 [ 1409.656746] anon_vma_fork+0x82/0x640 [ 1409.657582] ? __vm_enough_memory+0x184/0x360 [ 1409.658566] copy_process+0x72cd/0x78b0 [ 1409.659488] ? __cleanup_sighand+0xb0/0xb0 [ 1409.660407] ? perf_trace_lock+0xac/0x490 [ 1409.661334] ? find_held_lock+0x2c/0x110 [ 1409.662229] kernel_clone+0xe7/0x980 [ 1409.663040] ? lock_downgrade+0x6d0/0x6d0 [ 1409.663941] ? find_held_lock+0x2c/0x110 [ 1409.664821] ? create_io_thread+0xf0/0xf0 [ 1409.665720] ? ksys_write+0x12d/0x260 [ 1409.666556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1409.667620] __do_sys_fork+0x8a/0xc0 [ 1409.668434] ? kernel_thread+0xf0/0xf0 [ 1409.669301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.670440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.671558] ? trace_hardirqs_on+0x5b/0x180 [ 1409.672496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.673613] do_syscall_64+0x33/0x40 [ 1409.674421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.675542] RIP: 0033:0x7febfa601b19 [ 1409.676366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.680368] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1409.682026] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1409.683573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.685105] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.686641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.688192] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1409.694126] FAULT_INJECTION: forcing a failure. [ 1409.694126] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.696656] CPU: 1 PID: 15034 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1409.698151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.699947] Call Trace: [ 1409.700520] dump_stack+0x107/0x167 [ 1409.701314] should_fail.cold+0x5/0xa [ 1409.702143] ? create_object.isra.0+0x3a/0xa30 [ 1409.703130] should_failslab+0x5/0x20 [ 1409.703959] kmem_cache_alloc+0x5b/0x310 [ 1409.704849] create_object.isra.0+0x3a/0xa30 [ 1409.705801] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.706911] kmem_cache_alloc_trace+0x151/0x320 [ 1409.707930] ? io_async_queue_proc+0x80/0x80 [ 1409.708888] percpu_ref_init+0xd8/0x3d0 [ 1409.709759] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1409.710938] io_uring_setup+0x14f6/0x2980 [ 1409.711864] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1409.712961] ? wait_for_completion_io+0x270/0x270 [ 1409.714037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.715185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.716309] do_syscall_64+0x33/0x40 [ 1409.717121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.718232] RIP: 0033:0x7feb2b3bab19 [ 1409.719039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.723032] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1409.724686] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1409.726230] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1409.727784] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1409.729330] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1409.730879] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1409.746239] FAULT_INJECTION: forcing a failure. [ 1409.746239] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.748545] CPU: 0 PID: 15040 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1409.749729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.751143] Call Trace: [ 1409.751609] dump_stack+0x107/0x167 [ 1409.752236] should_fail.cold+0x5/0xa [ 1409.752892] ? vm_area_dup+0x78/0x290 [ 1409.753538] should_failslab+0x5/0x20 [ 1409.754183] kmem_cache_alloc+0x5b/0x310 [ 1409.754882] vm_area_dup+0x78/0x290 [ 1409.755528] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1409.756314] ? lock_downgrade+0x6d0/0x6d0 [ 1409.757015] ? copy_page_range+0x24e9/0x3800 [ 1409.757760] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1409.758655] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1409.759450] ? avc_has_extended_perms+0xf40/0xf40 [ 1409.760277] ? lock_downgrade+0x6d0/0x6d0 [ 1409.760975] ? vm_area_alloc+0x110/0x110 [ 1409.761654] ? find_held_lock+0x2c/0x110 [ 1409.762342] ? selinux_vm_enough_memory+0x114/0x180 [ 1409.763190] ? selinux_sb_statfs+0x250/0x250 [ 1409.763920] ? up_write+0x191/0x550 [ 1409.764544] ? percpu_counter_add_batch+0x8b/0x140 [ 1409.765371] ? __vm_enough_memory+0x184/0x360 [ 1409.766124] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1409.767002] copy_process+0x298b/0x78b0 [ 1409.767722] ? __cleanup_sighand+0xb0/0xb0 [ 1409.768431] ? perf_trace_lock+0xac/0x490 [ 1409.769142] ? find_held_lock+0x2c/0x110 [ 1409.769842] kernel_clone+0xe7/0x980 [ 1409.770462] ? lock_downgrade+0x6d0/0x6d0 [ 1409.771149] ? find_held_lock+0x2c/0x110 [ 1409.771838] ? create_io_thread+0xf0/0xf0 [ 1409.772527] ? ksys_write+0x12d/0x260 [ 1409.773172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1409.773988] __do_sys_fork+0x8a/0xc0 [ 1409.774607] ? kernel_thread+0xf0/0xf0 [ 1409.775291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.776175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.777038] ? trace_hardirqs_on+0x5b/0x180 [ 1409.777761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.778621] do_syscall_64+0x33/0x40 [ 1409.779258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.780109] RIP: 0033:0x7f3592ea1b19 [ 1409.780719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.783778] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1409.785064] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1409.786252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.787443] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.788627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.789798] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:02:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 9) 02:02:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1426.756099] FAULT_INJECTION: forcing a failure. [ 1426.756099] name failslab, interval 1, probability 0, space 0, times 0 02:02:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:02:06 executing program 2: fork() (fail_nth: 36) 02:02:06 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:06 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 40) 02:02:06 executing program 4: fork() (fail_nth: 40) [ 1426.757628] CPU: 0 PID: 15158 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1426.758641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.759625] Call Trace: [ 1426.759938] dump_stack+0x107/0x167 [ 1426.760368] should_fail.cold+0x5/0xa [ 1426.760808] ? create_object.isra.0+0x3a/0xa30 [ 1426.761330] should_failslab+0x5/0x20 [ 1426.761771] kmem_cache_alloc+0x5b/0x310 [ 1426.762243] create_object.isra.0+0x3a/0xa30 [ 1426.762756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.763359] kmem_cache_alloc+0x159/0x310 [ 1426.763839] anon_vma_clone+0xdc/0x590 [ 1426.764291] anon_vma_fork+0x82/0x640 [ 1426.764735] ? __vm_enough_memory+0x184/0x360 [ 1426.765258] copy_process+0x72cd/0x78b0 [ 1426.765746] ? __cleanup_sighand+0xb0/0xb0 [ 1426.766235] ? perf_trace_lock+0xac/0x490 [ 1426.766731] ? find_held_lock+0x2c/0x110 [ 1426.767211] kernel_clone+0xe7/0x980 [ 1426.767665] ? lock_downgrade+0x6d0/0x6d0 [ 1426.768144] ? find_held_lock+0x2c/0x110 [ 1426.768613] ? create_io_thread+0xf0/0xf0 [ 1426.769112] ? ksys_write+0x12d/0x260 [ 1426.769557] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1426.770117] __do_sys_fork+0x8a/0xc0 [ 1426.770548] ? kernel_thread+0xf0/0xf0 [ 1426.771012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.771624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.772216] ? trace_hardirqs_on+0x5b/0x180 [ 1426.772713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.773306] do_syscall_64+0x33/0x40 [ 1426.773743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.774335] RIP: 0033:0x7febfa601b19 [ 1426.774763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.775613] FAULT_INJECTION: forcing a failure. [ 1426.775613] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.776881] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1426.780431] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1426.781254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.782075] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.782892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.783725] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1426.784572] CPU: 1 PID: 15161 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1426.786260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.788231] Call Trace: [ 1426.788925] dump_stack+0x107/0x167 [ 1426.789794] should_fail.cold+0x5/0xa [ 1426.790715] ? __d_alloc+0x2a/0x990 [ 1426.791581] should_failslab+0x5/0x20 [ 1426.792298] FAULT_INJECTION: forcing a failure. [ 1426.792298] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.792507] kmem_cache_alloc+0x5b/0x310 [ 1426.794703] __d_alloc+0x2a/0x990 [ 1426.795546] ? find_held_lock+0x2c/0x110 [ 1426.796533] d_alloc_pseudo+0x19/0x70 [ 1426.797438] alloc_file_pseudo+0xce/0x250 [ 1426.798411] ? trace_hardirqs_on+0x5b/0x180 [ 1426.799433] ? alloc_file+0x5a0/0x5a0 [ 1426.800356] anon_inode_getfile+0xc8/0x1f0 [ 1426.801362] io_uring_setup+0x138b/0x2980 [ 1426.802350] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1426.803555] ? wait_for_completion_io+0x270/0x270 [ 1426.804742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.805975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.807216] do_syscall_64+0x33/0x40 [ 1426.808102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.809315] RIP: 0033:0x7feb2b3bab19 [ 1426.810197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.814590] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1426.816407] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1426.818094] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1426.819791] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1426.821489] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1426.823181] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1426.824905] CPU: 0 PID: 15165 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1426.825697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.826664] Call Trace: [ 1426.826970] dump_stack+0x107/0x167 [ 1426.827398] should_fail.cold+0x5/0xa [ 1426.827836] ? create_object.isra.0+0x3a/0xa30 [ 1426.828357] should_failslab+0x5/0x20 [ 1426.828798] kmem_cache_alloc+0x5b/0x310 [ 1426.828883] FAULT_INJECTION: forcing a failure. [ 1426.828883] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.829271] create_object.isra.0+0x3a/0xa30 [ 1426.832329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.832904] kmem_cache_alloc+0x159/0x310 [ 1426.833369] ? prepare_creds+0x466/0x5e0 [ 1426.833835] __delayacct_tsk_init+0x1b/0x80 [ 1426.834319] copy_process+0x3399/0x78b0 [ 1426.834772] ? __lock_acquire+0xbb1/0x5b00 [ 1426.835256] ? lock_downgrade+0x6d0/0x6d0 [ 1426.835743] ? __cleanup_sighand+0xb0/0xb0 [ 1426.836222] ? perf_trace_lock+0xac/0x490 [ 1426.836699] ? __lockdep_reset_lock+0x180/0x180 [ 1426.837234] ? find_held_lock+0x2c/0x110 [ 1426.837709] kernel_clone+0xe7/0x980 [ 1426.838131] ? lock_downgrade+0x6d0/0x6d0 [ 1426.838603] ? find_held_lock+0x2c/0x110 [ 1426.839072] ? create_io_thread+0xf0/0xf0 [ 1426.839554] ? ksys_write+0x12d/0x260 [ 1426.839992] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1426.840549] __do_sys_fork+0x8a/0xc0 [ 1426.840973] ? kernel_thread+0xf0/0xf0 [ 1426.841426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.842023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.842605] ? trace_hardirqs_on+0x5b/0x180 [ 1426.843099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.843701] do_syscall_64+0x33/0x40 [ 1426.844123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.844706] RIP: 0033:0x7f8d9d7f2b19 [ 1426.845125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.847228] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1426.848120] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1426.848928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.849739] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.850570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.851396] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1426.852245] CPU: 1 PID: 15163 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1426.853882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.855836] Call Trace: [ 1426.856451] dump_stack+0x107/0x167 [ 1426.857306] should_fail.cold+0x5/0xa [ 1426.858214] ? create_object.isra.0+0x3a/0xa30 [ 1426.859281] should_failslab+0x5/0x20 [ 1426.860187] kmem_cache_alloc+0x5b/0x310 [ 1426.861151] create_object.isra.0+0x3a/0xa30 [ 1426.862184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.863389] kmem_cache_alloc+0x159/0x310 [ 1426.864388] vm_area_dup+0x78/0x290 [ 1426.865251] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1426.866342] ? lock_downgrade+0x6d0/0x6d0 [ 1426.867318] ? copy_page_range+0x24e9/0x3800 [ 1426.868367] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1426.869618] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1426.870730] ? avc_has_extended_perms+0xf40/0xf40 [ 1426.871875] ? lock_downgrade+0x6d0/0x6d0 [ 1426.872849] ? vm_area_alloc+0x110/0x110 [ 1426.873800] ? find_held_lock+0x2c/0x110 [ 1426.874767] ? selinux_vm_enough_memory+0x114/0x180 [ 1426.875967] ? selinux_sb_statfs+0x250/0x250 [ 1426.877015] ? up_write+0x191/0x550 [ 1426.877879] ? percpu_counter_add_batch+0x8b/0x140 [ 1426.879055] ? __vm_enough_memory+0x184/0x360 [ 1426.880109] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1426.881326] copy_process+0x298b/0x78b0 [ 1426.882307] ? __cleanup_sighand+0xb0/0xb0 [ 1426.883294] ? perf_trace_lock+0xac/0x490 [ 1426.884303] ? find_held_lock+0x2c/0x110 [ 1426.885256] kernel_clone+0xe7/0x980 [ 1426.886128] ? lock_downgrade+0x6d0/0x6d0 [ 1426.887112] ? find_held_lock+0x2c/0x110 [ 1426.888070] ? create_io_thread+0xf0/0xf0 [ 1426.889056] ? ksys_write+0x12d/0x260 [ 1426.889969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1426.891122] __do_sys_fork+0x8a/0xc0 [ 1426.892000] ? kernel_thread+0xf0/0xf0 [ 1426.892943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.894175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.895399] ? trace_hardirqs_on+0x5b/0x180 [ 1426.896411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.897632] do_syscall_64+0x33/0x40 [ 1426.898505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.899728] RIP: 0033:0x7f3592ea1b19 [ 1426.900595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.904893] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1426.906672] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1426.908354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.910033] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.911713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.913376] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:02:07 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:02:07 executing program 4: fork() (fail_nth: 41) 02:02:07 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1427.054564] FAULT_INJECTION: forcing a failure. [ 1427.054564] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.056054] CPU: 0 PID: 15382 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1427.056844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.057800] Call Trace: [ 1427.058110] dump_stack+0x107/0x167 [ 1427.058538] should_fail.cold+0x5/0xa [ 1427.058979] ? create_object.isra.0+0x3a/0xa30 [ 1427.059514] should_failslab+0x5/0x20 [ 1427.059951] kmem_cache_alloc+0x5b/0x310 [ 1427.060424] create_object.isra.0+0x3a/0xa30 [ 1427.060931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.061522] kmem_cache_alloc+0x159/0x310 [ 1427.062005] anon_vma_clone+0xdc/0x590 [ 1427.062463] anon_vma_fork+0x82/0x640 [ 1427.062900] ? __vm_enough_memory+0x184/0x360 [ 1427.063427] copy_process+0x72cd/0x78b0 [ 1427.063913] ? __cleanup_sighand+0xb0/0xb0 [ 1427.064397] ? perf_trace_lock+0xac/0x490 [ 1427.064888] ? find_held_lock+0x2c/0x110 [ 1427.065368] kernel_clone+0xe7/0x980 [ 1427.065800] ? lock_downgrade+0x6d0/0x6d0 [ 1427.066277] ? find_held_lock+0x2c/0x110 [ 1427.066745] ? create_io_thread+0xf0/0xf0 [ 1427.067230] ? ksys_write+0x12d/0x260 [ 1427.067690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1427.068253] __do_sys_fork+0x8a/0xc0 [ 1427.068681] ? kernel_thread+0xf0/0xf0 [ 1427.069149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.069759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.070361] ? trace_hardirqs_on+0x5b/0x180 [ 1427.070855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.071464] do_syscall_64+0x33/0x40 [ 1427.071898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.072489] RIP: 0033:0x7febfa601b19 [ 1427.072914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.075046] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1427.075934] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1427.076755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.077574] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1427.078394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.079209] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:02:07 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 41) [ 1427.160558] FAULT_INJECTION: forcing a failure. [ 1427.160558] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.162125] CPU: 0 PID: 15488 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1427.162927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.163888] Call Trace: [ 1427.164196] dump_stack+0x107/0x167 [ 1427.164618] should_fail.cold+0x5/0xa [ 1427.165055] ? create_object.isra.0+0x3a/0xa30 [ 1427.165581] should_failslab+0x5/0x20 [ 1427.166023] kmem_cache_alloc+0x5b/0x310 [ 1427.166496] create_object.isra.0+0x3a/0xa30 [ 1427.167007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.167601] kmem_cache_alloc_trace+0x151/0x320 [ 1427.168136] ? io_async_queue_proc+0x80/0x80 [ 1427.168647] percpu_ref_init+0xd8/0x3d0 [ 1427.169117] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1427.169737] io_uring_setup+0x14f6/0x2980 [ 1427.170218] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.170812] ? wait_for_completion_io+0x270/0x270 [ 1427.171384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.171998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.172598] do_syscall_64+0x33/0x40 [ 1427.173033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.173624] RIP: 0033:0x7feb2b3bab19 [ 1427.174055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.176187] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.177055] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1427.177882] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1427.178701] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1427.179522] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1427.180342] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:02:07 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 10) [ 1427.227681] FAULT_INJECTION: forcing a failure. [ 1427.227681] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.229242] CPU: 0 PID: 15494 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1427.230047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.230995] Call Trace: [ 1427.231311] dump_stack+0x107/0x167 [ 1427.231748] should_fail.cold+0x5/0xa [ 1427.232197] ? dup_fd+0x89/0xe40 [ 1427.232594] should_failslab+0x5/0x20 [ 1427.233034] kmem_cache_alloc+0x5b/0x310 [ 1427.233506] dup_fd+0x89/0xe40 [ 1427.233877] ? audit_filter_inodes+0x40/0x40 [ 1427.234386] ? security_task_alloc+0xe6/0x260 [ 1427.234914] copy_process+0x197c/0x78b0 [ 1427.235389] ? __lock_acquire+0xbb1/0x5b00 [ 1427.235896] ? __cleanup_sighand+0xb0/0xb0 [ 1427.236387] ? perf_trace_lock+0xac/0x490 [ 1427.236867] ? __lockdep_reset_lock+0x180/0x180 [ 1427.237402] ? find_held_lock+0x2c/0x110 [ 1427.237867] kernel_clone+0xe7/0x980 [ 1427.238295] ? lock_downgrade+0x6d0/0x6d0 [ 1427.238774] ? find_held_lock+0x2c/0x110 [ 1427.239247] ? create_io_thread+0xf0/0xf0 [ 1427.239741] ? ksys_write+0x12d/0x260 [ 1427.240189] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1427.240746] __do_sys_fork+0x8a/0xc0 [ 1427.241181] ? kernel_thread+0xf0/0xf0 [ 1427.241639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.242251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.242830] ? trace_hardirqs_on+0x5b/0x180 [ 1427.243323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.243922] do_syscall_64+0x33/0x40 [ 1427.244354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.244935] RIP: 0033:0x7f8d9d7f2b19 [ 1427.245357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.247448] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1427.248321] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1427.249139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.249974] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1427.250798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.251623] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:02:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:02:24 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 11) 02:02:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1444.603564] FAULT_INJECTION: forcing a failure. [ 1444.603564] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.605124] CPU: 0 PID: 15510 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1444.605941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.606918] Call Trace: [ 1444.607240] dump_stack+0x107/0x167 [ 1444.607684] should_fail.cold+0x5/0xa [ 1444.608135] ? create_object.isra.0+0x3a/0xa30 [ 1444.608666] should_failslab+0x5/0x20 [ 1444.609109] kmem_cache_alloc+0x5b/0x310 [ 1444.609589] create_object.isra.0+0x3a/0xa30 [ 1444.610098] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1444.610694] kmem_cache_alloc+0x159/0x310 [ 1444.611188] anon_vma_clone+0xdc/0x590 [ 1444.611665] anon_vma_fork+0x82/0x640 [ 1444.612112] ? __vm_enough_memory+0x184/0x360 [ 1444.612636] copy_process+0x72cd/0x78b0 [ 1444.613125] ? __cleanup_sighand+0xb0/0xb0 [ 1444.613618] ? perf_trace_lock+0xac/0x490 [ 1444.614116] ? find_held_lock+0x2c/0x110 [ 1444.614595] kernel_clone+0xe7/0x980 [ 1444.615031] ? lock_downgrade+0x6d0/0x6d0 [ 1444.615512] ? find_held_lock+0x2c/0x110 [ 1444.615992] ? create_io_thread+0xf0/0xf0 [ 1444.616473] ? ksys_write+0x12d/0x260 [ 1444.616922] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.617490] __do_sys_fork+0x8a/0xc0 [ 1444.617924] ? kernel_thread+0xf0/0xf0 [ 1444.618389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.619000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.619607] ? trace_hardirqs_on+0x5b/0x180 [ 1444.620111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.620712] do_syscall_64+0x33/0x40 [ 1444.621150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.621744] RIP: 0033:0x7febfa601b19 [ 1444.622175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.624314] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1444.624837] FAULT_INJECTION: forcing a failure. [ 1444.624837] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.625191] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1444.625209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.629631] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.630456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.631278] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1444.632138] CPU: 1 PID: 15512 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1444.633649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.635435] Call Trace: [ 1444.636029] dump_stack+0x107/0x167 [ 1444.636820] should_fail.cold+0x5/0xa [ 1444.637648] ? __alloc_file+0x21/0x320 02:02:24 executing program 4: fork() (fail_nth: 42) 02:02:24 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 42) 02:02:24 executing program 2: fork() (fail_nth: 37) [ 1444.638499] should_failslab+0x5/0x20 [ 1444.639508] kmem_cache_alloc+0x5b/0x310 [ 1444.640404] __alloc_file+0x21/0x320 [ 1444.641243] alloc_empty_file+0x6d/0x170 [ 1444.642130] alloc_file+0x5e/0x5a0 [ 1444.642935] alloc_file_pseudo+0x16a/0x250 [ 1444.643873] ? alloc_file+0x5a0/0x5a0 [ 1444.644759] anon_inode_getfile+0xc8/0x1f0 [ 1444.645719] io_uring_setup+0x138b/0x2980 [ 1444.646670] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1444.647816] ? wait_for_completion_io+0x270/0x270 [ 1444.648941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.650124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.651311] do_syscall_64+0x33/0x40 [ 1444.652167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.653337] RIP: 0033:0x7feb2b3bab19 [ 1444.654187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.658371] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1444.660109] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1444.661729] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1444.663352] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1444.664978] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1444.666600] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1444.671204] FAULT_INJECTION: forcing a failure. [ 1444.671204] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.673804] CPU: 1 PID: 15517 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1444.675384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.677294] Call Trace: [ 1444.677903] dump_stack+0x107/0x167 [ 1444.678740] should_fail.cold+0x5/0xa [ 1444.679639] ? anon_vma_clone+0xdc/0x590 [ 1444.680564] should_failslab+0x5/0x20 [ 1444.681444] kmem_cache_alloc+0x5b/0x310 [ 1444.682378] anon_vma_clone+0xdc/0x590 [ 1444.683290] anon_vma_fork+0x82/0x640 [ 1444.684178] ? __vm_enough_memory+0x184/0x360 [ 1444.685208] copy_process+0x72cd/0x78b0 [ 1444.686157] ? __cleanup_sighand+0xb0/0xb0 [ 1444.687119] ? perf_trace_lock+0xac/0x490 [ 1444.688100] ? find_held_lock+0x2c/0x110 [ 1444.689030] kernel_clone+0xe7/0x980 [ 1444.689886] ? lock_downgrade+0x6d0/0x6d0 [ 1444.690827] ? find_held_lock+0x2c/0x110 [ 1444.691767] ? create_io_thread+0xf0/0xf0 [ 1444.692719] ? ksys_write+0x12d/0x260 [ 1444.693605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.694711] __do_sys_fork+0x8a/0xc0 [ 1444.695581] ? kernel_thread+0xf0/0xf0 [ 1444.696500] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.697696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.698877] ? trace_hardirqs_on+0x5b/0x180 [ 1444.699870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.700174] FAULT_INJECTION: forcing a failure. [ 1444.700174] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.701036] do_syscall_64+0x33/0x40 [ 1444.701060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.701076] RIP: 0033:0x7f3592ea1b19 [ 1444.701100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.701111] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1444.701135] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1444.701147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.701159] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.701171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.701184] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1444.713160] CPU: 0 PID: 15503 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1444.713990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.714984] Call Trace: [ 1444.715305] dump_stack+0x107/0x167 [ 1444.715750] should_fail.cold+0x5/0xa [ 1444.716211] ? create_object.isra.0+0x3a/0xa30 [ 1444.716758] should_failslab+0x5/0x20 [ 1444.717217] kmem_cache_alloc+0x5b/0x310 [ 1444.717707] create_object.isra.0+0x3a/0xa30 [ 1444.718235] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1444.718845] kmem_cache_alloc+0x159/0x310 [ 1444.719347] dup_fd+0x89/0xe40 [ 1444.719741] ? audit_filter_inodes+0x40/0x40 [ 1444.720272] ? security_task_alloc+0xe6/0x260 [ 1444.720811] copy_process+0x197c/0x78b0 [ 1444.721293] ? __lock_acquire+0xbb1/0x5b00 [ 1444.721821] ? __cleanup_sighand+0xb0/0xb0 [ 1444.722329] ? perf_trace_lock+0xac/0x490 [ 1444.722831] ? __lockdep_reset_lock+0x180/0x180 [ 1444.723395] ? find_held_lock+0x2c/0x110 [ 1444.723891] kernel_clone+0xe7/0x980 [ 1444.724339] ? lock_downgrade+0x6d0/0x6d0 [ 1444.724842] ? find_held_lock+0x2c/0x110 [ 1444.725331] ? create_io_thread+0xf0/0xf0 [ 1444.725827] ? ksys_write+0x12d/0x260 [ 1444.726289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.726869] __do_sys_fork+0x8a/0xc0 [ 1444.727316] ? kernel_thread+0xf0/0xf0 [ 1444.727801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.728433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.729048] ? trace_hardirqs_on+0x5b/0x180 [ 1444.729568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.730188] do_syscall_64+0x33/0x40 [ 1444.730635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.731248] RIP: 0033:0x7f8d9d7f2b19 [ 1444.731699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.733891] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1444.734795] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1444.735650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.736499] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.737350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.738196] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:02:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:02:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:24 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x237, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:24 executing program 4: fork() (fail_nth: 43) 02:02:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1444.893579] FAULT_INJECTION: forcing a failure. [ 1444.893579] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.896171] CPU: 1 PID: 15632 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1444.897656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.899437] Call Trace: [ 1444.900040] dump_stack+0x107/0x167 [ 1444.900831] should_fail.cold+0x5/0xa [ 1444.901655] ? anon_vma_fork+0xf1/0x640 [ 1444.902512] should_failslab+0x5/0x20 [ 1444.903332] kmem_cache_alloc+0x5b/0x310 [ 1444.904243] anon_vma_fork+0xf1/0x640 [ 1444.905064] ? __vm_enough_memory+0x184/0x360 [ 1444.906039] copy_process+0x72cd/0x78b0 [ 1444.906941] ? __cleanup_sighand+0xb0/0xb0 [ 1444.907882] ? perf_trace_lock+0xac/0x490 [ 1444.908806] ? find_held_lock+0x2c/0x110 [ 1444.909686] kernel_clone+0xe7/0x980 [ 1444.910485] ? lock_downgrade+0x6d0/0x6d0 [ 1444.911379] ? find_held_lock+0x2c/0x110 [ 1444.912285] ? create_io_thread+0xf0/0xf0 [ 1444.913181] ? ksys_write+0x12d/0x260 [ 1444.914016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.915072] __do_sys_fork+0x8a/0xc0 [ 1444.915903] ? kernel_thread+0xf0/0xf0 [ 1444.916765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.917897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.919010] ? trace_hardirqs_on+0x5b/0x180 [ 1444.919970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.921080] do_syscall_64+0x33/0x40 [ 1444.921882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.922992] RIP: 0033:0x7febfa601b19 [ 1444.923824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.927790] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1444.929429] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1444.930964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.932523] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.934053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.935605] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:02:25 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 43) 02:02:25 executing program 2: fork() (fail_nth: 38) 02:02:25 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:25 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 12) [ 1445.004358] FAULT_INJECTION: forcing a failure. [ 1445.004358] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.004631] FAULT_INJECTION: forcing a failure. [ 1445.004631] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.006827] CPU: 1 PID: 15642 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1445.006840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.006846] Call Trace: [ 1445.006873] dump_stack+0x107/0x167 [ 1445.006896] should_fail.cold+0x5/0xa [ 1445.006919] ? create_object.isra.0+0x3a/0xa30 [ 1445.006938] should_failslab+0x5/0x20 [ 1445.006957] kmem_cache_alloc+0x5b/0x310 [ 1445.006986] create_object.isra.0+0x3a/0xa30 [ 1445.017195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.018291] kmem_cache_alloc+0x159/0x310 [ 1445.019188] __alloc_file+0x21/0x320 [ 1445.020020] alloc_empty_file+0x6d/0x170 [ 1445.020894] alloc_file+0x5e/0x5a0 [ 1445.021662] alloc_file_pseudo+0x16a/0x250 [ 1445.022575] ? alloc_file+0x5a0/0x5a0 [ 1445.023413] anon_inode_getfile+0xc8/0x1f0 [ 1445.024366] io_uring_setup+0x138b/0x2980 [ 1445.025266] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1445.026355] ? wait_for_completion_io+0x270/0x270 [ 1445.027420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.028579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.029694] do_syscall_64+0x33/0x40 [ 1445.030494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1445.031615] RIP: 0033:0x7feb2b3bab19 [ 1445.032418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.036371] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1445.037999] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1445.039521] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1445.041079] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1445.042598] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1445.044150] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1445.045707] CPU: 0 PID: 15641 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1445.046514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.047480] Call Trace: [ 1445.047810] dump_stack+0x107/0x167 [ 1445.048266] should_fail.cold+0x5/0xa [ 1445.048711] ? create_object.isra.0+0x3a/0xa30 [ 1445.049236] should_failslab+0x5/0x20 [ 1445.049671] kmem_cache_alloc+0x5b/0x310 [ 1445.050139] create_object.isra.0+0x3a/0xa30 [ 1445.050644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.051226] kmem_cache_alloc+0x159/0x310 [ 1445.051709] anon_vma_clone+0xdc/0x590 [ 1445.052172] anon_vma_fork+0x82/0x640 [ 1445.052620] ? __vm_enough_memory+0x184/0x360 [ 1445.053151] copy_process+0x72cd/0x78b0 [ 1445.053630] ? __cleanup_sighand+0xb0/0xb0 [ 1445.054113] ? perf_trace_lock+0xac/0x490 [ 1445.054605] ? find_held_lock+0x2c/0x110 [ 1445.055072] kernel_clone+0xe7/0x980 [ 1445.055499] ? lock_downgrade+0x6d0/0x6d0 [ 1445.055979] ? find_held_lock+0x2c/0x110 [ 1445.056447] ? create_io_thread+0xf0/0xf0 [ 1445.056919] ? ksys_write+0x12d/0x260 [ 1445.057363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.057923] __do_sys_fork+0x8a/0xc0 [ 1445.058366] ? kernel_thread+0xf0/0xf0 [ 1445.058826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.059426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.060022] ? trace_hardirqs_on+0x5b/0x180 [ 1445.060523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.061119] do_syscall_64+0x33/0x40 [ 1445.061548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1445.062136] RIP: 0033:0x7f3592ea1b19 [ 1445.062570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.064673] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1445.065555] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1445.066374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1445.067194] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.068012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.068831] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1445.098731] FAULT_INJECTION: forcing a failure. [ 1445.098731] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.100631] CPU: 0 PID: 15648 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1445.101424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.102366] Call Trace: [ 1445.102673] dump_stack+0x107/0x167 [ 1445.103095] should_fail.cold+0x5/0xa [ 1445.103532] ? alloc_fdtable+0x9e/0x2c0 [ 1445.103996] should_failslab+0x5/0x20 [ 1445.104433] kmem_cache_alloc_trace+0x55/0x320 [ 1445.104957] ? rwlock_bug.part.0+0x90/0x90 [ 1445.105446] alloc_fdtable+0x9e/0x2c0 [ 1445.105889] dup_fd+0x92d/0xe40 [ 1445.106278] copy_process+0x197c/0x78b0 [ 1445.106739] ? __lock_acquire+0xbb1/0x5b00 [ 1445.107257] ? __cleanup_sighand+0xb0/0xb0 [ 1445.107756] ? perf_trace_lock+0xac/0x490 [ 1445.108238] ? __lockdep_reset_lock+0x180/0x180 [ 1445.108783] ? find_held_lock+0x2c/0x110 [ 1445.109252] kernel_clone+0xe7/0x980 [ 1445.109680] ? lock_downgrade+0x6d0/0x6d0 [ 1445.110151] ? find_held_lock+0x2c/0x110 [ 1445.110616] ? create_io_thread+0xf0/0xf0 [ 1445.111103] ? ksys_write+0x12d/0x260 [ 1445.111560] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.112120] __do_sys_fork+0x8a/0xc0 [ 1445.112545] ? kernel_thread+0xf0/0xf0 [ 1445.113001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.113618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.114209] ? trace_hardirqs_on+0x5b/0x180 [ 1445.114716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.115304] do_syscall_64+0x33/0x40 [ 1445.115759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1445.116347] RIP: 0033:0x7f8d9d7f2b19 [ 1445.116805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.118936] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1445.119811] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1445.120657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1445.121479] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.122310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.123135] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1464.079438] FAULT_INJECTION: forcing a failure. [ 1464.079438] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.081880] CPU: 1 PID: 15759 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1464.083286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.084933] Call Trace: [ 1464.085458] dump_stack+0x107/0x167 [ 1464.086180] should_fail.cold+0x5/0xa [ 1464.086941] ? security_file_alloc+0x34/0x170 [ 1464.087845] should_failslab+0x5/0x20 [ 1464.088607] kmem_cache_alloc+0x5b/0x310 [ 1464.089418] security_file_alloc+0x34/0x170 [ 1464.090276] __alloc_file+0xb7/0x320 [ 1464.091020] alloc_empty_file+0x6d/0x170 [ 1464.091839] alloc_file+0x5e/0x5a0 [ 1464.092557] alloc_file_pseudo+0x16a/0x250 [ 1464.093398] ? alloc_file+0x5a0/0x5a0 [ 1464.094174] anon_inode_getfile+0xc8/0x1f0 [ 1464.095014] io_uring_setup+0x138b/0x2980 02:02:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:02:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:02:44 executing program 4: fork() (fail_nth: 44) 02:02:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 13) 02:02:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:44 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:44 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 44) 02:02:44 executing program 2: fork() (fail_nth: 39) [ 1464.095866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1464.097135] ? wait_for_completion_io+0x270/0x270 [ 1464.098167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.099205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.100247] do_syscall_64+0x33/0x40 [ 1464.101003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.102022] RIP: 0033:0x7feb2b3bab19 [ 1464.102762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.106425] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1464.107921] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1464.109324] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1464.110722] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1464.112120] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1464.113510] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1464.125733] FAULT_INJECTION: forcing a failure. [ 1464.125733] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.128056] CPU: 1 PID: 15760 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1464.129393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.130993] Call Trace: [ 1464.131524] dump_stack+0x107/0x167 [ 1464.132244] should_fail.cold+0x5/0xa [ 1464.132979] ? down_write+0xe0/0x160 [ 1464.133713] ? anon_vma_clone+0xdc/0x590 [ 1464.134501] should_failslab+0x5/0x20 [ 1464.135238] kmem_cache_alloc+0x5b/0x310 [ 1464.136060] anon_vma_clone+0xdc/0x590 [ 1464.136830] anon_vma_fork+0x82/0x640 [ 1464.137568] ? __vm_enough_memory+0x184/0x360 [ 1464.138445] copy_process+0x72cd/0x78b0 [ 1464.139260] ? __cleanup_sighand+0xb0/0xb0 [ 1464.140086] ? perf_trace_lock+0xac/0x490 [ 1464.140912] ? find_held_lock+0x2c/0x110 [ 1464.141705] kernel_clone+0xe7/0x980 [ 1464.142438] ? lock_downgrade+0x6d0/0x6d0 [ 1464.143241] ? find_held_lock+0x2c/0x110 [ 1464.144041] ? create_io_thread+0xf0/0xf0 [ 1464.144843] ? ksys_write+0x12d/0x260 [ 1464.145606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1464.146545] __do_sys_fork+0x8a/0xc0 [ 1464.147261] ? kernel_thread+0xf0/0xf0 [ 1464.148037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.149047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.150040] ? trace_hardirqs_on+0x5b/0x180 [ 1464.150877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.151882] do_syscall_64+0x33/0x40 [ 1464.152603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.153585] RIP: 0033:0x7f3592ea1b19 [ 1464.154303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.155622] FAULT_INJECTION: forcing a failure. [ 1464.155622] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.157832] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1464.157852] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1464.157863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.157874] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.157885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.157896] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1464.161086] FAULT_INJECTION: forcing a failure. [ 1464.161086] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.162886] CPU: 0 PID: 15769 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1464.173643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.175383] Call Trace: [ 1464.175955] dump_stack+0x107/0x167 [ 1464.176727] should_fail.cold+0x5/0xa [ 1464.177536] ? create_object.isra.0+0x3a/0xa30 [ 1464.178494] should_failslab+0x5/0x20 [ 1464.179299] kmem_cache_alloc+0x5b/0x310 [ 1464.180166] create_object.isra.0+0x3a/0xa30 [ 1464.181084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.182176] kmem_cache_alloc_trace+0x151/0x320 [ 1464.183153] ? rwlock_bug.part.0+0x90/0x90 [ 1464.184060] alloc_fdtable+0x9e/0x2c0 [ 1464.184863] dup_fd+0x92d/0xe40 [ 1464.185578] copy_process+0x197c/0x78b0 [ 1464.186432] ? __lock_acquire+0xbb1/0x5b00 [ 1464.187347] ? __cleanup_sighand+0xb0/0xb0 [ 1464.188239] ? perf_trace_lock+0xac/0x490 [ 1464.189115] ? __lockdep_reset_lock+0x180/0x180 [ 1464.190105] ? find_held_lock+0x2c/0x110 [ 1464.190969] kernel_clone+0xe7/0x980 [ 1464.191765] ? lock_downgrade+0x6d0/0x6d0 [ 1464.192640] ? find_held_lock+0x2c/0x110 [ 1464.193497] ? create_io_thread+0xf0/0xf0 [ 1464.194369] ? ksys_write+0x12d/0x260 [ 1464.195183] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1464.196213] __do_sys_fork+0x8a/0xc0 [ 1464.197005] ? kernel_thread+0xf0/0xf0 [ 1464.197839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.198948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.200034] ? trace_hardirqs_on+0x5b/0x180 [ 1464.200944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.202028] do_syscall_64+0x33/0x40 [ 1464.202806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.203901] RIP: 0033:0x7f8d9d7f2b19 [ 1464.204678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.208530] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1464.210111] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1464.211602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.213102] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.214609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.216120] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1464.217657] CPU: 1 PID: 15772 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1464.218956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.220501] Call Trace: [ 1464.220993] dump_stack+0x107/0x167 [ 1464.221676] should_fail.cold+0x5/0xa [ 1464.222387] ? create_object.isra.0+0x3a/0xa30 [ 1464.223235] should_failslab+0x5/0x20 [ 1464.223949] kmem_cache_alloc+0x5b/0x310 [ 1464.224713] create_object.isra.0+0x3a/0xa30 [ 1464.225531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.226479] kmem_cache_alloc+0x159/0x310 [ 1464.227264] anon_vma_fork+0xf1/0x640 [ 1464.227989] ? __vm_enough_memory+0x184/0x360 [ 1464.228831] copy_process+0x72cd/0x78b0 [ 1464.229611] ? __cleanup_sighand+0xb0/0xb0 [ 1464.230384] ? perf_trace_lock+0xac/0x490 [ 1464.231162] ? find_held_lock+0x2c/0x110 [ 1464.231934] kernel_clone+0xe7/0x980 [ 1464.232621] ? lock_downgrade+0x6d0/0x6d0 [ 1464.233375] ? find_held_lock+0x2c/0x110 [ 1464.234136] ? create_io_thread+0xf0/0xf0 [ 1464.234898] ? ksys_write+0x12d/0x260 [ 1464.235613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1464.236520] __do_sys_fork+0x8a/0xc0 [ 1464.237200] ? kernel_thread+0xf0/0xf0 [ 1464.237934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.238897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.239863] ? trace_hardirqs_on+0x5b/0x180 [ 1464.240663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.241614] do_syscall_64+0x33/0x40 [ 1464.242288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.243218] RIP: 0033:0x7febfa601b19 [ 1464.243901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.247253] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1464.248669] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1464.249948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.251235] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.252519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.253810] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:02:44 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 45) [ 1464.446968] FAULT_INJECTION: forcing a failure. [ 1464.446968] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.448922] CPU: 1 PID: 15858 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1464.450016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.451328] Call Trace: [ 1464.451750] dump_stack+0x107/0x167 [ 1464.452333] should_fail.cold+0x5/0xa [ 1464.452951] ? create_object.isra.0+0x3a/0xa30 [ 1464.453676] should_failslab+0x5/0x20 [ 1464.454296] kmem_cache_alloc+0x5b/0x310 [ 1464.454939] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1464.455830] create_object.isra.0+0x3a/0xa30 [ 1464.456523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.457325] kmem_cache_alloc+0x159/0x310 [ 1464.457975] security_file_alloc+0x34/0x170 [ 1464.458672] __alloc_file+0xb7/0x320 [ 1464.459255] alloc_empty_file+0x6d/0x170 [ 1464.459899] alloc_file+0x5e/0x5a0 [ 1464.460483] alloc_file_pseudo+0x16a/0x250 [ 1464.461149] ? alloc_file+0x5a0/0x5a0 [ 1464.461752] anon_inode_getfile+0xc8/0x1f0 [ 1464.462429] io_uring_setup+0x138b/0x2980 [ 1464.463112] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1464.463917] ? wait_for_completion_io+0x270/0x270 [ 1464.464696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.465551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.466391] do_syscall_64+0x33/0x40 [ 1464.467000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.467808] RIP: 0033:0x7feb2b3bab19 [ 1464.468395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.471271] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1464.472473] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1464.473568] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1464.474675] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1464.475784] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1464.476884] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:02:59 executing program 2: fork() (fail_nth: 40) 02:02:59 executing program 4: fork() (fail_nth: 45) 02:02:59 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 46) 02:02:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x0, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:02:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 14) 02:02:59 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:02:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:02:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x0, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1479.761574] FAULT_INJECTION: forcing a failure. [ 1479.761574] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.763843] CPU: 1 PID: 15896 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1479.765222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.766860] Call Trace: [ 1479.767396] dump_stack+0x107/0x167 [ 1479.767673] FAULT_INJECTION: forcing a failure. [ 1479.767673] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.768132] should_fail.cold+0x5/0xa [ 1479.768156] ? anon_vma_clone+0xdc/0x590 [ 1479.768174] should_failslab+0x5/0x20 [ 1479.768194] kmem_cache_alloc+0x5b/0x310 [ 1479.768222] anon_vma_clone+0xdc/0x590 [ 1479.768254] anon_vma_fork+0x82/0x640 [ 1479.768272] ? __vm_enough_memory+0x184/0x360 [ 1479.768297] copy_process+0x72cd/0x78b0 [ 1479.768357] ? __cleanup_sighand+0xb0/0xb0 [ 1479.768376] ? perf_trace_lock+0xac/0x490 [ 1479.768420] ? find_held_lock+0x2c/0x110 [ 1479.768447] kernel_clone+0xe7/0x980 [ 1479.779987] ? lock_downgrade+0x6d0/0x6d0 [ 1479.780799] ? find_held_lock+0x2c/0x110 [ 1479.781593] ? create_io_thread+0xf0/0xf0 [ 1479.782403] ? ksys_write+0x12d/0x260 [ 1479.783151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1479.784116] __do_sys_fork+0x8a/0xc0 [ 1479.784852] ? kernel_thread+0xf0/0xf0 [ 1479.785634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1479.786662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.787670] ? trace_hardirqs_on+0x5b/0x180 [ 1479.788525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.789540] do_syscall_64+0x33/0x40 [ 1479.790274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1479.791276] RIP: 0033:0x7f3592ea1b19 [ 1479.792020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.795591] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1479.797082] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1479.798476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.799868] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.801248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.802626] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1479.804059] CPU: 0 PID: 15892 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1479.805612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.807398] Call Trace: [ 1479.807992] dump_stack+0x107/0x167 [ 1479.808771] should_fail.cold+0x5/0xa [ 1479.809582] ? create_object.isra.0+0x3a/0xa30 [ 1479.810547] should_failslab+0x5/0x20 [ 1479.811365] kmem_cache_alloc+0x5b/0x310 [ 1479.812259] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1479.813421] create_object.isra.0+0x3a/0xa30 [ 1479.814387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1479.815469] kmem_cache_alloc+0x159/0x310 [ 1479.816378] security_file_alloc+0x34/0x170 [ 1479.817309] __alloc_file+0xb7/0x320 [ 1479.818092] alloc_empty_file+0x6d/0x170 [ 1479.818952] alloc_file+0x5e/0x5a0 [ 1479.819702] alloc_file_pseudo+0x16a/0x250 [ 1479.820602] ? alloc_file+0x5a0/0x5a0 [ 1479.821437] anon_inode_getfile+0xc8/0x1f0 [ 1479.822373] io_uring_setup+0x138b/0x2980 [ 1479.823269] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1479.824353] ? wait_for_completion_io+0x270/0x270 [ 1479.825399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1479.826502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.827593] do_syscall_64+0x33/0x40 02:02:59 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1479.828398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1479.829694] RIP: 0033:0x7feb2b3bab19 [ 1479.830522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.834418] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1479.836056] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1479.837563] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1479.839087] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1479.840599] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1479.842101] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1479.856555] FAULT_INJECTION: forcing a failure. [ 1479.856555] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.859246] CPU: 0 PID: 15897 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1479.860730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.862482] Call Trace: [ 1479.863037] dump_stack+0x107/0x167 [ 1479.863809] should_fail.cold+0x5/0xa [ 1479.864617] ? kvmalloc_node+0x119/0x170 [ 1479.865476] should_failslab+0x5/0x20 [ 1479.866277] __kmalloc_node+0x76/0x420 [ 1479.867098] kvmalloc_node+0x119/0x170 [ 1479.867936] alloc_fdtable+0xed/0x2c0 [ 1479.868742] dup_fd+0x92d/0xe40 [ 1479.869455] copy_process+0x197c/0x78b0 [ 1479.870303] ? __lock_acquire+0xbb1/0x5b00 [ 1479.871223] ? __cleanup_sighand+0xb0/0xb0 [ 1479.872123] ? perf_trace_lock+0xac/0x490 [ 1479.872999] ? __lockdep_reset_lock+0x180/0x180 [ 1479.873985] ? find_held_lock+0x2c/0x110 [ 1479.874848] kernel_clone+0xe7/0x980 [ 1479.875634] ? lock_downgrade+0x6d0/0x6d0 [ 1479.876529] ? find_held_lock+0x2c/0x110 [ 1479.877381] ? create_io_thread+0xf0/0xf0 [ 1479.878264] ? ksys_write+0x12d/0x260 [ 1479.879085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1479.880119] __do_sys_fork+0x8a/0xc0 [ 1479.880900] ? kernel_thread+0xf0/0xf0 [ 1479.881737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1479.882845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.883940] ? trace_hardirqs_on+0x5b/0x180 [ 1479.884851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.885943] do_syscall_64+0x33/0x40 [ 1479.886724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1479.887800] RIP: 0033:0x7f8d9d7f2b19 [ 1479.888589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.892484] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1479.894075] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1479.895563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.897066] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.898564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.900074] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1479.908325] FAULT_INJECTION: forcing a failure. [ 1479.908325] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.910467] CPU: 1 PID: 15903 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1479.911714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.913226] Call Trace: [ 1479.913715] dump_stack+0x107/0x167 [ 1479.914381] should_fail.cold+0x5/0xa [ 1479.915082] ? anon_vma_fork+0x1ff/0x640 [ 1479.915828] should_failslab+0x5/0x20 [ 1479.916534] kmem_cache_alloc+0x5b/0x310 [ 1479.917275] anon_vma_fork+0x1ff/0x640 [ 1479.917976] copy_process+0x72cd/0x78b0 [ 1479.918728] ? __cleanup_sighand+0xb0/0xb0 [ 1479.919502] ? perf_trace_lock+0xac/0x490 [ 1479.920282] ? find_held_lock+0x2c/0x110 [ 1479.921023] kernel_clone+0xe7/0x980 [ 1479.921703] ? lock_downgrade+0x6d0/0x6d0 [ 1479.922448] ? find_held_lock+0x2c/0x110 [ 1479.923175] ? create_io_thread+0xf0/0xf0 [ 1479.923921] ? ksys_write+0x12d/0x260 [ 1479.924626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1479.925499] __do_sys_fork+0x8a/0xc0 [ 1479.926164] ? kernel_thread+0xf0/0xf0 [ 1479.926877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1479.927824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.928749] ? trace_hardirqs_on+0x5b/0x180 [ 1479.929526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.930446] do_syscall_64+0x33/0x40 [ 1479.931120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1479.932048] RIP: 0033:0x7febfa601b19 [ 1479.932712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.935977] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1479.937329] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1479.938592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.939856] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.941128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.942412] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:03:00 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x0, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:00 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x0, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:03:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 15) 02:03:00 executing program 4: fork() (fail_nth: 46) [ 1480.169975] FAULT_INJECTION: forcing a failure. [ 1480.169975] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.171769] CPU: 1 PID: 16023 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1480.172839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.174119] Call Trace: [ 1480.174526] dump_stack+0x107/0x167 [ 1480.175076] should_fail.cold+0x5/0xa [ 1480.175668] ? create_object.isra.0+0x3a/0xa30 [ 1480.176365] should_failslab+0x5/0x20 [ 1480.176957] kmem_cache_alloc+0x5b/0x310 [ 1480.177582] create_object.isra.0+0x3a/0xa30 [ 1480.178238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1480.179010] __kmalloc_node+0x1ae/0x420 [ 1480.179600] kvmalloc_node+0x119/0x170 [ 1480.180208] alloc_fdtable+0xed/0x2c0 [ 1480.180796] dup_fd+0x92d/0xe40 [ 1480.181313] copy_process+0x197c/0x78b0 [ 1480.181919] ? __lock_acquire+0xbb1/0x5b00 [ 1480.182578] ? __cleanup_sighand+0xb0/0xb0 [ 1480.183236] ? perf_trace_lock+0xac/0x490 [ 1480.183861] ? __lockdep_reset_lock+0x180/0x180 [ 1480.184574] ? find_held_lock+0x2c/0x110 [ 1480.185197] kernel_clone+0xe7/0x980 [ 1480.185776] ? lock_downgrade+0x6d0/0x6d0 [ 1480.186395] ? find_held_lock+0x2c/0x110 [ 1480.186993] ? create_io_thread+0xf0/0xf0 [ 1480.187624] ? ksys_write+0x12d/0x260 [ 1480.188194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1480.188925] __do_sys_fork+0x8a/0xc0 [ 1480.189466] ? kernel_thread+0xf0/0xf0 [ 1480.190047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1480.190810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.191560] ? trace_hardirqs_on+0x5b/0x180 [ 1480.192221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.192976] do_syscall_64+0x33/0x40 [ 1480.193520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1480.194267] RIP: 0033:0x7f8d9d7f2b19 [ 1480.194808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.197528] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1480.198644] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1480.199682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1480.200723] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.201742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1480.202769] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:03:00 executing program 2: fork() (fail_nth: 41) [ 1480.249742] FAULT_INJECTION: forcing a failure. [ 1480.249742] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.252828] CPU: 0 PID: 16028 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1480.254299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.256056] Call Trace: [ 1480.256623] dump_stack+0x107/0x167 [ 1480.257398] should_fail.cold+0x5/0xa [ 1480.258212] ? create_object.isra.0+0x3a/0xa30 [ 1480.259181] should_failslab+0x5/0x20 [ 1480.259998] kmem_cache_alloc+0x5b/0x310 [ 1480.260865] create_object.isra.0+0x3a/0xa30 [ 1480.261796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1480.262876] kmem_cache_alloc+0x159/0x310 [ 1480.263776] anon_vma_fork+0x1ff/0x640 [ 1480.264626] copy_process+0x72cd/0x78b0 [ 1480.265512] ? __cleanup_sighand+0xb0/0xb0 [ 1480.266408] ? perf_trace_lock+0xac/0x490 [ 1480.267310] ? find_held_lock+0x2c/0x110 [ 1480.268179] kernel_clone+0xe7/0x980 [ 1480.268973] ? lock_downgrade+0x6d0/0x6d0 [ 1480.269857] ? find_held_lock+0x2c/0x110 [ 1480.270717] ? create_io_thread+0xf0/0xf0 [ 1480.271600] ? ksys_write+0x12d/0x260 [ 1480.272424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1480.273456] __do_sys_fork+0x8a/0xc0 [ 1480.274244] ? kernel_thread+0xf0/0xf0 [ 1480.275087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1480.276203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.277296] ? trace_hardirqs_on+0x5b/0x180 [ 1480.278212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.279301] do_syscall_64+0x33/0x40 [ 1480.280102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1480.281183] RIP: 0033:0x7febfa601b19 [ 1480.281967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.285851] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1480.287462] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1480.288976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1480.290481] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.291993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1480.293501] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:03:00 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 47) 02:03:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x0, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1480.327418] FAULT_INJECTION: forcing a failure. [ 1480.327418] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.330442] CPU: 0 PID: 16034 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1480.331918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.333678] Call Trace: [ 1480.334240] dump_stack+0x107/0x167 [ 1480.335017] should_fail.cold+0x5/0xa [ 1480.335832] ? anon_vma_clone+0xdc/0x590 02:03:00 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1480.336700] should_failslab+0x5/0x20 [ 1480.337541] kmem_cache_alloc+0x5b/0x310 [ 1480.338411] anon_vma_clone+0xdc/0x590 [ 1480.339254] anon_vma_fork+0x82/0x640 [ 1480.340068] ? __vm_enough_memory+0x184/0x360 [ 1480.341018] copy_process+0x72cd/0x78b0 [ 1480.341899] ? __cleanup_sighand+0xb0/0xb0 [ 1480.342798] ? perf_trace_lock+0xac/0x490 [ 1480.343699] ? find_held_lock+0x2c/0x110 [ 1480.344566] kernel_clone+0xe7/0x980 [ 1480.345352] ? lock_downgrade+0x6d0/0x6d0 [ 1480.346225] ? find_held_lock+0x2c/0x110 [ 1480.347087] ? create_io_thread+0xf0/0xf0 [ 1480.347974] ? ksys_write+0x12d/0x260 [ 1480.348793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1480.349821] __do_sys_fork+0x8a/0xc0 [ 1480.350602] ? kernel_thread+0xf0/0xf0 [ 1480.351446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1480.352558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.353638] ? trace_hardirqs_on+0x5b/0x180 [ 1480.354547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.355636] do_syscall_64+0x33/0x40 [ 1480.356437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1480.357520] RIP: 0033:0x7f3592ea1b19 [ 1480.358302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.362149] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1480.362557] FAULT_INJECTION: forcing a failure. [ 1480.362557] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.363738] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1480.363751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1480.363763] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.363776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1480.363794] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1480.372729] CPU: 1 PID: 16040 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1480.373792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.374846] Call Trace: [ 1480.375195] dump_stack+0x107/0x167 [ 1480.375667] should_fail.cold+0x5/0xa [ 1480.376175] ? create_object.isra.0+0x3a/0xa30 [ 1480.376771] should_failslab+0x5/0x20 [ 1480.377263] kmem_cache_alloc+0x5b/0x310 [ 1480.377800] create_object.isra.0+0x3a/0xa30 [ 1480.378357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1480.379004] kmem_cache_alloc_trace+0x151/0x320 [ 1480.379602] io_uring_alloc_task_context+0x99/0x6a0 [ 1480.380245] ? io_import_iovec+0x1120/0x1120 [ 1480.380830] ? lock_downgrade+0x6d0/0x6d0 [ 1480.381356] ? do_raw_spin_lock+0x121/0x260 [ 1480.381903] ? rwlock_bug.part.0+0x90/0x90 [ 1480.382452] __io_uring_add_tctx_node+0x2c6/0x520 [ 1480.383064] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1480.383730] ? alloc_fd+0x2e7/0x670 [ 1480.384208] io_uring_setup+0x1fbb/0x2980 [ 1480.384755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1480.385402] ? wait_for_completion_io+0x270/0x270 [ 1480.386036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1480.386707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1480.387383] do_syscall_64+0x33/0x40 [ 1480.387862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1480.388520] RIP: 0033:0x7feb2b3bab19 [ 1480.388992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.391330] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1480.392295] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1480.393195] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1480.394099] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1480.394993] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1480.395899] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:03:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 16) 02:03:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x0, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:03:17 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:17 executing program 4: fork() (fail_nth: 47) 02:03:17 executing program 2: fork() (fail_nth: 42) 02:03:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:17 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 48) [ 1497.741122] FAULT_INJECTION: forcing a failure. [ 1497.741122] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.742626] CPU: 0 PID: 16157 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1497.743439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.744400] Call Trace: [ 1497.744714] dump_stack+0x107/0x167 [ 1497.745139] should_fail.cold+0x5/0xa [ 1497.745589] ? kvmalloc_node+0x119/0x170 [ 1497.746060] should_failslab+0x5/0x20 [ 1497.746505] __kmalloc_node+0x76/0x420 [ 1497.746953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.747542] kvmalloc_node+0x119/0x170 [ 1497.747993] alloc_fdtable+0x159/0x2c0 [ 1497.748456] dup_fd+0x92d/0xe40 [ 1497.748846] copy_process+0x197c/0x78b0 [ 1497.749311] ? __lock_acquire+0xbb1/0x5b00 [ 1497.749487] FAULT_INJECTION: forcing a failure. [ 1497.749487] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.749810] ? __cleanup_sighand+0xb0/0xb0 [ 1497.749822] ? perf_trace_lock+0xac/0x490 [ 1497.749837] ? __lockdep_reset_lock+0x180/0x180 [ 1497.749859] ? find_held_lock+0x2c/0x110 [ 1497.754902] kernel_clone+0xe7/0x980 [ 1497.755331] ? lock_downgrade+0x6d0/0x6d0 [ 1497.755810] ? find_held_lock+0x2c/0x110 [ 1497.756290] ? create_io_thread+0xf0/0xf0 [ 1497.756762] ? ksys_write+0x12d/0x260 [ 1497.757206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.757769] __do_sys_fork+0x8a/0xc0 [ 1497.758192] ? kernel_thread+0xf0/0xf0 [ 1497.758652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.759259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.759855] ? trace_hardirqs_on+0x5b/0x180 [ 1497.760361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.760954] do_syscall_64+0x33/0x40 [ 1497.761386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.761974] RIP: 0033:0x7f8d9d7f2b19 [ 1497.762403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.764508] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1497.765385] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1497.766210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.767028] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.767850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.768680] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1497.769528] CPU: 1 PID: 16163 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1497.771132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.773052] Call Trace: [ 1497.773666] dump_stack+0x107/0x167 [ 1497.774524] should_fail.cold+0x5/0xa [ 1497.775416] ? create_object.isra.0+0x3a/0xa30 [ 1497.776496] should_failslab+0x5/0x20 [ 1497.777381] kmem_cache_alloc+0x5b/0x310 [ 1497.778179] FAULT_INJECTION: forcing a failure. [ 1497.778179] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.778345] create_object.isra.0+0x3a/0xa30 [ 1497.778365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.781856] kmem_cache_alloc+0x159/0x310 [ 1497.782833] anon_vma_fork+0xf1/0x640 [ 1497.783719] ? __vm_enough_memory+0x184/0x360 [ 1497.784776] copy_process+0x72cd/0x78b0 [ 1497.785750] ? __cleanup_sighand+0xb0/0xb0 [ 1497.786731] ? perf_trace_lock+0xac/0x490 [ 1497.787723] ? find_held_lock+0x2c/0x110 [ 1497.788696] kernel_clone+0xe7/0x980 [ 1497.789564] ? lock_downgrade+0x6d0/0x6d0 [ 1497.790534] ? find_held_lock+0x2c/0x110 [ 1497.791478] ? create_io_thread+0xf0/0xf0 [ 1497.792460] ? ksys_write+0x12d/0x260 [ 1497.793359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.794491] __do_sys_fork+0x8a/0xc0 [ 1497.795358] ? kernel_thread+0xf0/0xf0 [ 1497.796294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.797511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.798723] ? trace_hardirqs_on+0x5b/0x180 [ 1497.799724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.800929] do_syscall_64+0x33/0x40 [ 1497.801803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.802982] RIP: 0033:0x7febfa601b19 [ 1497.803845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.808117] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1497.809910] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1497.811565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.813226] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.814895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.816559] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1497.818248] CPU: 0 PID: 16165 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1497.819038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.819972] Call Trace: [ 1497.820282] dump_stack+0x107/0x167 [ 1497.820694] should_fail.cold+0x5/0xa [ 1497.821132] ? create_object.isra.0+0x3a/0xa30 [ 1497.821664] should_failslab+0x5/0x20 [ 1497.822101] kmem_cache_alloc+0x5b/0x310 [ 1497.822570] create_object.isra.0+0x3a/0xa30 [ 1497.823072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.823660] kmem_cache_alloc+0x159/0x310 [ 1497.824144] anon_vma_clone+0xdc/0x590 [ 1497.824596] anon_vma_fork+0x82/0x640 [ 1497.825033] ? __vm_enough_memory+0x184/0x360 [ 1497.825545] copy_process+0x72cd/0x78b0 [ 1497.826026] ? __cleanup_sighand+0xb0/0xb0 [ 1497.826509] ? perf_trace_lock+0xac/0x490 [ 1497.826997] ? find_held_lock+0x2c/0x110 [ 1497.827467] kernel_clone+0xe7/0x980 [ 1497.827895] ? lock_downgrade+0x6d0/0x6d0 [ 1497.828101] FAULT_INJECTION: forcing a failure. [ 1497.828101] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.828380] ? find_held_lock+0x2c/0x110 [ 1497.828391] ? create_io_thread+0xf0/0xf0 [ 1497.828403] ? ksys_write+0x12d/0x260 [ 1497.828424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.832842] __do_sys_fork+0x8a/0xc0 [ 1497.833266] ? kernel_thread+0xf0/0xf0 [ 1497.833718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.834318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.834902] ? trace_hardirqs_on+0x5b/0x180 [ 1497.835393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.835983] do_syscall_64+0x33/0x40 [ 1497.836415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.836997] RIP: 0033:0x7f3592ea1b19 [ 1497.837423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.839516] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1497.840395] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1497.841209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.842024] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.842830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.843645] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 [ 1497.844502] CPU: 1 PID: 16162 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1497.846102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.848014] Call Trace: [ 1497.848638] dump_stack+0x107/0x167 [ 1497.849494] should_fail.cold+0x5/0xa [ 1497.850379] ? create_object.isra.0+0x3a/0xa30 [ 1497.851434] should_failslab+0x5/0x20 [ 1497.852317] kmem_cache_alloc+0x5b/0x310 [ 1497.853273] create_object.isra.0+0x3a/0xa30 [ 1497.854303] kmemleak_alloc_percpu+0xa0/0x100 [ 1497.855356] pcpu_alloc+0x4e2/0x1240 [ 1497.856255] __percpu_counter_init+0x10d/0x2d0 [ 1497.857319] io_uring_alloc_task_context+0xcc/0x6a0 [ 1497.858476] ? io_import_iovec+0x1120/0x1120 [ 1497.859495] ? lock_downgrade+0x6d0/0x6d0 [ 1497.860675] ? do_raw_spin_lock+0x121/0x260 [ 1497.861814] ? rwlock_bug.part.0+0x90/0x90 [ 1497.862933] __io_uring_add_tctx_node+0x2c6/0x520 [ 1497.864209] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1497.865414] ? alloc_fd+0x2e7/0x670 [ 1497.866221] io_uring_setup+0x1fbb/0x2980 [ 1497.867132] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1497.868230] ? wait_for_completion_io+0x270/0x270 [ 1497.869301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.870443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.871579] do_syscall_64+0x33/0x40 [ 1497.872393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.873501] RIP: 0033:0x7feb2b3bab19 [ 1497.874306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.878284] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1497.879930] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1497.881492] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1497.883038] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1497.884592] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1497.886141] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:03:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 17) 02:03:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1498.021136] FAULT_INJECTION: forcing a failure. [ 1498.021136] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.022661] CPU: 0 PID: 16277 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1498.023456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.024413] Call Trace: [ 1498.024722] dump_stack+0x107/0x167 [ 1498.025154] should_fail.cold+0x5/0xa [ 1498.025598] ? create_object.isra.0+0x3a/0xa30 [ 1498.026136] should_failslab+0x5/0x20 [ 1498.026573] kmem_cache_alloc+0x5b/0x310 [ 1498.027049] create_object.isra.0+0x3a/0xa30 [ 1498.027553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1498.028140] __kmalloc_node+0x1ae/0x420 [ 1498.028603] kvmalloc_node+0x119/0x170 [ 1498.029056] alloc_fdtable+0x159/0x2c0 [ 1498.029500] dup_fd+0x92d/0xe40 [ 1498.029888] copy_process+0x197c/0x78b0 [ 1498.030356] ? __lock_acquire+0xbb1/0x5b00 [ 1498.030853] ? __cleanup_sighand+0xb0/0xb0 [ 1498.031346] ? perf_trace_lock+0xac/0x490 [ 1498.031824] ? __lockdep_reset_lock+0x180/0x180 [ 1498.032375] ? find_held_lock+0x2c/0x110 [ 1498.032841] kernel_clone+0xe7/0x980 [ 1498.033270] ? lock_downgrade+0x6d0/0x6d0 [ 1498.033738] ? find_held_lock+0x2c/0x110 [ 1498.034202] ? create_io_thread+0xf0/0xf0 [ 1498.034676] ? ksys_write+0x12d/0x260 [ 1498.035114] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1498.035666] __do_sys_fork+0x8a/0xc0 [ 1498.036091] ? kernel_thread+0xf0/0xf0 [ 1498.036549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.037150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.037744] ? trace_hardirqs_on+0x5b/0x180 [ 1498.038250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.038843] do_syscall_64+0x33/0x40 [ 1498.039281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.039868] RIP: 0033:0x7f8d9d7f2b19 [ 1498.040308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.042412] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1498.043286] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1498.044101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.044936] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1498.045764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1498.046581] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:03:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:18 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 49) 02:03:18 executing program 2: fork() (fail_nth: 43) 02:03:18 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1498.188481] perf: interrupt took too long (16440 > 16420), lowering kernel.perf_event_max_sample_rate to 12000 02:03:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1498.200138] FAULT_INJECTION: forcing a failure. [ 1498.200138] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.202589] CPU: 1 PID: 16389 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1498.204068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.205851] Call Trace: [ 1498.206427] dump_stack+0x107/0x167 [ 1498.207222] should_fail.cold+0x5/0xa [ 1498.208050] ? create_object.isra.0+0x3a/0xa30 [ 1498.209046] should_failslab+0x5/0x20 [ 1498.209871] kmem_cache_alloc+0x5b/0x310 [ 1498.210757] create_object.isra.0+0x3a/0xa30 [ 1498.211712] kmemleak_alloc_percpu+0xa0/0x100 [ 1498.212696] pcpu_alloc+0x4e2/0x1240 [ 1498.213521] __percpu_counter_init+0x10d/0x2d0 [ 1498.214522] io_uring_alloc_task_context+0xcc/0x6a0 [ 1498.215607] ? io_import_iovec+0x1120/0x1120 [ 1498.216559] ? lock_downgrade+0x6d0/0x6d0 [ 1498.217451] ? do_raw_spin_lock+0x121/0x260 [ 1498.218383] ? rwlock_bug.part.0+0x90/0x90 [ 1498.219310] __io_uring_add_tctx_node+0x2c6/0x520 [ 1498.220371] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1498.221504] ? alloc_fd+0x2e7/0x670 [ 1498.222307] io_uring_setup+0x1fbb/0x2980 [ 1498.223218] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1498.224313] ? wait_for_completion_io+0x270/0x270 [ 1498.225387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.226532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.227627] do_syscall_64+0x33/0x40 [ 1498.228439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.229543] RIP: 0033:0x7feb2b3bab19 [ 1498.230346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.234234] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1498.235878] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1498.237433] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1498.238964] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1498.240501] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1498.242035] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1498.250345] FAULT_INJECTION: forcing a failure. [ 1498.250345] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.253006] CPU: 1 PID: 16388 Comm: syz-executor.2 Not tainted 5.10.262 #1 [ 1498.254525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.256316] Call Trace: [ 1498.256896] dump_stack+0x107/0x167 [ 1498.257693] should_fail.cold+0x5/0xa [ 1498.258540] ? anon_vma_clone+0xdc/0x590 [ 1498.259421] should_failslab+0x5/0x20 [ 1498.260265] kmem_cache_alloc+0x5b/0x310 [ 1498.261167] anon_vma_clone+0xdc/0x590 [ 1498.262036] anon_vma_fork+0x82/0x640 [ 1498.262848] ? __vm_enough_memory+0x184/0x360 [ 1498.263820] copy_process+0x72cd/0x78b0 [ 1498.264731] ? __cleanup_sighand+0xb0/0xb0 [ 1498.265645] ? perf_trace_lock+0xac/0x490 [ 1498.266541] ? find_held_lock+0x2c/0x110 [ 1498.267425] kernel_clone+0xe7/0x980 [ 1498.268238] ? lock_downgrade+0x6d0/0x6d0 [ 1498.269130] ? find_held_lock+0x2c/0x110 [ 1498.270018] ? create_io_thread+0xf0/0xf0 [ 1498.270918] ? ksys_write+0x12d/0x260 [ 1498.271755] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1498.272811] __do_sys_fork+0x8a/0xc0 [ 1498.273608] ? kernel_thread+0xf0/0xf0 [ 1498.274471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.275603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.276716] ? trace_hardirqs_on+0x5b/0x180 [ 1498.277663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.278788] do_syscall_64+0x33/0x40 [ 1498.279585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.280715] RIP: 0033:0x7f3592ea1b19 [ 1498.281519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.285474] RSP: 002b:00007f3590417188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1498.287126] RAX: ffffffffffffffda RBX: 00007f3592fb4f60 RCX: 00007f3592ea1b19 [ 1498.288641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.290139] RBP: 00007f35904171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1498.291643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1498.293151] R13: 00007ffd1262255f R14: 00007f3590417300 R15: 0000000000022000 02:03:35 executing program 2: fork() 02:03:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:03:35 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 50) 02:03:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 18) 02:03:35 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:35 executing program 4: fork() (fail_nth: 48) [ 1515.889852] FAULT_INJECTION: forcing a failure. [ 1515.889852] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.892916] CPU: 1 PID: 16406 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1515.894732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1515.896921] Call Trace: [ 1515.897623] dump_stack+0x107/0x167 [ 1515.898584] should_fail.cold+0x5/0xa [ 1515.899591] ? io_wq_create+0xeb/0xc00 [ 1515.900632] should_failslab+0x5/0x20 [ 1515.901629] __kmalloc+0x72/0x390 [ 1515.902560] io_wq_create+0xeb/0xc00 [ 1515.903553] io_uring_alloc_task_context+0x1f1/0x6a0 02:03:35 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1515.904910] ? io_import_iovec+0x1120/0x1120 [ 1515.906213] ? io_apoll_task_func+0x2d0/0x2d0 [ 1515.907382] ? __io_req_find_next+0x300/0x300 [ 1515.908550] ? do_raw_spin_lock+0x121/0x260 [ 1515.909666] ? rwlock_bug.part.0+0x90/0x90 [ 1515.910780] __io_uring_add_tctx_node+0x2c6/0x520 [ 1515.912026] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1515.913290] ? alloc_fd+0x2e7/0x670 [ 1515.914097] io_uring_setup+0x1fbb/0x2980 [ 1515.915011] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1515.916101] ? wait_for_completion_io+0x270/0x270 [ 1515.917181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1515.918317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1515.919429] do_syscall_64+0x33/0x40 [ 1515.920237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1515.921361] RIP: 0033:0x7feb2b3bab19 [ 1515.922165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.926156] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1515.927804] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1515.929362] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1515.930906] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1515.932457] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1515.933999] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1515.952339] FAULT_INJECTION: forcing a failure. [ 1515.952339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1515.953928] CPU: 0 PID: 16419 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1515.954734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1515.955696] Call Trace: [ 1515.956018] dump_stack+0x107/0x167 [ 1515.956458] should_fail.cold+0x5/0xa [ 1515.956908] __alloc_pages_nodemask+0x182/0x600 [ 1515.957454] ? lock_acquire+0x197/0x470 [ 1515.957916] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1515.958611] ? lock_downgrade+0x6d0/0x6d0 [ 1515.959090] ? do_raw_spin_lock+0x121/0x260 [ 1515.959594] alloc_pages_current+0x187/0x280 [ 1515.960119] __pmd_alloc+0x37/0x630 [ 1515.960552] copy_page_range+0x2bd0/0x3800 [ 1515.961041] ? perf_trace_lock+0xac/0x490 [ 1515.961517] ? lock_chain_count+0x20/0x20 [ 1515.962018] ? find_held_lock+0x2c/0x110 [ 1515.962501] ? anon_vma_fork+0x462/0x640 [ 1515.962982] ? up_write+0x191/0x550 [ 1515.963402] ? vm_iomap_memory+0x190/0x190 [ 1515.963890] ? downgrade_write+0x3a0/0x3a0 [ 1515.964388] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1515.965024] ? __vma_link_rb+0x540/0x700 [ 1515.965500] copy_process+0x7658/0x78b0 [ 1515.965982] ? __cleanup_sighand+0xb0/0xb0 [ 1515.966470] ? perf_trace_lock+0xac/0x490 [ 1515.966963] ? find_held_lock+0x2c/0x110 [ 1515.967441] kernel_clone+0xe7/0x980 [ 1515.967875] ? lock_downgrade+0x6d0/0x6d0 [ 1515.968357] ? find_held_lock+0x2c/0x110 [ 1515.968825] ? create_io_thread+0xf0/0xf0 [ 1515.969305] ? ksys_write+0x12d/0x260 [ 1515.969753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1515.970311] __do_sys_fork+0x8a/0xc0 [ 1515.970755] ? kernel_thread+0xf0/0xf0 [ 1515.971223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1515.971831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1515.972431] ? trace_hardirqs_on+0x5b/0x180 [ 1515.972932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1515.973527] do_syscall_64+0x33/0x40 [ 1515.973962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1515.974546] RIP: 0033:0x7febfa601b19 [ 1515.974974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.977075] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1515.977944] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1515.978757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.979570] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1515.980390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.981209] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1515.991132] FAULT_INJECTION: forcing a failure. [ 1515.991132] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.992598] CPU: 0 PID: 16422 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1515.993392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1515.994343] Call Trace: [ 1515.994646] dump_stack+0x107/0x167 [ 1515.995064] should_fail.cold+0x5/0xa [ 1515.995507] ? copy_fs_struct+0x45/0x340 [ 1515.995970] should_failslab+0x5/0x20 [ 1515.996428] kmem_cache_alloc+0x5b/0x310 [ 1515.996907] copy_fs_struct+0x45/0x340 [ 1515.997358] copy_process+0x34b5/0x78b0 [ 1515.997818] ? __lock_acquire+0xbb1/0x5b00 [ 1515.998321] ? __cleanup_sighand+0xb0/0xb0 [ 1515.998805] ? perf_trace_lock+0xac/0x490 [ 1515.999284] ? __lockdep_reset_lock+0x180/0x180 [ 1515.999820] ? find_held_lock+0x2c/0x110 [ 1516.000291] kernel_clone+0xe7/0x980 [ 1516.000724] ? lock_downgrade+0x6d0/0x6d0 [ 1516.001193] ? find_held_lock+0x2c/0x110 [ 1516.001653] ? create_io_thread+0xf0/0xf0 [ 1516.002126] ? ksys_write+0x12d/0x260 [ 1516.002564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.003124] __do_sys_fork+0x8a/0xc0 [ 1516.003550] ? kernel_thread+0xf0/0xf0 [ 1516.004005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.004614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.005200] ? trace_hardirqs_on+0x5b/0x180 [ 1516.005692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.006282] do_syscall_64+0x33/0x40 [ 1516.006706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.007292] RIP: 0033:0x7f8d9d7f2b19 [ 1516.007715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.009819] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1516.010685] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1516.011504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.012317] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.013142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.013965] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:03:36 executing program 2: fork() fork() 02:03:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:36 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 51) 02:03:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1516.183891] FAULT_INJECTION: forcing a failure. [ 1516.183891] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.186420] CPU: 1 PID: 16536 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1516.187924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.189720] Call Trace: [ 1516.190298] dump_stack+0x107/0x167 [ 1516.191099] should_fail.cold+0x5/0xa [ 1516.191932] ? create_object.isra.0+0x3a/0xa30 [ 1516.192931] should_failslab+0x5/0x20 [ 1516.193763] kmem_cache_alloc+0x5b/0x310 [ 1516.194654] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1516.195783] create_object.isra.0+0x3a/0xa30 [ 1516.196758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.197865] __kmalloc+0x16e/0x390 [ 1516.198650] io_wq_create+0xeb/0xc00 [ 1516.199473] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1516.200588] ? io_import_iovec+0x1120/0x1120 [ 1516.201555] ? io_apoll_task_func+0x2d0/0x2d0 [ 1516.202538] ? __io_req_find_next+0x300/0x300 [ 1516.203511] ? do_raw_spin_lock+0x121/0x260 [ 1516.204460] ? rwlock_bug.part.0+0x90/0x90 [ 1516.205388] __io_uring_add_tctx_node+0x2c6/0x520 [ 1516.206447] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1516.207590] ? alloc_fd+0x2e7/0x670 [ 1516.208407] io_uring_setup+0x1fbb/0x2980 [ 1516.209327] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1516.210431] ? wait_for_completion_io+0x270/0x270 [ 1516.211510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.212669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.213796] do_syscall_64+0x33/0x40 [ 1516.214611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.215725] RIP: 0033:0x7feb2b3bab19 [ 1516.216544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:03:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1516.220586] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1516.222488] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1516.224039] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1516.225600] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1516.227144] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1516.228693] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:03:36 executing program 4: fork() (fail_nth: 49) 02:03:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 19) 02:03:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1516.311516] FAULT_INJECTION: forcing a failure. [ 1516.311516] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.314085] CPU: 1 PID: 16548 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1516.315588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.317382] Call Trace: [ 1516.317956] dump_stack+0x107/0x167 [ 1516.318755] should_fail.cold+0x5/0xa [ 1516.319581] ? create_object.isra.0+0x3a/0xa30 [ 1516.320574] should_failslab+0x5/0x20 [ 1516.321394] kmem_cache_alloc+0x5b/0x310 [ 1516.322280] create_object.isra.0+0x3a/0xa30 [ 1516.323227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.324331] kmem_cache_alloc+0x159/0x310 [ 1516.325241] copy_fs_struct+0x45/0x340 [ 1516.326084] copy_process+0x34b5/0x78b0 [ 1516.326954] ? __lock_acquire+0xbb1/0x5b00 [ 1516.327889] ? __cleanup_sighand+0xb0/0xb0 [ 1516.328803] ? perf_trace_lock+0xac/0x490 [ 1516.329704] ? __lockdep_reset_lock+0x180/0x180 [ 1516.330723] ? find_held_lock+0x2c/0x110 [ 1516.331611] kernel_clone+0xe7/0x980 [ 1516.332422] ? lock_downgrade+0x6d0/0x6d0 [ 1516.333315] ? find_held_lock+0x2c/0x110 [ 1516.334183] ? create_io_thread+0xf0/0xf0 [ 1516.335085] ? ksys_write+0x12d/0x260 [ 1516.335916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.336970] __do_sys_fork+0x8a/0xc0 [ 1516.337768] ? kernel_thread+0xf0/0xf0 [ 1516.338621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.339759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.340877] ? trace_hardirqs_on+0x5b/0x180 [ 1516.341811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.342921] do_syscall_64+0x33/0x40 [ 1516.343727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.344839] RIP: 0033:0x7f8d9d7f2b19 [ 1516.345642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.349616] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1516.351248] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1516.352787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.354405] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.356183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.357729] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 [ 1516.369893] FAULT_INJECTION: forcing a failure. [ 1516.369893] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.372448] CPU: 1 PID: 16549 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1516.373947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.375727] Call Trace: [ 1516.376298] dump_stack+0x107/0x167 [ 1516.377105] should_fail.cold+0x5/0xa [ 1516.377936] ? anon_vma_fork+0x1ff/0x640 [ 1516.378816] should_failslab+0x5/0x20 [ 1516.379637] kmem_cache_alloc+0x5b/0x310 [ 1516.380533] anon_vma_fork+0x1ff/0x640 [ 1516.381375] copy_process+0x72cd/0x78b0 [ 1516.382281] ? __cleanup_sighand+0xb0/0xb0 [ 1516.383193] ? perf_trace_lock+0xac/0x490 [ 1516.384119] ? find_held_lock+0x2c/0x110 [ 1516.385007] kernel_clone+0xe7/0x980 [ 1516.385814] ? lock_downgrade+0x6d0/0x6d0 [ 1516.386710] ? find_held_lock+0x2c/0x110 [ 1516.387588] ? create_io_thread+0xf0/0xf0 [ 1516.388492] ? ksys_write+0x12d/0x260 [ 1516.389336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.390386] __do_sys_fork+0x8a/0xc0 [ 1516.391186] ? kernel_thread+0xf0/0xf0 [ 1516.392044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.393180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.394283] ? trace_hardirqs_on+0x5b/0x180 [ 1516.395218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.396335] do_syscall_64+0x33/0x40 [ 1516.397155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.398258] RIP: 0033:0x7febfa601b19 [ 1516.399062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.403025] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1516.404691] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1516.406221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.407751] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.409292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.410821] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:03:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 20) 02:03:54 executing program 4: fork() (fail_nth: 50) 02:03:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1534.364345] FAULT_INJECTION: forcing a failure. [ 1534.364345] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.365871] CPU: 0 PID: 16667 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1534.366630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.367539] Call Trace: [ 1534.367835] dump_stack+0x107/0x167 [ 1534.368078] FAULT_INJECTION: forcing a failure. [ 1534.368078] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.368244] should_fail.cold+0x5/0xa [ 1534.371316] ? io_wq_create+0x6ef/0xc00 [ 1534.371890] should_failslab+0x5/0x20 [ 1534.372431] kmem_cache_alloc_node_trace+0x59/0x340 [ 1534.373164] io_wq_create+0x6ef/0xc00 [ 1534.373718] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1534.374441] ? io_import_iovec+0x1120/0x1120 [ 1534.375072] ? io_apoll_task_func+0x2d0/0x2d0 [ 1534.375710] ? __io_req_find_next+0x300/0x300 [ 1534.376349] ? do_raw_spin_lock+0x121/0x260 [ 1534.376970] ? rwlock_bug.part.0+0x90/0x90 [ 1534.377577] __io_uring_add_tctx_node+0x2c6/0x520 [ 1534.378253] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1534.378986] ? alloc_fd+0x2e7/0x670 [ 1534.379512] io_uring_setup+0x1fbb/0x2980 [ 1534.380103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1534.380815] ? wait_for_completion_io+0x270/0x270 [ 1534.381525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1534.382270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.383008] do_syscall_64+0x33/0x40 [ 1534.383532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1534.384260] RIP: 0033:0x7feb2b3bab19 [ 1534.384796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.387393] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1534.388470] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1534.389491] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1534.390490] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1534.391491] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1534.392495] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1534.393534] CPU: 1 PID: 16659 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1534.395098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.396980] Call Trace: [ 1534.397580] dump_stack+0x107/0x167 [ 1534.398411] should_fail.cold+0x5/0xa [ 1534.398633] FAULT_INJECTION: forcing a failure. [ 1534.398633] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.399273] ? create_object.isra.0+0x3a/0xa30 [ 1534.399294] should_failslab+0x5/0x20 [ 1534.399315] kmem_cache_alloc+0x5b/0x310 [ 1534.399347] create_object.isra.0+0x3a/0xa30 [ 1534.399366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1534.399397] kmem_cache_alloc+0x159/0x310 [ 1534.399429] __pmd_alloc+0x94/0x630 [ 1534.399458] copy_page_range+0x2bd0/0x3800 [ 1534.408433] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1534.409452] ? finish_task_switch+0x126/0x5d0 [ 1534.410460] ? finish_task_switch+0xef/0x5d0 [ 1534.411460] ? find_held_lock+0x2c/0x110 [ 1534.412386] ? anon_vma_fork+0x462/0x640 [ 1534.413337] ? up_write+0x191/0x550 [ 1534.414161] ? vm_iomap_memory+0x190/0x190 [ 1534.415115] ? downgrade_write+0x3a0/0x3a0 [ 1534.416075] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1534.417303] ? __vma_link_rb+0x540/0x700 [ 1534.418231] copy_process+0x7658/0x78b0 [ 1534.419176] ? __cleanup_sighand+0xb0/0xb0 [ 1534.420131] ? perf_trace_lock+0xac/0x490 [ 1534.421100] ? find_held_lock+0x2c/0x110 [ 1534.422024] kernel_clone+0xe7/0x980 [ 1534.422866] ? lock_downgrade+0x6d0/0x6d0 [ 1534.423801] ? find_held_lock+0x2c/0x110 [ 1534.424727] ? create_io_thread+0xf0/0xf0 [ 1534.425665] ? ksys_write+0x12d/0x260 [ 1534.426535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1534.427634] __do_sys_fork+0x8a/0xc0 [ 1534.428474] ? kernel_thread+0xf0/0xf0 [ 1534.429386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1534.430570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.431730] ? trace_hardirqs_on+0x5b/0x180 [ 1534.432719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.433883] do_syscall_64+0x33/0x40 [ 1534.434738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1534.435906] RIP: 0033:0x7febfa601b19 [ 1534.436776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.440946] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1534.442680] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1534.444303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.445926] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.447545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.449170] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1534.450909] CPU: 0 PID: 16670 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1534.451861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.453011] Call Trace: [ 1534.453389] dump_stack+0x107/0x167 [ 1534.453891] should_fail.cold+0x5/0xa [ 1534.454432] ? copy_process+0x1ae7/0x78b0 [ 1534.455009] should_failslab+0x5/0x20 [ 1534.455533] kmem_cache_alloc+0x5b/0x310 [ 1534.456091] ? _raw_spin_unlock+0x1a/0x30 [ 1534.456684] copy_process+0x1ae7/0x78b0 [ 1534.457241] ? __lock_acquire+0xbb1/0x5b00 [ 1534.457840] ? __cleanup_sighand+0xb0/0xb0 [ 1534.458418] ? perf_trace_lock+0xac/0x490 [ 1534.458991] ? __lockdep_reset_lock+0x180/0x180 [ 1534.459640] ? find_held_lock+0x2c/0x110 [ 1534.460208] kernel_clone+0xe7/0x980 [ 1534.460728] ? lock_downgrade+0x6d0/0x6d0 [ 1534.461299] ? find_held_lock+0x2c/0x110 [ 1534.461857] ? create_io_thread+0xf0/0xf0 [ 1534.462426] ? ksys_write+0x12d/0x260 [ 1534.462958] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1534.463625] __do_sys_fork+0x8a/0xc0 [ 1534.464134] ? kernel_thread+0xf0/0xf0 [ 1534.464685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1534.465409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.466109] ? trace_hardirqs_on+0x5b/0x180 [ 1534.466699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.467403] do_syscall_64+0x33/0x40 [ 1534.467917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1534.468627] RIP: 0033:0x7f8d9d7f2b19 [ 1534.469134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.471650] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1534.472693] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1534.473670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.474648] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.475617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.476606] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:03:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x0, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:03:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 52) 02:03:54 executing program 2: r0 = fork() waitid(0x2, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) rt_sigqueueinfo(r0, 0x1b, &(0x7f0000000140)={0xb, 0x81, 0x81}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r2 = syz_io_uring_setup(0x3872, &(0x7f0000000240)={0x0, 0x5d1e, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x2}) 02:03:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:03:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:54 executing program 2: umount2(&(0x7f0000000000)='./file0\x00', 0x4) r0 = fork() ptrace$cont(0x128633e0cb871f16, r0, 0xd401, 0x4) ptrace$setopts(0x4200, r0, 0x1, 0x100053) 02:03:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 53) [ 1534.647170] FAULT_INJECTION: forcing a failure. [ 1534.647170] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.648642] CPU: 0 PID: 16865 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1534.649386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.650327] Call Trace: [ 1534.650644] dump_stack+0x107/0x167 [ 1534.651063] should_fail.cold+0x5/0xa [ 1534.651503] ? io_wq_create+0xeb/0xc00 [ 1534.651951] should_failslab+0x5/0x20 [ 1534.652392] __kmalloc+0x72/0x390 [ 1534.652804] io_wq_create+0xeb/0xc00 [ 1534.653243] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1534.653823] ? io_import_iovec+0x1120/0x1120 [ 1534.654306] ? io_apoll_task_func+0x2d0/0x2d0 [ 1534.654815] ? __io_req_find_next+0x300/0x300 [ 1534.655309] ? do_raw_spin_lock+0x121/0x260 [ 1534.655800] ? rwlock_bug.part.0+0x90/0x90 [ 1534.656264] __io_uring_add_tctx_node+0x2c6/0x520 [ 1534.656823] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1534.657392] ? alloc_fd+0x2e7/0x670 [ 1534.657817] io_uring_setup+0x1fbb/0x2980 [ 1534.658272] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1534.658857] ? wait_for_completion_io+0x270/0x270 [ 1534.659398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1534.660000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.660571] do_syscall_64+0x33/0x40 [ 1534.661000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1534.661559] RIP: 0033:0x7feb2b3bab19 [ 1534.661961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.663937] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1534.664765] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1534.665529] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1534.666292] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1534.667057] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1534.667819] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:03:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:03:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:03:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x0, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:04:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140)}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:15 executing program 4: fork() (fail_nth: 51) 02:04:15 executing program 2: r0 = fork() r1 = gettid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc4e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x5, 0x81, 0x0, 0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0xa800, 0x0, 0x3, 0x0, 0x401, 0xd1, 0x6, 0x0, 0x4, 0x0, 0x8}, r1, 0xf, r2, 0x8) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = getpgrp(r0) tkill(r5, 0xa) tkill(r0, 0x12) ptrace$setopts(0x4206, r4, 0x5, 0x11) 02:04:15 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 54) 02:04:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:04:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 21) 02:04:15 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1555.303747] FAULT_INJECTION: forcing a failure. [ 1555.303747] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.303818] CPU: 1 PID: 16919 Comm: syz-executor.7 Not tainted 5.10.262 #1 [ 1555.303830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.303837] Call Trace: [ 1555.303864] dump_stack+0x107/0x167 [ 1555.303890] should_fail.cold+0x5/0xa [ 1555.303914] ? create_object.isra.0+0x3a/0xa30 [ 1555.303933] should_failslab+0x5/0x20 [ 1555.303954] kmem_cache_alloc+0x5b/0x310 02:04:15 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1555.303982] create_object.isra.0+0x3a/0xa30 [ 1555.303999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1555.304027] kmem_cache_alloc+0x159/0x310 [ 1555.304056] copy_process+0x1ae7/0x78b0 [ 1555.304085] ? __lock_acquire+0xbb1/0x5b00 [ 1555.304134] ? __cleanup_sighand+0xb0/0xb0 [ 1555.304153] ? perf_trace_lock+0xac/0x490 [ 1555.304181] ? __lockdep_reset_lock+0x180/0x180 [ 1555.304212] ? find_held_lock+0x2c/0x110 [ 1555.304239] kernel_clone+0xe7/0x980 [ 1555.304260] ? lock_downgrade+0x6d0/0x6d0 [ 1555.304277] ? find_held_lock+0x2c/0x110 [ 1555.304297] ? create_io_thread+0xf0/0xf0 [ 1555.304317] ? ksys_write+0x12d/0x260 [ 1555.304347] ? __mutex_unlock_slowpath+0xe1/0x600 02:04:15 executing program 4: fork() (fail_nth: 52) [ 1555.304377] __do_sys_fork+0x8a/0xc0 [ 1555.304396] ? kernel_thread+0xf0/0xf0 [ 1555.304435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.304458] ? syscall_enter_from_user_mode+0x1d/0x50 02:04:15 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 55) [ 1555.304475] ? trace_hardirqs_on+0x5b/0x180 [ 1555.304499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.304519] do_syscall_64+0x33/0x40 [ 1555.304540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 02:04:15 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1555.304553] RIP: 0033:0x7f8d9d7f2b19 [ 1555.304573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.304584] RSP: 002b:00007f8d9ad68188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1555.304606] RAX: ffffffffffffffda RBX: 00007f8d9d905f60 RCX: 00007f8d9d7f2b19 [ 1555.304617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.304629] RBP: 00007f8d9ad681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.304640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.304652] R13: 00007ffc42dcd97f R14: 00007f8d9ad68300 R15: 0000000000022000 02:04:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140)}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1555.321255] FAULT_INJECTION: forcing a failure. [ 1555.321255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1555.321281] CPU: 0 PID: 16922 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1555.321293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.321301] Call Trace: [ 1555.321331] dump_stack+0x107/0x167 [ 1555.321358] should_fail.cold+0x5/0xa [ 1555.321389] __alloc_pages_nodemask+0x182/0x600 [ 1555.321425] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1555.321445] ? find_held_lock+0x2c/0x110 [ 1555.321476] ? __pmd_alloc+0x31d/0x630 [ 1555.321498] ? lock_downgrade+0x6d0/0x6d0 [ 1555.321518] ? do_raw_spin_lock+0x121/0x260 [ 1555.321546] alloc_pages_current+0x187/0x280 [ 1555.321573] pte_alloc_one+0x16/0x1a0 [ 1555.321595] __pte_alloc+0x1d/0x330 [ 1555.321623] copy_page_range+0x1b62/0x3800 [ 1555.321644] ? perf_trace_lock+0xac/0x490 [ 1555.321674] ? find_held_lock+0x2c/0x110 [ 1555.321703] ? anon_vma_fork+0x462/0x640 [ 1555.321751] ? up_write+0x191/0x550 [ 1555.321772] ? vm_iomap_memory+0x190/0x190 [ 1555.321793] ? downgrade_write+0x3a0/0x3a0 [ 1555.321819] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1555.321845] ? __vma_link_rb+0x540/0x700 [ 1555.321877] copy_process+0x7658/0x78b0 [ 1555.321943] ? __cleanup_sighand+0xb0/0xb0 [ 1555.321962] ? perf_trace_lock+0xac/0x490 [ 1555.322009] ? find_held_lock+0x2c/0x110 [ 1555.322036] kernel_clone+0xe7/0x980 [ 1555.322058] ? lock_downgrade+0x6d0/0x6d0 [ 1555.322075] ? find_held_lock+0x2c/0x110 [ 1555.322095] ? create_io_thread+0xf0/0xf0 [ 1555.322118] ? ksys_write+0x12d/0x260 [ 1555.322151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1555.322183] __do_sys_fork+0x8a/0xc0 [ 1555.322203] ? kernel_thread+0xf0/0xf0 [ 1555.322245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.322268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.322286] ? trace_hardirqs_on+0x5b/0x180 [ 1555.322310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.322331] do_syscall_64+0x33/0x40 [ 1555.322353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.322367] RIP: 0033:0x7febfa601b19 [ 1555.322386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.322397] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1555.322419] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1555.322431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.322443] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.322455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.322467] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1555.327488] FAULT_INJECTION: forcing a failure. [ 1555.327488] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.327509] CPU: 0 PID: 16924 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1555.327527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.327533] Call Trace: [ 1555.327554] dump_stack+0x107/0x167 [ 1555.327577] should_fail.cold+0x5/0xa [ 1555.327600] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1555.327618] should_failslab+0x5/0x20 [ 1555.327638] kmem_cache_alloc_trace+0x55/0x320 [ 1555.327666] __io_uring_add_tctx_node+0x15c/0x520 [ 1555.327686] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1555.327704] ? alloc_fd+0x2e7/0x670 [ 1555.327738] io_uring_setup+0x1fbb/0x2980 [ 1555.327768] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1555.327784] ? wait_for_completion_io+0x270/0x270 [ 1555.327831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.327852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.327876] do_syscall_64+0x33/0x40 [ 1555.327896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.327908] RIP: 0033:0x7feb2b3bab19 [ 1555.327926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.327936] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1555.327957] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1555.327968] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1555.327979] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1555.327990] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1555.328001] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1555.605979] FAULT_INJECTION: forcing a failure. [ 1555.605979] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.606002] CPU: 1 PID: 17012 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1555.606013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.606020] Call Trace: [ 1555.606047] dump_stack+0x107/0x167 [ 1555.606079] should_fail.cold+0x5/0xa [ 1555.606104] ? ptlock_alloc+0x1d/0x70 [ 1555.606124] should_failslab+0x5/0x20 [ 1555.606145] kmem_cache_alloc+0x5b/0x310 [ 1555.606176] ptlock_alloc+0x1d/0x70 [ 1555.606198] pte_alloc_one+0x68/0x1a0 [ 1555.606221] __pte_alloc+0x1d/0x330 [ 1555.606249] copy_page_range+0x1b62/0x3800 [ 1555.606271] ? perf_trace_lock+0xac/0x490 [ 1555.606307] ? find_held_lock+0x2c/0x110 [ 1555.606336] ? anon_vma_fork+0x462/0x640 [ 1555.606382] ? up_write+0x191/0x550 [ 1555.606404] ? vm_iomap_memory+0x190/0x190 [ 1555.606424] ? downgrade_write+0x3a0/0x3a0 [ 1555.606450] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1555.606475] ? __vma_link_rb+0x540/0x700 [ 1555.606507] copy_process+0x7658/0x78b0 [ 1555.606572] ? __cleanup_sighand+0xb0/0xb0 [ 1555.606592] ? __lockdep_reset_lock+0x180/0x180 [ 1555.606638] ? finish_task_switch+0x126/0x5d0 [ 1555.606666] kernel_clone+0xe7/0x980 [ 1555.606691] ? create_io_thread+0xf0/0xf0 [ 1555.606712] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1555.606729] ? trace_hardirqs_on+0x5b/0x180 [ 1555.606754] ? finish_task_switch+0x1a4/0x5d0 [ 1555.606770] ? __switch_to+0x572/0xf70 [ 1555.606787] ? __switch_to_asm+0x3a/0x60 [ 1555.606802] ? __switch_to_asm+0x34/0x60 [ 1555.606826] ? __schedule+0x82c/0x1ea0 [ 1555.606853] __do_sys_fork+0x8a/0xc0 [ 1555.606872] ? kernel_thread+0xf0/0xf0 [ 1555.606889] ? io_schedule_timeout+0x140/0x140 [ 1555.606909] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1555.606948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.606970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.606986] ? trace_hardirqs_on+0x5b/0x180 [ 1555.607011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.607031] do_syscall_64+0x33/0x40 [ 1555.607053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.607066] RIP: 0033:0x7febfa601b19 [ 1555.607085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.607097] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1555.607119] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1555.607131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1555.607143] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.607155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.607167] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1555.647738] FAULT_INJECTION: forcing a failure. [ 1555.647738] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.821297] CPU: 0 PID: 17036 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1555.821311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.821327] Call Trace: [ 1555.825196] dump_stack+0x107/0x167 [ 1555.825222] should_fail.cold+0x5/0xa [ 1555.825252] ? create_object.isra.0+0x3a/0xa30 [ 1555.827717] should_failslab+0x5/0x20 [ 1555.827737] kmem_cache_alloc+0x5b/0x310 [ 1555.827766] create_object.isra.0+0x3a/0xa30 [ 1555.827784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1555.827811] kmem_cache_alloc_trace+0x151/0x320 [ 1555.827841] __io_uring_add_tctx_node+0x15c/0x520 [ 1555.827867] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1555.834406] ? alloc_fd+0x2e7/0x670 [ 1555.834440] io_uring_setup+0x1fbb/0x2980 [ 1555.834472] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1555.834499] ? wait_for_completion_io+0x270/0x270 [ 1555.838182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1555.838204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.838230] do_syscall_64+0x33/0x40 [ 1555.841202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1555.841217] RIP: 0033:0x7feb2b3bab19 [ 1555.841244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.846943] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1555.846965] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1555.846977] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1555.846989] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1555.847001] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1555.847012] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:04:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 22) 02:04:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:36 executing program 2: r0 = fork() r1 = fork() ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) ptrace(0x10, r1) 02:04:36 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 56) 02:04:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:04:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x0, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:04:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140)}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:36 executing program 4: fork() (fail_nth: 53) [ 1576.749953] FAULT_INJECTION: forcing a failure. [ 1576.749953] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.752471] CPU: 1 PID: 17059 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1576.753983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1576.755760] Call Trace: [ 1576.756336] dump_stack+0x107/0x167 [ 1576.756408] FAULT_INJECTION: forcing a failure. [ 1576.756408] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.757139] should_fail.cold+0x5/0xa [ 1576.757165] ? create_object.isra.0+0x3a/0xa30 [ 1576.757186] should_failslab+0x5/0x20 [ 1576.757208] kmem_cache_alloc+0x5b/0x310 [ 1576.757229] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1576.757256] create_object.isra.0+0x3a/0xa30 [ 1576.757273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1576.757302] kmem_cache_alloc+0x159/0x310 [ 1576.757334] ptlock_alloc+0x1d/0x70 [ 1576.757356] pte_alloc_one+0x68/0x1a0 [ 1576.757378] __pte_alloc+0x1d/0x330 [ 1576.757406] copy_page_range+0x1b62/0x3800 [ 1576.757427] ? perf_trace_lock+0xac/0x490 [ 1576.757458] ? find_held_lock+0x2c/0x110 [ 1576.757487] ? anon_vma_fork+0x462/0x640 [ 1576.757534] ? up_write+0x191/0x550 [ 1576.757555] ? vm_iomap_memory+0x190/0x190 [ 1576.757575] ? downgrade_write+0x3a0/0x3a0 [ 1576.757601] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1576.757626] ? __vma_link_rb+0x540/0x700 [ 1576.757658] copy_process+0x7658/0x78b0 [ 1576.757724] ? __cleanup_sighand+0xb0/0xb0 [ 1576.757743] ? perf_trace_lock+0xac/0x490 [ 1576.757789] ? find_held_lock+0x2c/0x110 [ 1576.757817] kernel_clone+0xe7/0x980 [ 1576.757839] ? lock_downgrade+0x6d0/0x6d0 [ 1576.757856] ? find_held_lock+0x2c/0x110 [ 1576.757876] ? create_io_thread+0xf0/0xf0 [ 1576.757899] ? ksys_write+0x12d/0x260 [ 1576.757930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1576.757963] __do_sys_fork+0x8a/0xc0 [ 1576.757982] ? kernel_thread+0xf0/0xf0 [ 1576.758025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1576.758048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1576.758065] ? trace_hardirqs_on+0x5b/0x180 [ 1576.758090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1576.758111] do_syscall_64+0x33/0x40 [ 1576.758133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1576.758147] RIP: 0033:0x7febfa601b19 [ 1576.758166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.758178] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1576.758201] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1576.758213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.758224] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.758236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.758249] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1576.821796] CPU: 0 PID: 17063 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1576.823272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1576.825126] Call Trace: [ 1576.825672] dump_stack+0x107/0x167 [ 1576.826442] should_fail.cold+0x5/0xa [ 1576.827237] ? create_object.isra.0+0x3a/0xa30 [ 1576.828190] should_failslab+0x5/0x20 [ 1576.828980] kmem_cache_alloc+0x5b/0x310 [ 1576.829849] create_object.isra.0+0x3a/0xa30 [ 1576.830763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1576.831824] kmem_cache_alloc_trace+0x151/0x320 [ 1576.832808] __io_uring_add_tctx_node+0x15c/0x520 [ 1576.833817] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1576.834897] ? alloc_fd+0x2e7/0x670 [ 1576.835676] io_uring_setup+0x1fbb/0x2980 [ 1576.836547] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1576.837597] ? wait_for_completion_io+0x270/0x270 [ 1576.838628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1576.839712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1576.840776] do_syscall_64+0x33/0x40 [ 1576.841556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1576.842621] RIP: 0033:0x7feb2b3bab19 [ 1576.843385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.847226] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1576.848800] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1576.850281] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1576.851756] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1576.853233] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1576.854703] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1576.906672] cgroup: fork rejected by pids controller in /syz2 02:04:37 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:37 executing program 4: fork() (fail_nth: 54) [ 1577.084018] FAULT_INJECTION: forcing a failure. [ 1577.084018] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.086549] CPU: 1 PID: 17277 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1577.088032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.089810] Call Trace: [ 1577.090378] dump_stack+0x107/0x167 [ 1577.091169] should_fail.cold+0x5/0xa [ 1577.091997] ? __pmd_alloc+0x94/0x630 [ 1577.092814] should_failslab+0x5/0x20 [ 1577.093648] kmem_cache_alloc+0x5b/0x310 [ 1577.094525] __pmd_alloc+0x94/0x630 [ 1577.095325] copy_page_range+0x2bd0/0x3800 02:04:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x0, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1577.096240] ? perf_trace_lock+0xac/0x490 [ 1577.097344] ? lock_chain_count+0x20/0x20 [ 1577.098248] ? find_held_lock+0x2c/0x110 [ 1577.099123] ? anon_vma_fork+0x462/0x640 [ 1577.100033] ? up_write+0x191/0x550 [ 1577.100817] ? vm_iomap_memory+0x190/0x190 [ 1577.101738] ? downgrade_write+0x3a0/0x3a0 [ 1577.102657] ? anon_vma_interval_tree_insert+0x277/0x450 02:04:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1577.103823] ? __vma_link_rb+0x540/0x700 [ 1577.104862] copy_process+0x7658/0x78b0 [ 1577.105765] ? __cleanup_sighand+0xb0/0xb0 [ 1577.106671] ? perf_trace_lock+0xac/0x490 [ 1577.107579] ? find_held_lock+0x2c/0x110 [ 1577.108454] kernel_clone+0xe7/0x980 [ 1577.109264] ? lock_downgrade+0x6d0/0x6d0 [ 1577.110149] ? find_held_lock+0x2c/0x110 [ 1577.111015] ? create_io_thread+0xf0/0xf0 [ 1577.111908] ? ksys_write+0x12d/0x260 [ 1577.112730] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1577.113783] __do_sys_fork+0x8a/0xc0 [ 1577.114589] ? kernel_thread+0xf0/0xf0 [ 1577.115449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.116569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.117674] ? trace_hardirqs_on+0x5b/0x180 [ 1577.118597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.119692] do_syscall_64+0x33/0x40 [ 1577.120501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.121617] RIP: 0033:0x7febfa601b19 [ 1577.122419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.126367] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1577.127995] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1577.129551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1577.131073] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.132594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.134114] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:04:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 02:04:37 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:37 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:37 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 57) [ 1577.508434] FAULT_INJECTION: forcing a failure. [ 1577.508434] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.510795] CPU: 1 PID: 17470 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1577.512167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.513821] Call Trace: [ 1577.514353] dump_stack+0x107/0x167 [ 1577.515087] should_fail.cold+0x5/0xa [ 1577.515845] ? create_object.isra.0+0x3a/0xa30 [ 1577.516742] should_failslab+0x5/0x20 [ 1577.517518] kmem_cache_alloc+0x5b/0x310 [ 1577.518332] create_object.isra.0+0x3a/0xa30 [ 1577.519201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.520218] kmem_cache_alloc_trace+0x151/0x320 [ 1577.521156] __io_uring_add_tctx_node+0x15c/0x520 [ 1577.522110] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1577.523156] ? alloc_fd+0x2e7/0x670 [ 1577.523897] io_uring_setup+0x1fbb/0x2980 [ 1577.524721] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1577.525835] ? wait_for_completion_io+0x270/0x270 [ 1577.526802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.527830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.528832] do_syscall_64+0x33/0x40 [ 1577.529547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.530538] RIP: 0033:0x7feb2b3bab19 [ 1577.531263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.534836] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1577.536298] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1577.537697] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1577.539087] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1577.540461] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1577.541862] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:04:53 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 58) 02:04:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x0, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:53 executing program 4: fork() (fail_nth: 55) 02:04:53 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x2, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:53 executing program 2: fork() fork() [ 1593.943900] FAULT_INJECTION: forcing a failure. [ 1593.943900] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.944342] FAULT_INJECTION: forcing a failure. [ 1593.944342] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.946946] CPU: 1 PID: 17515 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1593.946978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.946985] Call Trace: [ 1593.947013] dump_stack+0x107/0x167 [ 1593.947039] should_fail.cold+0x5/0xa [ 1593.947063] ? xas_alloc+0x336/0x440 [ 1593.947084] should_failslab+0x5/0x20 [ 1593.947104] kmem_cache_alloc+0x5b/0x310 [ 1593.947132] xas_alloc+0x336/0x440 [ 1593.947158] xas_create+0x34a/0x10d0 [ 1593.947195] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1593.947220] xas_store+0x8c/0x1c40 [ 1593.961096] __xa_store+0x164/0x2d0 [ 1593.961919] ? xa_delete_node+0x280/0x280 [ 1593.962856] ? trace_hardirqs_on+0x5b/0x180 [ 1593.963824] xa_store+0x31/0x50 [ 1593.964571] __io_uring_add_tctx_node+0x1cf/0x520 [ 1593.965644] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1593.966803] ? alloc_fd+0x2e7/0x670 [ 1593.967626] io_uring_setup+0x1fbb/0x2980 [ 1593.968563] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1593.969693] ? wait_for_completion_io+0x270/0x270 [ 1593.970802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1593.971962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.973118] do_syscall_64+0x33/0x40 [ 1593.973950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.975091] RIP: 0033:0x7feb2b3bab19 [ 1593.975912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.979974] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1593.981662] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1593.983237] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1593.984812] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1593.986399] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1593.987974] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1593.989594] CPU: 0 PID: 17512 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1593.991101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.992898] Call Trace: [ 1593.993479] dump_stack+0x107/0x167 [ 1593.994276] should_fail.cold+0x5/0xa [ 1593.995114] ? create_object.isra.0+0x3a/0xa30 [ 1593.996102] should_failslab+0x5/0x20 [ 1593.996932] kmem_cache_alloc+0x5b/0x310 [ 1593.997828] create_object.isra.0+0x3a/0xa30 [ 1593.998782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.999891] kmem_cache_alloc+0x159/0x310 [ 1594.000808] vm_area_dup+0x78/0x290 [ 1594.001619] ? _cond_resched+0x10/0x30 [ 1594.002470] ? copy_page_range+0x24e9/0x3800 [ 1594.003468] ? vm_area_alloc+0x110/0x110 [ 1594.004358] ? up_write+0x191/0x550 [ 1594.005147] ? vm_iomap_memory+0x190/0x190 [ 1594.006069] ? downgrade_write+0x3a0/0x3a0 [ 1594.006995] ? anon_vma_interval_tree_insert+0x277/0x450 02:04:53 executing program 7: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6bac6d4dbbdc6e5e03d7bf0be924d10187784aae4d0163c601c7ece4346f4c8db23e4a30c12b6b2e5083c9e981edbe33fa393d1770be5da97c0eb679eb6bd00198c4b2af0daa6bfad2ce3ff5eaf259e1cd141ce179bc1bb7dc114fbc5fa4fb0fe297997eb213516d6876fba78873112fbb79643b73bdb913c621649e119a16e6", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250200000005000400020000000900030073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c"], 0x1c}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x42e803, 0x0) lseek(r1, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xc4e) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000001540)={0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = signalfd4(r3, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000001a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x1040, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x37}}}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xd, 0x45, "d7ea97cd39d36ea6e2"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1040}, 0x1, 0x0, 0x0, 0x800}, 0x40000) fork() [ 1594.008181] ? __vma_link_rb+0x540/0x700 [ 1594.009291] copy_process+0x298b/0x78b0 [ 1594.010195] ? __cleanup_sighand+0xb0/0xb0 [ 1594.011107] ? perf_trace_lock+0xac/0x490 [ 1594.012029] ? find_held_lock+0x2c/0x110 [ 1594.012912] kernel_clone+0xe7/0x980 [ 1594.013726] ? lock_downgrade+0x6d0/0x6d0 [ 1594.014620] ? find_held_lock+0x2c/0x110 [ 1594.015498] ? create_io_thread+0xf0/0xf0 [ 1594.016398] ? ksys_write+0x12d/0x260 [ 1594.017241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1594.018294] __do_sys_fork+0x8a/0xc0 [ 1594.019099] ? kernel_thread+0xf0/0xf0 [ 1594.019959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1594.021091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1594.022213] ? trace_hardirqs_on+0x5b/0x180 [ 1594.023146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1594.024261] do_syscall_64+0x33/0x40 [ 1594.025067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.026185] RIP: 0033:0x7febfa601b19 [ 1594.026990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.030985] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1594.032632] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1594.034188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.035731] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.037284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1594.038828] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:04:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:16 executing program 7: ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:16 executing program 2: sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20008010) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x6428, 0x2, &(0x7f0000000000)="c72f3d0477d37e0da1825fddff0e62979169be0f9fcb6216fd1b6891cf375fcfd93fd1b3ddbd10c85712492a81192a4311505e11be2b7152f15c60a295997438d781b6095f8e6526fb1b", 0xffff, 0x0, 0x1, {0x3}}, 0x4) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="c98f000000000000000005"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0xb02, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) 02:05:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x0, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 59) 02:05:16 executing program 4: fork() (fail_nth: 56) [ 1616.340225] FAULT_INJECTION: forcing a failure. [ 1616.340225] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.342856] CPU: 1 PID: 17756 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1616.344368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.346182] Call Trace: [ 1616.346758] dump_stack+0x107/0x167 [ 1616.347554] should_fail.cold+0x5/0xa [ 1616.348390] ? create_object.isra.0+0x3a/0xa30 [ 1616.349384] should_failslab+0x5/0x20 [ 1616.350229] kmem_cache_alloc+0x5b/0x310 [ 1616.351115] ? mark_held_locks+0x9e/0xe0 [ 1616.351584] FAULT_INJECTION: forcing a failure. [ 1616.351584] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.351998] create_object.isra.0+0x3a/0xa30 [ 1616.352017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.352045] kmem_cache_alloc+0x159/0x310 [ 1616.352076] xas_alloc+0x336/0x440 [ 1616.352102] xas_create+0x34a/0x10d0 [ 1616.352137] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1616.352162] xas_store+0x8c/0x1c40 [ 1616.352203] __xa_store+0x164/0x2d0 [ 1616.352228] ? xa_delete_node+0x280/0x280 [ 1616.362045] ? trace_hardirqs_on+0x5b/0x180 [ 1616.363021] xa_store+0x31/0x50 [ 1616.363759] __io_uring_add_tctx_node+0x1cf/0x520 [ 1616.364838] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1616.366015] ? alloc_fd+0x2e7/0x670 [ 1616.366850] io_uring_setup+0x1fbb/0x2980 [ 1616.367781] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1616.368911] ? wait_for_completion_io+0x270/0x270 [ 1616.370023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.371189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.372337] do_syscall_64+0x33/0x40 [ 1616.373172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.374319] RIP: 0033:0x7feb2b3bab19 [ 1616.375150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.379245] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1616.380931] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1616.382522] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1616.384100] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1616.385695] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1616.387272] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1616.388941] CPU: 0 PID: 17758 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1616.390019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.391258] Call Trace: [ 1616.391706] dump_stack+0x107/0x167 [ 1616.392387] should_fail.cold+0x5/0xa [ 1616.392959] ? vm_area_dup+0x78/0x290 [ 1616.393545] should_failslab+0x5/0x20 [ 1616.394113] kmem_cache_alloc+0x5b/0x310 [ 1616.394722] vm_area_dup+0x78/0x290 [ 1616.395270] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1616.395961] ? lock_downgrade+0x6d0/0x6d0 [ 1616.396579] ? copy_page_range+0x24e9/0x3800 [ 1616.397245] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1616.397941] ? avc_has_extended_perms+0xf40/0xf40 [ 1616.398664] ? vm_area_alloc+0x110/0x110 [ 1616.399273] ? selinux_vm_enough_memory+0x114/0x180 [ 1616.400006] ? selinux_sb_statfs+0x250/0x250 [ 1616.400665] ? percpu_counter_add_batch+0x8b/0x140 [ 1616.401396] ? __vm_enough_memory+0x184/0x360 [ 1616.402060] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1616.402826] copy_process+0x298b/0x78b0 [ 1616.403445] ? __cleanup_sighand+0xb0/0xb0 [ 1616.404072] ? perf_trace_lock+0xac/0x490 [ 1616.404702] ? find_held_lock+0x2c/0x110 [ 1616.405308] kernel_clone+0xe7/0x980 [ 1616.405866] ? lock_downgrade+0x6d0/0x6d0 [ 1616.406477] ? find_held_lock+0x2c/0x110 [ 1616.407072] ? create_io_thread+0xf0/0xf0 [ 1616.407683] ? ksys_write+0x12d/0x260 [ 1616.408252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1616.408966] __do_sys_fork+0x8a/0xc0 [ 1616.409521] ? kernel_thread+0xf0/0xf0 [ 1616.410106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.410881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.411638] ? trace_hardirqs_on+0x5b/0x180 [ 1616.412274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.413028] do_syscall_64+0x33/0x40 [ 1616.413584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.414335] RIP: 0033:0x7febfa601b19 [ 1616.414881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.417583] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1616.418699] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1616.419741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.420776] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.421817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.422855] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:05:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 60) 02:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbb6, 0x0, 0x2, 0xa, 0x7, 0x1}, 0x20) fork() [ 1616.681230] FAULT_INJECTION: forcing a failure. [ 1616.681230] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.683986] CPU: 0 PID: 18067 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1616.685485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.687259] Call Trace: [ 1616.687832] dump_stack+0x107/0x167 [ 1616.688618] should_fail.cold+0x5/0xa [ 1616.689457] ? xas_alloc+0x336/0x440 [ 1616.690260] should_failslab+0x5/0x20 [ 1616.691086] kmem_cache_alloc+0x5b/0x310 [ 1616.691967] xas_alloc+0x336/0x440 [ 1616.692747] xas_create+0x34a/0x10d0 [ 1616.693572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1616.694710] xas_store+0x8c/0x1c40 [ 1616.695496] __xa_store+0x164/0x2d0 [ 1616.696286] ? xa_delete_node+0x280/0x280 [ 1616.697187] ? trace_hardirqs_on+0x5b/0x180 [ 1616.698142] xa_store+0x31/0x50 [ 1616.698859] __io_uring_add_tctx_node+0x1cf/0x520 [ 1616.699897] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1616.701038] ? alloc_fd+0x2e7/0x670 [ 1616.701850] io_uring_setup+0x1fbb/0x2980 [ 1616.702753] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1616.703849] ? wait_for_completion_io+0x270/0x270 [ 1616.704920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.706058] ? syscall_enter_from_user_mode+0x1d/0x50 02:05:16 executing program 2: fork() r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) waitid(0x2, r0, &(0x7f0000000140), 0x1, &(0x7f0000000080)) [ 1616.707168] do_syscall_64+0x33/0x40 [ 1616.708131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.709234] RIP: 0033:0x7feb2b3bab19 [ 1616.710046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.713921] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1616.715510] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1616.717012] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1616.718522] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1616.720016] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1616.721528] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:05:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:05:16 executing program 4: fork() (fail_nth: 57) [ 1616.842230] FAULT_INJECTION: forcing a failure. [ 1616.842230] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.845129] CPU: 0 PID: 18152 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1616.846621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.848363] Call Trace: [ 1616.848926] dump_stack+0x107/0x167 [ 1616.849713] should_fail.cold+0x5/0xa [ 1616.850522] ? create_object.isra.0+0x3a/0xa30 [ 1616.851493] should_failslab+0x5/0x20 [ 1616.852298] kmem_cache_alloc+0x5b/0x310 [ 1616.853165] create_object.isra.0+0x3a/0xa30 [ 1616.854101] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.855184] kmem_cache_alloc+0x159/0x310 [ 1616.856076] vm_area_dup+0x78/0x290 [ 1616.856859] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1616.857835] ? lock_downgrade+0x6d0/0x6d0 [ 1616.858712] ? copy_page_range+0x24e9/0x3800 [ 1616.859668] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1616.860653] ? avc_has_extended_perms+0xf40/0xf40 [ 1616.861698] ? vm_area_alloc+0x110/0x110 [ 1616.862570] ? selinux_vm_enough_memory+0x114/0x180 [ 1616.863621] ? selinux_sb_statfs+0x250/0x250 [ 1616.864558] ? percpu_counter_add_batch+0x8b/0x140 [ 1616.865611] ? __vm_enough_memory+0x184/0x360 [ 1616.866566] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1616.867669] copy_process+0x298b/0x78b0 [ 1616.868527] ? __cleanup_sighand+0xb0/0xb0 [ 1616.869437] ? perf_trace_lock+0xac/0x490 [ 1616.870342] ? find_held_lock+0x2c/0x110 [ 1616.871219] kernel_clone+0xe7/0x980 [ 1616.872011] ? lock_downgrade+0x6d0/0x6d0 [ 1616.872888] ? find_held_lock+0x2c/0x110 [ 1616.873768] ? create_io_thread+0xf0/0xf0 [ 1616.874645] ? ksys_write+0x12d/0x260 [ 1616.875467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1616.876503] __do_sys_fork+0x8a/0xc0 [ 1616.877289] ? kernel_thread+0xf0/0xf0 [ 1616.878149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.879267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.880353] ? trace_hardirqs_on+0x5b/0x180 [ 1616.881268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.882359] do_syscall_64+0x33/0x40 [ 1616.883152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.884231] RIP: 0033:0x7febfa601b19 [ 1616.885016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.888860] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1616.890463] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1616.891972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.893484] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.894986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.896486] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:17 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 61) 02:05:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:17 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1617.075693] FAULT_INJECTION: forcing a failure. [ 1617.075693] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.078651] CPU: 0 PID: 18376 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1617.080182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.081993] Call Trace: [ 1617.082568] dump_stack+0x107/0x167 [ 1617.083356] should_fail.cold+0x5/0xa [ 1617.084181] ? xas_alloc+0x336/0x440 [ 1617.084988] should_failslab+0x5/0x20 [ 1617.085821] kmem_cache_alloc+0x5b/0x310 [ 1617.086708] xas_alloc+0x336/0x440 [ 1617.087480] xas_create+0x34a/0x10d0 [ 1617.088306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1617.089450] xas_store+0x8c/0x1c40 [ 1617.090240] __xa_store+0x164/0x2d0 [ 1617.091036] ? xa_delete_node+0x280/0x280 [ 1617.091942] ? trace_hardirqs_on+0x5b/0x180 [ 1617.092890] xa_store+0x31/0x50 [ 1617.093623] __io_uring_add_tctx_node+0x1cf/0x520 [ 1617.094671] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1617.095799] ? alloc_fd+0x2e7/0x670 [ 1617.096610] io_uring_setup+0x1fbb/0x2980 [ 1617.097524] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1617.098622] ? wait_for_completion_io+0x270/0x270 [ 1617.099690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.100831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.101960] do_syscall_64+0x33/0x40 [ 1617.102770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.103882] RIP: 0033:0x7feb2b3bab19 [ 1617.104683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.108651] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1617.110279] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1617.111773] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1617.113272] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1617.114771] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1617.116253] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:05:35 executing program 4: fork() (fail_nth: 58) [ 1635.829402] FAULT_INJECTION: forcing a failure. [ 1635.829402] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.832219] CPU: 0 PID: 18499 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1635.833666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.835369] Call Trace: [ 1635.835930] dump_stack+0x107/0x167 [ 1635.836692] should_fail.cold+0x5/0xa [ 1635.837503] ? vm_area_dup+0x78/0x290 [ 1635.838324] should_failslab+0x5/0x20 [ 1635.839127] kmem_cache_alloc+0x5b/0x310 02:05:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:35 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 62) 02:05:35 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1635.839995] vm_area_dup+0x78/0x290 [ 1635.840885] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1635.841895] ? lock_downgrade+0x6d0/0x6d0 [ 1635.842773] ? copy_page_range+0x24e9/0x3800 [ 1635.843733] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1635.844714] ? avc_has_extended_perms+0xf40/0xf40 [ 1635.845769] ? vm_area_alloc+0x110/0x110 [ 1635.846643] ? selinux_vm_enough_memory+0x114/0x180 [ 1635.847690] ? selinux_sb_statfs+0x250/0x250 [ 1635.848623] ? percpu_counter_add_batch+0x8b/0x140 [ 1635.849684] ? __vm_enough_memory+0x184/0x360 [ 1635.850598] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1635.851692] copy_process+0x298b/0x78b0 [ 1635.852553] ? __cleanup_sighand+0xb0/0xb0 [ 1635.853452] ? perf_trace_lock+0xac/0x490 [ 1635.854330] ? find_held_lock+0x2c/0x110 [ 1635.855200] kernel_clone+0xe7/0x980 [ 1635.855993] ? lock_downgrade+0x6d0/0x6d0 [ 1635.856841] ? find_held_lock+0x2c/0x110 [ 1635.857718] ? create_io_thread+0xf0/0xf0 [ 1635.858567] ? ksys_write+0x12d/0x260 [ 1635.859385] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1635.860381] __do_sys_fork+0x8a/0xc0 [ 1635.861167] ? kernel_thread+0xf0/0xf0 [ 1635.861994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1635.863102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.864153] ? trace_hardirqs_on+0x5b/0x180 [ 1635.865069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.866126] do_syscall_64+0x33/0x40 [ 1635.866921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1635.867978] RIP: 0033:0x7febfa601b19 [ 1635.868764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.872636] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1635.874257] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1635.875771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1635.877275] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.878785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.880294] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1635.895451] FAULT_INJECTION: forcing a failure. [ 1635.895451] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.898251] CPU: 0 PID: 18502 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1635.899730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.901484] Call Trace: [ 1635.902065] dump_stack+0x107/0x167 [ 1635.902839] should_fail.cold+0x5/0xa [ 1635.903656] ? xas_alloc+0x336/0x440 [ 1635.904444] should_failslab+0x5/0x20 [ 1635.905256] kmem_cache_alloc+0x5b/0x310 [ 1635.906128] xas_alloc+0x336/0x440 [ 1635.906892] xas_create+0x34a/0x10d0 [ 1635.907698] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1635.908817] xas_store+0x8c/0x1c40 [ 1635.909571] __xa_store+0x164/0x2d0 [ 1635.910363] ? xa_delete_node+0x280/0x280 [ 1635.911250] ? trace_hardirqs_on+0x5b/0x180 [ 1635.912166] xa_store+0x31/0x50 [ 1635.912866] __io_uring_add_tctx_node+0x1cf/0x520 [ 1635.913896] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1635.915007] ? alloc_fd+0x2e7/0x670 [ 1635.915796] io_uring_setup+0x1fbb/0x2980 [ 1635.916686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1635.917770] ? wait_for_completion_io+0x270/0x270 [ 1635.918800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1635.919908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.921010] do_syscall_64+0x33/0x40 [ 1635.921813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1635.922903] RIP: 0033:0x7feb2b3bab19 [ 1635.923693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.927598] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:05:36 executing program 4: fork() (fail_nth: 59) [ 1635.929212] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1635.930935] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1635.932433] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1635.933948] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1635.935454] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1635.935574] FAULT_INJECTION: forcing a failure. [ 1635.935574] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.938427] CPU: 1 PID: 18509 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1635.939246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.940222] Call Trace: [ 1635.940540] dump_stack+0x107/0x167 [ 1635.940973] should_fail.cold+0x5/0xa [ 1635.941425] ? create_object.isra.0+0x3a/0xa30 [ 1635.941973] should_failslab+0x5/0x20 [ 1635.942424] kmem_cache_alloc+0x5b/0x310 [ 1635.942902] create_object.isra.0+0x3a/0xa30 [ 1635.943418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1635.944017] kmem_cache_alloc+0x159/0x310 [ 1635.944509] anon_vma_clone+0xdc/0x590 [ 1635.944971] anon_vma_fork+0x82/0x640 [ 1635.945418] ? __vm_enough_memory+0x184/0x360 [ 1635.945957] copy_process+0x72cd/0x78b0 [ 1635.946445] ? __cleanup_sighand+0xb0/0xb0 [ 1635.946940] ? perf_trace_lock+0xac/0x490 [ 1635.947446] ? find_held_lock+0x2c/0x110 [ 1635.947925] kernel_clone+0xe7/0x980 [ 1635.948355] ? lock_downgrade+0x6d0/0x6d0 [ 1635.948832] ? find_held_lock+0x2c/0x110 [ 1635.949304] ? create_io_thread+0xf0/0xf0 [ 1635.949803] ? ksys_write+0x12d/0x260 [ 1635.950258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1635.950828] __do_sys_fork+0x8a/0xc0 [ 1635.951265] ? kernel_thread+0xf0/0xf0 [ 1635.951734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1635.952363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.952967] ? trace_hardirqs_on+0x5b/0x180 [ 1635.953480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1635.954102] do_syscall_64+0x33/0x40 [ 1635.954537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1635.955132] RIP: 0033:0x7febfa601b19 [ 1635.955565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.957714] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1635.958600] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1635.959426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1635.960260] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.961088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.961925] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="c98f000000000000000005"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x9e2150bbadea6c40) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) tkill(r3, 0x12) r5 = fork() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x12) wait4(r5, &(0x7f0000000000), 0x20000000, &(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:36 executing program 5: fork() fork() 02:05:36 executing program 4: fork() (fail_nth: 60) 02:05:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:05:36 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 63) [ 1636.129578] FAULT_INJECTION: forcing a failure. [ 1636.129578] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.130982] CPU: 1 PID: 18651 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1636.131789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.132748] Call Trace: [ 1636.133059] dump_stack+0x107/0x167 [ 1636.133485] should_fail.cold+0x5/0xa [ 1636.133942] ? xas_alloc+0x336/0x440 [ 1636.134381] should_failslab+0x5/0x20 [ 1636.134830] kmem_cache_alloc+0x5b/0x310 [ 1636.135304] xas_alloc+0x336/0x440 [ 1636.135727] xas_create+0x34a/0x10d0 [ 1636.136171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1636.136791] xas_store+0x8c/0x1c40 [ 1636.137213] __xa_store+0x164/0x2d0 [ 1636.137647] ? xa_delete_node+0x280/0x280 [ 1636.138127] ? trace_hardirqs_on+0x5b/0x180 [ 1636.138628] xa_store+0x31/0x50 [ 1636.139012] __io_uring_add_tctx_node+0x1cf/0x520 [ 1636.139567] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1636.140175] ? alloc_fd+0x2e7/0x670 [ 1636.140603] io_uring_setup+0x1fbb/0x2980 [ 1636.141086] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1636.141689] ? wait_for_completion_io+0x270/0x270 [ 1636.142259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1636.142862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.143455] do_syscall_64+0x33/0x40 [ 1636.143883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1636.144471] RIP: 0033:0x7feb2b3bab19 [ 1636.144898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.147015] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1636.147890] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1636.148710] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1636.149527] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1636.150358] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1636.151175] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1636.160711] FAULT_INJECTION: forcing a failure. [ 1636.160711] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.162050] CPU: 1 PID: 18698 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1636.162845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.163795] Call Trace: [ 1636.164100] dump_stack+0x107/0x167 [ 1636.164528] should_fail.cold+0x5/0xa [ 1636.164968] ? anon_vma_fork+0xf1/0x640 [ 1636.165432] should_failslab+0x5/0x20 [ 1636.165876] kmem_cache_alloc+0x5b/0x310 [ 1636.166347] anon_vma_fork+0xf1/0x640 [ 1636.166792] ? __vm_enough_memory+0x184/0x360 [ 1636.167312] copy_process+0x72cd/0x78b0 [ 1636.167795] ? __cleanup_sighand+0xb0/0xb0 [ 1636.168280] ? perf_trace_lock+0xac/0x490 [ 1636.168777] ? find_held_lock+0x2c/0x110 [ 1636.169249] kernel_clone+0xe7/0x980 [ 1636.169686] ? lock_downgrade+0x6d0/0x6d0 [ 1636.170166] ? find_held_lock+0x2c/0x110 [ 1636.170639] ? create_io_thread+0xf0/0xf0 [ 1636.171116] ? ksys_write+0x12d/0x260 [ 1636.171565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1636.172125] __do_sys_fork+0x8a/0xc0 [ 1636.172552] ? kernel_thread+0xf0/0xf0 [ 1636.173010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1636.173616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.174222] ? trace_hardirqs_on+0x5b/0x180 [ 1636.174725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.175322] do_syscall_64+0x33/0x40 [ 1636.175754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1636.176340] RIP: 0033:0x7febfa601b19 [ 1636.176772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.178888] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1636.179763] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1636.180585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1636.181402] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.182227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1636.183040] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:36 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 64) 02:05:36 executing program 4: fork() (fail_nth: 61) [ 1636.273329] FAULT_INJECTION: forcing a failure. [ 1636.273329] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.274723] CPU: 1 PID: 18813 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1636.275518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.276469] Call Trace: [ 1636.276786] dump_stack+0x107/0x167 [ 1636.277207] should_fail.cold+0x5/0xa [ 1636.277658] ? xas_alloc+0x336/0x440 [ 1636.278090] should_failslab+0x5/0x20 [ 1636.278528] kmem_cache_alloc+0x5b/0x310 [ 1636.279002] xas_alloc+0x336/0x440 [ 1636.279412] xas_create+0x34a/0x10d0 [ 1636.279858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1636.280464] xas_store+0x8c/0x1c40 [ 1636.280882] __xa_store+0x164/0x2d0 [ 1636.281304] ? xa_delete_node+0x280/0x280 [ 1636.281799] ? trace_hardirqs_on+0x5b/0x180 [ 1636.282300] xa_store+0x31/0x50 [ 1636.282688] __io_uring_add_tctx_node+0x1cf/0x520 [ 1636.283243] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1636.283846] ? alloc_fd+0x2e7/0x670 [ 1636.284273] io_uring_setup+0x1fbb/0x2980 [ 1636.284766] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1636.285345] ? wait_for_completion_io+0x270/0x270 [ 1636.285934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1636.286541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.287135] do_syscall_64+0x33/0x40 [ 1636.287564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1636.288160] RIP: 0033:0x7feb2b3bab19 [ 1636.288590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.290708] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1636.291582] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1636.292401] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1636.293217] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1636.294043] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1636.294860] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:05:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xfff, 0x2) fork() 02:05:36 executing program 5: fork() fork() [ 1636.370481] FAULT_INJECTION: forcing a failure. [ 1636.370481] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.373293] CPU: 0 PID: 18837 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1636.374781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.376531] Call Trace: [ 1636.377101] dump_stack+0x107/0x167 [ 1636.377890] should_fail.cold+0x5/0xa [ 1636.378703] ? anon_vma_clone+0xdc/0x590 [ 1636.379567] should_failslab+0x5/0x20 [ 1636.380381] kmem_cache_alloc+0x5b/0x310 [ 1636.381264] anon_vma_clone+0xdc/0x590 [ 1636.382120] anon_vma_fork+0x82/0x640 [ 1636.382901] ? __vm_enough_memory+0x184/0x360 [ 1636.383863] copy_process+0x72cd/0x78b0 [ 1636.384750] ? __cleanup_sighand+0xb0/0xb0 [ 1636.385654] ? perf_trace_lock+0xac/0x490 [ 1636.386567] ? find_held_lock+0x2c/0x110 [ 1636.387436] kernel_clone+0xe7/0x980 [ 1636.388229] ? lock_downgrade+0x6d0/0x6d0 [ 1636.389106] ? find_held_lock+0x2c/0x110 [ 1636.389983] ? create_io_thread+0xf0/0xf0 [ 1636.390864] ? ksys_write+0x12d/0x260 [ 1636.391684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1636.392717] __do_sys_fork+0x8a/0xc0 [ 1636.393491] ? kernel_thread+0xf0/0xf0 [ 1636.394343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1636.395452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.396534] ? trace_hardirqs_on+0x5b/0x180 [ 1636.397447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.398536] do_syscall_64+0x33/0x40 [ 1636.399323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1636.400401] RIP: 0033:0x7febfa601b19 [ 1636.401185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.405069] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1636.406680] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1636.408179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1636.409688] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.411186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1636.412697] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:53 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:05:53 executing program 4: fork() (fail_nth: 62) 02:05:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:05:53 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 65) 02:05:53 executing program 5: fork() fork() 02:05:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:05:53 executing program 7: init_module(&(0x7f0000000100)='@*#&\x00', 0x5, &(0x7f0000000140)='^\x00') r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8c, 0x2, 0x3f, 0x5, 0x0, 0x2, 0x2000a, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp, 0x10003, 0x2, 0xfff, 0x4, 0x40, 0xffffff7f, 0x1, 0x0, 0x7fff, 0x0, 0x100000000}, r1, 0x6, r0, 0x0) [ 1653.759091] FAULT_INJECTION: forcing a failure. [ 1653.759091] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.760841] CPU: 1 PID: 19059 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1653.761901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.763124] Call Trace: [ 1653.763591] dump_stack+0x107/0x167 [ 1653.764208] should_fail.cold+0x5/0xa [ 1653.764816] ? create_object.isra.0+0x3a/0xa30 [ 1653.765567] should_failslab+0x5/0x20 [ 1653.766182] kmem_cache_alloc+0x5b/0x310 [ 1653.766796] ? mark_held_locks+0x9e/0xe0 [ 1653.767417] create_object.isra.0+0x3a/0xa30 [ 1653.768071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1653.768853] kmem_cache_alloc+0x159/0x310 [ 1653.769467] xas_alloc+0x336/0x440 [ 1653.770011] xas_create+0x34a/0x10d0 [ 1653.770566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1653.771335] xas_store+0x8c/0x1c40 [ 1653.771858] __xa_store+0x164/0x2d0 [ 1653.772401] ? xa_delete_node+0x280/0x280 [ 1653.773037] ? trace_hardirqs_on+0x5b/0x180 [ 1653.773673] xa_store+0x31/0x50 [ 1653.774074] FAULT_INJECTION: forcing a failure. [ 1653.774074] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.774181] __io_uring_add_tctx_node+0x1cf/0x520 [ 1653.774207] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1653.778033] ? alloc_fd+0x2e7/0x670 [ 1653.778586] io_uring_setup+0x1fbb/0x2980 [ 1653.779209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1653.779960] ? wait_for_completion_io+0x270/0x270 [ 1653.780688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.781488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.782277] do_syscall_64+0x33/0x40 [ 1653.782824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.783576] RIP: 0033:0x7feb2b3bab19 [ 1653.784114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.786864] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1653.787982] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1653.789044] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1653.790118] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1653.791180] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1653.792250] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1653.793346] CPU: 0 PID: 19056 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1653.794851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.796594] Call Trace: [ 1653.797163] dump_stack+0x107/0x167 [ 1653.797961] should_fail.cold+0x5/0xa [ 1653.798781] ? anon_vma_fork+0xf1/0x640 [ 1653.799642] should_failslab+0x5/0x20 [ 1653.800463] kmem_cache_alloc+0x5b/0x310 [ 1653.801333] anon_vma_fork+0xf1/0x640 [ 1653.802147] ? __vm_enough_memory+0x184/0x360 [ 1653.803110] copy_process+0x72cd/0x78b0 [ 1653.804004] ? __cleanup_sighand+0xb0/0xb0 [ 1653.804909] ? perf_trace_lock+0xac/0x490 [ 1653.805811] ? find_held_lock+0x2c/0x110 [ 1653.806712] kernel_clone+0xe7/0x980 [ 1653.807518] ? lock_downgrade+0x6d0/0x6d0 [ 1653.808395] ? find_held_lock+0x2c/0x110 [ 1653.809251] ? create_io_thread+0xf0/0xf0 [ 1653.810136] ? ksys_write+0x12d/0x260 [ 1653.810957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1653.811994] __do_sys_fork+0x8a/0xc0 [ 1653.812781] ? kernel_thread+0xf0/0xf0 [ 1653.813631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.814760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.815846] ? trace_hardirqs_on+0x5b/0x180 [ 1653.816769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.817873] do_syscall_64+0x33/0x40 [ 1653.818657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1653.819742] RIP: 0033:0x7febfa601b19 [ 1653.820528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.824423] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1653.826036] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1653.827553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1653.829056] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.830563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1653.832052] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:05:53 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:05:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 66) [ 1653.985192] FAULT_INJECTION: forcing a failure. [ 1653.985192] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.986643] CPU: 1 PID: 19173 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1653.987489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.988586] Call Trace: [ 1653.988917] dump_stack+0x107/0x167 [ 1653.989408] should_fail.cold+0x5/0xa [ 1653.989904] ? xas_alloc+0x336/0x440 [ 1653.990391] should_failslab+0x5/0x20 [ 1653.990890] kmem_cache_alloc+0x5b/0x310 [ 1653.991392] xas_alloc+0x336/0x440 [ 1653.991829] xas_create+0x34a/0x10d0 [ 1653.992295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1653.992935] xas_store+0x8c/0x1c40 [ 1653.993378] __xa_store+0x164/0x2d0 [ 1653.993839] ? xa_delete_node+0x280/0x280 [ 1653.994364] ? trace_hardirqs_on+0x5b/0x180 [ 1653.994896] xa_store+0x31/0x50 [ 1653.995331] __io_uring_add_tctx_node+0x1cf/0x520 [ 1653.995920] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1653.996607] ? alloc_fd+0x2e7/0x670 [ 1653.997061] io_uring_setup+0x1fbb/0x2980 [ 1653.997604] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1653.998236] ? wait_for_completion_io+0x270/0x270 [ 1653.998857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.999506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.000208] do_syscall_64+0x33/0x40 [ 1654.000701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.001394] RIP: 0033:0x7feb2b3bab19 [ 1654.001870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.004268] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1654.005247] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1654.006246] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1654.007187] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1654.008145] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1654.009060] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:05:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 1) 02:05:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1654.060457] FAULT_INJECTION: forcing a failure. [ 1654.060457] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.061949] CPU: 1 PID: 19233 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1654.062804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1654.063815] Call Trace: [ 1654.064142] dump_stack+0x107/0x167 [ 1654.064592] should_fail.cold+0x5/0xa [ 1654.065059] ? copy_process+0x3305/0x78b0 [ 1654.065577] should_failslab+0x5/0x20 [ 1654.066084] kmem_cache_alloc_node+0x55/0x330 [ 1654.066618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.067263] copy_process+0x3305/0x78b0 [ 1654.067758] ? __lock_acquire+0xbb1/0x5b00 [ 1654.068281] ? lock_downgrade+0x6d0/0x6d0 [ 1654.068796] ? __cleanup_sighand+0xb0/0xb0 [ 1654.069294] ? perf_trace_lock+0xac/0x490 [ 1654.069807] ? __lockdep_reset_lock+0x180/0x180 [ 1654.070408] ? find_held_lock+0x2c/0x110 [ 1654.070883] kernel_clone+0xe7/0x980 [ 1654.071333] ? lock_downgrade+0x6d0/0x6d0 [ 1654.071838] ? find_held_lock+0x2c/0x110 [ 1654.072308] ? create_io_thread+0xf0/0xf0 [ 1654.072790] ? ksys_write+0x12d/0x260 [ 1654.073261] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1654.073828] __do_sys_fork+0x8a/0xc0 [ 1654.074292] ? kernel_thread+0xf0/0xf0 [ 1654.074773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1654.075413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.076038] ? trace_hardirqs_on+0x5b/0x180 [ 1654.076568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1654.077193] do_syscall_64+0x33/0x40 [ 1654.077643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1654.078256] RIP: 0033:0x7ff788849b19 [ 1654.078706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1654.080905] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1654.081844] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1654.082714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1654.083573] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.084381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.085192] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:05:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:06:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 67) 02:06:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 02:06:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:16 executing program 4: fork() (fail_nth: 63) 02:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 2) 02:06:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:06:16 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005f9c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "dfb9a9f1054ffa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000055c80)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000060bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000060dc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0}) [ 1676.031141] FAULT_INJECTION: forcing a failure. [ 1676.031141] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.033848] CPU: 0 PID: 19288 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1676.035347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.037119] Call Trace: [ 1676.037689] dump_stack+0x107/0x167 [ 1676.038482] should_fail.cold+0x5/0xa [ 1676.039305] ? create_object.isra.0+0x3a/0xa30 [ 1676.040276] should_failslab+0x5/0x20 [ 1676.041094] kmem_cache_alloc+0x5b/0x310 [ 1676.041985] create_object.isra.0+0x3a/0xa30 [ 1676.042933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.043156] FAULT_INJECTION: forcing a failure. [ 1676.043156] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.044016] kmem_cache_alloc+0x159/0x310 [ 1676.044050] anon_vma_fork+0x1ff/0x640 [ 1676.044084] copy_process+0x72cd/0x78b0 [ 1676.049322] ? __cleanup_sighand+0xb0/0xb0 [ 1676.050225] ? perf_trace_lock+0xac/0x490 [ 1676.051132] ? find_held_lock+0x2c/0x110 [ 1676.051999] kernel_clone+0xe7/0x980 [ 1676.052800] ? lock_downgrade+0x6d0/0x6d0 [ 1676.053686] ? find_held_lock+0x2c/0x110 [ 1676.054555] ? create_io_thread+0xf0/0xf0 [ 1676.055451] ? ksys_write+0x12d/0x260 [ 1676.056285] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.057322] __do_sys_fork+0x8a/0xc0 [ 1676.058129] ? kernel_thread+0xf0/0xf0 [ 1676.058987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.060106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.061212] ? trace_hardirqs_on+0x5b/0x180 [ 1676.062145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.063254] do_syscall_64+0x33/0x40 [ 1676.064049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.065150] RIP: 0033:0x7febfa601b19 [ 1676.065950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.069920] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1676.071535] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1676.073058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.074579] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.076105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.077631] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1676.079204] CPU: 1 PID: 19296 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1676.080898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.082906] Call Trace: [ 1676.083557] dump_stack+0x107/0x167 [ 1676.084435] should_fail.cold+0x5/0xa [ 1676.085358] ? create_object.isra.0+0x3a/0xa30 [ 1676.086465] should_failslab+0x5/0x20 [ 1676.087370] kmem_cache_alloc+0x5b/0x310 [ 1676.088496] create_object.isra.0+0x3a/0xa30 [ 1676.089553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.090790] kmem_cache_alloc_node+0x169/0x330 [ 1676.091877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.093156] copy_process+0x3305/0x78b0 [ 1676.094127] ? __lock_acquire+0xbb1/0x5b00 [ 1676.095156] ? lock_downgrade+0x6d0/0x6d0 [ 1676.096139] ? __cleanup_sighand+0xb0/0xb0 [ 1676.097312] ? perf_trace_lock+0xac/0x490 [ 1676.098337] ? __lockdep_reset_lock+0x180/0x180 [ 1676.099503] ? find_held_lock+0x2c/0x110 [ 1676.100467] kernel_clone+0xe7/0x980 [ 1676.101353] ? lock_downgrade+0x6d0/0x6d0 [ 1676.102348] ? find_held_lock+0x2c/0x110 [ 1676.102553] FAULT_INJECTION: forcing a failure. [ 1676.102553] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.103306] ? create_io_thread+0xf0/0xf0 [ 1676.103329] ? ksys_write+0x12d/0x260 [ 1676.103359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.103391] __do_sys_fork+0x8a/0xc0 [ 1676.103411] ? kernel_thread+0xf0/0xf0 [ 1676.103452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.103475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.103492] ? trace_hardirqs_on+0x5b/0x180 [ 1676.103517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.103538] do_syscall_64+0x33/0x40 [ 1676.103560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.103575] RIP: 0033:0x7ff788849b19 [ 1676.103597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.103608] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1676.125214] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1676.126925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.128627] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.130354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.132061] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1676.134046] CPU: 0 PID: 19295 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1676.135548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.137292] Call Trace: [ 1676.137851] dump_stack+0x107/0x167 [ 1676.138634] should_fail.cold+0x5/0xa [ 1676.139445] should_failslab+0x5/0x20 [ 1676.140247] kmem_cache_alloc_bulk+0x4b/0x320 [ 1676.141206] io_submit_sqes+0x713e/0x8780 [ 1676.142098] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1676.143405] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1676.144452] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1676.145465] ? find_held_lock+0x2c/0x110 [ 1676.146338] ? io_submit_sqes+0x8780/0x8780 [ 1676.147255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.148281] ? wait_for_completion_io+0x270/0x270 [ 1676.149300] ? rcu_read_lock_any_held+0x75/0xa0 [ 1676.150282] ? vfs_write+0x354/0xb10 [ 1676.151072] ? fput_many+0x2f/0x1a0 [ 1676.151232] FAULT_INJECTION: forcing a failure. [ 1676.151232] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.151837] ? ksys_write+0x1a9/0x260 [ 1676.151855] ? __ia32_sys_read+0xb0/0xb0 [ 1676.151882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.157192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.158292] do_syscall_64+0x33/0x40 [ 1676.159072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.160166] RIP: 0033:0x7f8917489b19 [ 1676.160960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.164833] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1676.166432] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1676.167927] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1676.169420] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.170937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.172455] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 [ 1676.173996] CPU: 1 PID: 19298 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1676.175636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.177534] Call Trace: [ 1676.178160] dump_stack+0x107/0x167 [ 1676.179007] should_fail.cold+0x5/0xa [ 1676.180056] ? create_object.isra.0+0x3a/0xa30 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000055c80)={0x0, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000055c80)={0x0, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0}) [ 1676.181341] should_failslab+0x5/0x20 [ 1676.182302] kmem_cache_alloc+0x5b/0x310 [ 1676.183277] ? mark_held_locks+0x9e/0xe0 [ 1676.184229] create_object.isra.0+0x3a/0xa30 [ 1676.185238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.186454] kmem_cache_alloc+0x159/0x310 [ 1676.187449] xas_alloc+0x336/0x440 [ 1676.188268] xas_create+0x34a/0x10d0 [ 1676.189170] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1676.190424] xas_store+0x8c/0x1c40 [ 1676.191289] __xa_store+0x164/0x2d0 [ 1676.192153] ? xa_delete_node+0x280/0x280 [ 1676.193120] ? trace_hardirqs_on+0x5b/0x180 [ 1676.194165] xa_store+0x31/0x50 [ 1676.194955] __io_uring_add_tctx_node+0x1cf/0x520 [ 1676.196094] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1676.197339] ? alloc_fd+0x2e7/0x670 [ 1676.198223] io_uring_setup+0x1fbb/0x2980 [ 1676.199221] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1676.200531] ? wait_for_completion_io+0x270/0x270 [ 1676.201918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.203273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.204468] do_syscall_64+0x33/0x40 [ 1676.205324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.206548] RIP: 0033:0x7feb2b3bab19 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000055c80)={0x0, r8, "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", "53eff67e965dcde3dcc2524e3f46ef25de5c85df1f0787c1013861ab094b20795120fa95d9182f51d6bf16555487b518dff323e6d1ff326dfb41f05eab0d584ff26c926505f8bb350d24ac50bac3646b15ca6d4d290bba1e762be18dd1d228cd3fab17c93cc35f1c1811fe9a88efb6f94ed589b4ac0c282c98610976a71a1f57267879e4059285e2c039abe29722c209fe3b4a7c66fb7ded3fa186856d68a21ee33e4cdf08e15fee4769369fa392e17c33ed2da64874105f1aaabd56e4627c6c55b4de4937c37bae6e4cf88aeb662dc100745db31c82e600bf8ca555c26be2daa2548a4b6856241775a165bbb78ce18c450d6bafde29700401a1e3effc623998be1d51eda4f128999a1f8a22f15964435e1cbd09f14f471937e6aa8ae6bcb0f9e58f3fb38afc76fdba22242bac5651474af9a9fc35a32741e30403a938fe7c617b8dee96886198cb240e7e964c0dcf4353a3aa32a51788acc768c86d9655f4a768b7c5519f3ac0689cdaf0d55efd97d30e5b78bbe2e06231a4f6498b30c8526360832af1d21a10bd97c1e833a94c610380ba2a3e0de1736c29547794f1ea40674cd847c152418419e311a0ffde99427bc5faca757716ad9d73d1b043eb1696a4e770ded037cdb981e9d21e9efee4f7a86f10abf39219af795e679abb68b324fe7af24655bb7b5838d43d46ae9da3ee13ab122ea3ff7a7cff51a9d9648f3914d82122be0a21d9ed514749fa8ac31d52084ca43b5948ce6ec46bd2794d64ce2dd40ce5d1065e4ed937be241c08508ef4a370dee7acae575c5ee6fbad86831bf43e3a3d428a45248063c1715f502656b5c844d63fe02c9efa0771cbe5eeac250423324921418f73fa646f1ab608b4857ad203ee96e45926fcc2a0fe85fa207f76e8f308f052d4113138f1bb4c9d12e6e13256836afbf005880bfe871f9440029b5470121f2f37c8178191d6a5325755555632ba2670cd0d60fb45c49e72d206678226ddc40738d632c5ae716b3933a10fe57a70248adc5ff952e2f248c5b81e3c1d21e8f4b18517fc6fb3094a32dd2abc223ac46ead50396998da5ac3b31640c1d252f8f137855f69c36887497df671b647c64fc9067e323907fb05a0deec3f89a8bc2bee721cc47ddc10635c64b491902d496a98ee88444f98c46479de73336996f7fa2a4f02d36fd2004bb7641264a83a4ca5ed21b4b5288104a4605cb260ee73e596c3e3d254379427fbeed7481069623ff0531291d78c314b19a59dc4647e606243a121e1cf23b6e5c529325072c6c1e29d0526f5fb52143cf565849b8f475dc04419f25d89d0ac197c1e6ba11045eff71b44c547c075dfe95a443b884bfcbe0df70cc6ab8e75fdd5369afd7069da75de9f98a6e79a07d7bcf7fd9c0186057069a462f7a5ed1c9113ca26f2121a22bcd74c270292f98325c32a9e3b1c1e9209fb8186c1efd5534ca97b5aa14c59bb86cc1d6d684e32fddc9419cb34948d169db8a42000d437b422d91aa39fc3e3e8f9b8681e808bcc3ddc44ab1fc517d8900b208fbf546ae17d23d60a121782624715a8269e29ca7ed2c07bdaaf469d273dc95c0aaf0efaa1066fcbfe2e237905683b1820ef0cb24019a267a14952a575e5754811f6b1616b0e4b566721f52cb908ef3e49ef50783d2e0ab1924cac4d44b001ff24284b4b755e13869c468bda51588c33ff25469157904278ff6bca91a6337739195cd4384224e4f9a062f8c1021e00aca4dc65eca75016fb5b30ba7ce751cd7ecff26cb719d3f99308941082e3b95cf4d4a053fc2df81b18325f67f4ad6e92cef77c5fcbaa7a15fc685df5917274c4c322f254cf4fd0981148ed2ca8b3dbe2639024a53f81f8ab4e0052ffd6a472910edc2efd5fce8a961522e05cbdff0009e1ad19a497873bf0e68eddfcefd4fbcacf8e3c0f8dd379587e99bd28584435990d9a5e238934413a48c558a5b8546f031925112e4134a902756bdd1b6303ae256606920cd0301d2906c405fde336a32edfe1ff7ff6b004d2afd04695299650ffe96899f123e8102f5669f65f11f57ffca7ec45dc0073f763b8e6f8f8ebc9c53d22f7e3f79bc9ecb83d66d6b3dbfa0872688c2ceeabc5746ffd9e3e275d3f6380434ec5bd35105e35dc258d812d43a8336b84f6e767092e10eef88d30a0ca4079a10ec7fedccdda1298379e00773a9d65ae13bcc31f4089646f40a4e5418e3082bbd0e89de2444da6ceab455d958229b982fc360b404658b5a34b9d5385db15dc3571d4d3ea7c5f9d613b15f276dfbcd75509afac9d1badff1b84cafa1b82ddf64c56502ce4e02022d3d83a0a8113cb01b67a03ac568710d65313f9ec32cff127a73926e566f556821c180aa1fe4bfc668d85861ed80e0c61d425891dd67341c3be9e356a6074d3dadcc1e7c8f870abf92687926470f5a98c0905b094864ebfdb0757fb407d07e3c362e70a72fe5404dd5e12039637b46b535986b87c28c06f50835f3e8d59b910cad71f946be1652ea1ca339e3efa631b10c728d2dbc5dd44a85893cf415dc61db4ac34846782f8567378c65458556d0f521203022fa6aab2d67e0be7f50544258204d23865e8608edd279735d544335b4902ff66c244e74fa8897468ee25133fecbd385c20373e3809b0d6c4d001e39778d0c0a2099fe4728acfd1687b561831a968787a5b6c8f46a1183eaa1f7cb579316ac105e2be5df62f92da20422d4e335fd7a613cf91a5600004d63786b4f08c6ca5fc75c8a1ff55de14a6291da514fff2f0b22279f1d13e1052fbaec33edacc52749ae93f0c2d09b89484ab1c98b230f15161ab68e8f552d80118853d742609582e3f026d75ac796be3f01ed4c654dd72185e849cb2ccef4f3183de343d5d8cbf9a1db4bd013165180a6425c1270b937179be88e4d044d9ec959e6fcfb45529d69ba52d70304735786a5cbdf02142254db8e8b7dd29af1c1a63aaf993bb79b4222143f996a54be1d22bed546ae5a269376e90809305ed1bbb2c7f5cd0f853232ee44a69fcea77b7d91777d4a19edbf62faf6ec119443d49209e8c9588bbdf7ca0e90c5dbcea9d12017100db8d64c95c48dcb01e9b65e817792bc9e660898603d6ab74f998aba6819671d8aa2102138deea7baeeeba85dd7aae7c352c63952131a76baac3dfbcec78a67a22792a45efda02aafa56b53d72ec033973101a3a98984054a4ede38da1cf91227feeb33cba9267039e101b9721307f06a0ff7e3d3b6b298a17c5a10f38faeed67ed3fa91138698082e5ac2ead2b8c9f9cc895b7d0979d7729530e339020e14390deedd797188bbda5182cc43525948b6ef3f5a48d967ed47165e09e99009f7aa137524dcb448b42b6aedafcd3ecac05ca2b4fce00b33060416c46704a95734efcc0b9961507d06369b2ebf440eb309f6ccf2a0fae2d0833b29e68c3f614c82b85819acce06281722272451c787a3999a6d520c0bf125f4842726382b490a0ed94b70c74c973c10f079431d7e3af326d36a9ab049a8b5eaf4ac48ecf1ae8a67c503ea8de6afc7c93f11619cd426fe0c812c2a3481d8f68612f9264c84a06c19b53d95f50d608602a181adf8498da21d04aaeb2dbbf374f22e60182000e5027ad1988b40be2c5a665ba1b6d2c4e04e1a99c2a2b1a7563ac046ac2f2da3866bf104bb86148e7c1e8ff22923c04856922f9c8ce5214e0ef47cbc0138dd83ea00985aa43ba4a82ffaedd580d17ac8de8322358d675b0d98adea9f674b00c61ecf6102b8b535a61722cefe8253d8b4a362b11becc750fbfeca37690d9e3332ab8558d5d5cf16d34fbe6f1ea8fc717e011777325193c14800383c46cb81791fe4ba626ee10bbc32af681efc8d677519d6fbd1f4a64af5f97f7570c78037ea88fbcc7a942d74787faca3bcc706408cc193b863211d9fa885b0be689f1ad00b6df44e0e1a4a0266da4656c187fcaf74ce0c3328a81b462e653adb3d423b1c585062f4bf97a6bb1c569aedf0911d1aae0d8b938eb00dfc1071ffc3c6112f8163cf4d96b84d12fce8a17158e5ba9d516ca08f89a56424c5c0ad16bc6324d01ca16217f7b4af7b4011ebe066081acc1cdffec45907394a1268e0035975059b31d0b3b3bd69910987f87e8420b618ea3a25e37ed8c93d9c04223f1ffe95543f658cdab2b79bbf0aca30c274ba9498ebc9e1858be44c48153017e03b3cf5756ca2e6018808b18ab786608580b463a7246b4ea7daa5070523ddebc765b56c25b0f47c2e611bebae003fac567685ac1be63f7be93c05c34796ce6f5b403fdee6bd928ffe0e2670cb4aca5dbeadc7e08fb36c9793119dd87b7c461e67f04adaf8ae34dacdd80b1c6418d282c5915bcba695589a935389c81a226704b51c75d29cda0a1c4c87e35892aa9be2c049b902e782bc559abd4a27e477577ec1a7f76beee0d9e60d1c993ed30a19c33123195df4d2d8563f0424fc5f8a98fc0550d2946832fc2db5013f3a9fb48ad0954a79a526bc7e06b0f1de572c43cb2f5ea95467523817ddbc4f7fed74c3a092ae4d9fe0ce77ffbdd36cd25428a43c084fc6e166a5c1c95dcb96143ee073c9e837eb19028646e76bb484aa3e4ef20283f9237b43cae235316d774ba7bfca598402ea24a3fe8989a91f812237c865512bab20adeeb9aa2972177e94eba906ada1bf09af4e87e32f1081157558c25f1c025df6ea1eac112c7c7c4d73fcb9772878bdd01f376850234eb1c9aa0fb2bf1edc023b12135bee7fd1866fce1de59eaad6b168d94cd8dd66cba004fb1466224311937ea2481db78e2a59d8cb6461e6ee21c528697f689e55a7e24035415a29387f0e0c606b99013b38b923c3bc931a96ff96e34173b182d0f9b9588fef389bd50cc069008ac4a8203d4457ba2b7a193c6ca0a79f1f04b3a4b86d35f4e4024a845da95ab0c4c0db2951c5db2181cf68b617f8a5defc32c2a1c812249d5d7902eca9fb81601e9dc8279b2f71ee3b47d6ea711829e9843e051818a046307943c3fc8893f17f88d35416646bd72cd13282a623a055b536ca838bbefdfbcaecf0d91e9ddcec0f24ab2ac9309889d7000048bf9193125a8133176fd457215489209762ffee634c34f85ccc41bfcda5480ff25b754287e72e099b5a691d9c2315b4b40df626e147bffa7b5d64c9d675b65f207001bf6b5f320b8a5f214be7a136d0b7f546220003622dad69137ffd5ca96a3cabfe1059d806f0e19bce9c42fbedef0a2f5c1c0cc5de5dbb9f1d81aca11299c47e9546896be80d810dbafa9e7faea2c187fe1498137dffee99b1c50664c7ee1c0db580b2a8b5a7a9315865eac7710c6864cb68cb4a472f3ef066c9515f3d0203d381e4652696db1bced89cfdc91a8f1306392a7c913bcc55e2c4682023a54cf4569ad633e23e00c301f9c14e2b4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000060fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0}) [ 1676.207527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.213091] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1676.215074] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1676.217056] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1676.218872] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1676.220545] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1676.222458] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000055c80)={0x0, r10, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000061fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062fc0)={0xa2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "8163f1f289887a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063fc0)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7a, "196a41690e0333"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064fc0)={0xfffffffffffffcdc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {}, {r3, r4}, {}, {r5}, {r6}, {r7}, {r8, r9}, {r10, r11}, {0x0, r12}, {0x0, r13}], 0x6d, "71d6b263eabb3f"}) fork() 02:06:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) tkill(r1, 0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x4, 0x9, 0xed, 0x0, 0x3de7, 0x8840, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x1e5a0000000000, 0xea}, 0x108, 0x9, 0x6, 0x2507366b409e2f10, 0x4, 0xf71, 0x20d, 0x0, 0x6, 0x0, 0x3}, r0, 0x9, 0xffffffffffffffff, 0x8) 02:06:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:06:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:16 executing program 4: fork() (fail_nth: 64) 02:06:16 executing program 7: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, "40d0a6685cfe82e90f4116a61ae984e2dad41e8a839f08f0328988ee417bd62ed2893b88e15c5bf5996357d65d1eb2ba01c8cf3a752ee8bfc9b2bfbba868700a"}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000640)={0x0, "a8b59e1e057b17ce49ad87dbca7b8c3f53a90311f1421ccc514c3e0e815b2b6d65c2b2dcd9afe0aa0560a09b54f2118283d81c73a1b6af04d8bdaf76a585a89a", 0x2b}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) keyctl$invalidate(0x15, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x20, 0x0, 0x7f, 0x4, 0x0, 0xffff, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x80000000, 0x1b, 0x0, 0x4, 0x1, 0x773, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000100)={0x80000000, {{0xa, 0x4e21, 0xffffffff, @mcast2, 0xfffffffa}}, {{0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xffffffff}}}, 0x108) fork() 02:06:16 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 68) 02:06:16 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1676.668167] FAULT_INJECTION: forcing a failure. [ 1676.668167] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.670780] CPU: 0 PID: 19620 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1676.672209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.673902] Call Trace: [ 1676.674445] dump_stack+0x107/0x167 [ 1676.675186] should_fail.cold+0x5/0xa [ 1676.675974] ? create_object.isra.0+0x3a/0xa30 [ 1676.676909] should_failslab+0x5/0x20 [ 1676.677682] kmem_cache_alloc+0x5b/0x310 [ 1676.678533] create_object.isra.0+0x3a/0xa30 [ 1676.679427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.679621] FAULT_INJECTION: forcing a failure. [ 1676.679621] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.680478] kmem_cache_alloc+0x159/0x310 [ 1676.680509] anon_vma_fork+0x1ff/0x640 [ 1676.680538] copy_process+0x72cd/0x78b0 [ 1676.680603] ? __cleanup_sighand+0xb0/0xb0 [ 1676.686812] ? perf_trace_lock+0xac/0x490 [ 1676.687685] ? find_held_lock+0x2c/0x110 [ 1676.688515] kernel_clone+0xe7/0x980 [ 1676.689267] ? lock_downgrade+0x6d0/0x6d0 [ 1676.690120] ? find_held_lock+0x2c/0x110 [ 1676.690940] ? create_io_thread+0xf0/0xf0 [ 1676.691790] ? ksys_write+0x12d/0x260 [ 1676.692569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.693546] __do_sys_fork+0x8a/0xc0 [ 1676.694321] ? kernel_thread+0xf0/0xf0 [ 1676.695118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.696163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.697191] ? trace_hardirqs_on+0x5b/0x180 [ 1676.698067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.699099] do_syscall_64+0x33/0x40 [ 1676.699846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.700867] RIP: 0033:0x7febfa601b19 [ 1676.701620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.705291] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1676.706819] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1676.708240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.709677] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.711110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.712564] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1676.714050] CPU: 1 PID: 19622 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1676.715903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.718037] Call Trace: [ 1676.718736] dump_stack+0x107/0x167 [ 1676.719540] should_fail.cold+0x5/0xa [ 1676.720372] ? xas_alloc+0x336/0x440 [ 1676.721176] should_failslab+0x5/0x20 [ 1676.722004] kmem_cache_alloc+0x5b/0x310 [ 1676.722886] xas_alloc+0x336/0x440 [ 1676.723660] xas_create+0x34a/0x10d0 [ 1676.724480] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1676.725605] xas_store+0x8c/0x1c40 [ 1676.726395] __xa_store+0x164/0x2d0 [ 1676.727181] ? xa_delete_node+0x280/0x280 [ 1676.728085] ? trace_hardirqs_on+0x5b/0x180 [ 1676.729027] xa_store+0x31/0x50 [ 1676.729743] __io_uring_add_tctx_node+0x1cf/0x520 [ 1676.730825] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1676.731995] ? alloc_fd+0x2e7/0x670 [ 1676.732825] io_uring_setup+0x1fbb/0x2980 [ 1676.733730] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1676.734857] ? wait_for_completion_io+0x270/0x270 [ 1676.735945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.737111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.738268] do_syscall_64+0x33/0x40 [ 1676.739077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.740179] RIP: 0033:0x7feb2b3bab19 [ 1676.740980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.745015] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1676.746686] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1676.748252] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1676.749807] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1676.751363] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1676.752907] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1676.770585] FAULT_INJECTION: forcing a failure. [ 1676.770585] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.773040] CPU: 0 PID: 19624 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1676.774359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.775937] Call Trace: [ 1676.776441] dump_stack+0x107/0x167 [ 1676.777139] should_fail.cold+0x5/0xa [ 1676.777884] ? create_object.isra.0+0x3a/0xa30 [ 1676.778760] should_failslab+0x5/0x20 [ 1676.779480] kmem_cache_alloc+0x5b/0x310 [ 1676.780276] create_object.isra.0+0x3a/0xa30 [ 1676.781094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1676.782064] kmem_cache_alloc_bulk+0x168/0x320 [ 1676.782949] io_submit_sqes+0x713e/0x8780 [ 1676.783732] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1676.784690] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1676.785657] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1676.786586] ? find_held_lock+0x2c/0x110 [ 1676.787359] ? io_submit_sqes+0x8780/0x8780 [ 1676.788199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1676.789104] ? wait_for_completion_io+0x270/0x270 [ 1676.790045] ? rcu_read_lock_any_held+0x75/0xa0 [ 1676.790936] ? vfs_write+0x354/0xb10 [ 1676.791640] ? fput_many+0x2f/0x1a0 [ 1676.792339] ? ksys_write+0x1a9/0x260 [ 1676.793050] ? __ia32_sys_read+0xb0/0xb0 [ 1676.793833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1676.794839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1676.795833] do_syscall_64+0x33/0x40 [ 1676.796547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1676.797519] RIP: 0033:0x7f8917489b19 [ 1676.798248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.801773] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1676.803196] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1676.804523] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1676.805888] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.807244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.808553] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:06:16 executing program 2: r0 = fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x1b) tkill(r1, 0x12) ptrace(0x4207, r1) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x1a, 0x2, @thr={&(0x7f0000000000)="bf4a67c51f6ead09004f7f413612ad2d6ac6b2fb1cbdcd3a7ddfa116d46193dcf4e6c8a71fbaa842d854267131dd5f098e17f8007d7e86efbd6d64da0f032c29d70cf1e2d204e60d58dd121bb6aac5fe4b12e83494ddbd7dfd5e13243aab5b21b94be3e23ede3d3f0ee5106743be45152a9f53a1e3a468203faf0f5d412ac6bc60dfe61436534783a3fe791b3aaa266fa7da2ad554303205704cf3744672267d39b44982bfa54af8f17c759f2b42075d39998b5182ce3b001887a67978669b75df36d2258c28436e48273d8ad9ac65bd5e310f8cc4", &(0x7f0000000100)="342b1e29a8ae60a40227839ecaeb3db3d120fd2289f66ff456d19663d0e1b4b94ea7148629d4a7279914c191cd440178be3e1c9fa94eb062c8d209df905e56830cfa789f86a579be5b933818954f26aac667f35023c2a7b267c1eaf9e39c3ff7e2357d3ddb593e21"}}) 02:06:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 3) [ 1676.992664] FAULT_INJECTION: forcing a failure. [ 1676.992664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1676.995604] CPU: 1 PID: 19814 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1676.997095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.998861] Call Trace: [ 1676.999444] dump_stack+0x107/0x167 [ 1677.000225] should_fail.cold+0x5/0xa [ 1677.001067] __alloc_pages_nodemask+0x182/0x600 [ 1677.002077] ? lock_downgrade+0x6d0/0x6d0 [ 1677.002985] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1677.004289] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1677.005424] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1677.006466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1677.007630] copy_process+0x62b/0x78b0 [ 1677.008489] ? __lock_acquire+0xbb1/0x5b00 [ 1677.009426] ? lock_downgrade+0x6d0/0x6d0 [ 1677.010339] ? __cleanup_sighand+0xb0/0xb0 [ 1677.011264] ? perf_trace_lock+0xac/0x490 [ 1677.012172] ? __lockdep_reset_lock+0x180/0x180 [ 1677.013210] ? find_held_lock+0x2c/0x110 [ 1677.014121] kernel_clone+0xe7/0x980 [ 1677.014945] ? lock_downgrade+0x6d0/0x6d0 [ 1677.015839] ? find_held_lock+0x2c/0x110 [ 1677.016724] ? create_io_thread+0xf0/0xf0 [ 1677.017621] ? ksys_write+0x12d/0x260 [ 1677.018475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1677.019524] __do_sys_fork+0x8a/0xc0 [ 1677.020333] ? kernel_thread+0xf0/0xf0 [ 1677.021198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1677.022348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1677.023455] ? trace_hardirqs_on+0x5b/0x180 [ 1677.024413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1677.025526] do_syscall_64+0x33/0x40 [ 1677.026348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1677.027455] RIP: 0033:0x7ff788849b19 [ 1677.028255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.032222] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1677.033862] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1677.035414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1677.036978] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.038537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.040089] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:06:36 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 69) [ 1696.045696] FAULT_INJECTION: forcing a failure. [ 1696.045696] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.046980] FAULT_INJECTION: forcing a failure. [ 1696.046980] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.048431] CPU: 0 PID: 19945 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1696.051856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.053600] Call Trace: [ 1696.054171] dump_stack+0x107/0x167 [ 1696.054943] should_fail.cold+0x5/0xa [ 1696.055744] ? copy_process+0x3305/0x78b0 [ 1696.056614] should_failslab+0x5/0x20 [ 1696.057420] kmem_cache_alloc_node+0x55/0x330 [ 1696.058354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.059432] copy_process+0x3305/0x78b0 [ 1696.060274] ? __lock_acquire+0xbb1/0x5b00 [ 1696.061188] ? lock_downgrade+0x6d0/0x6d0 [ 1696.062091] ? __cleanup_sighand+0xb0/0xb0 [ 1696.062982] ? perf_trace_lock+0xac/0x490 [ 1696.063847] ? __lockdep_reset_lock+0x180/0x180 [ 1696.064840] ? find_held_lock+0x2c/0x110 [ 1696.065697] kernel_clone+0xe7/0x980 [ 1696.066496] ? lock_downgrade+0x6d0/0x6d0 [ 1696.067381] ? find_held_lock+0x2c/0x110 [ 1696.068230] ? create_io_thread+0xf0/0xf0 [ 1696.069107] ? ksys_write+0x12d/0x260 [ 1696.069926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.070960] __do_sys_fork+0x8a/0xc0 [ 1696.071747] ? kernel_thread+0xf0/0xf0 [ 1696.072584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.073687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.074765] ? trace_hardirqs_on+0x5b/0x180 [ 1696.075683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.076771] do_syscall_64+0x33/0x40 [ 1696.077550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.078638] RIP: 0033:0x7f5b9eb75b19 [ 1696.079422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.083300] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.084905] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1696.086412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.087915] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.089411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.090908] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1696.092440] CPU: 1 PID: 19946 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1696.093844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.095483] Call Trace: [ 1696.096013] dump_stack+0x107/0x167 [ 1696.096735] should_fail.cold+0x5/0xa [ 1696.097482] ? prepare_creds+0x25/0x5e0 [ 1696.098269] should_failslab+0x5/0x20 [ 1696.099021] kmem_cache_alloc+0x5b/0x310 [ 1696.099816] ? lock_downgrade+0x6d0/0x6d0 [ 1696.100638] prepare_creds+0x25/0x5e0 [ 1696.101384] copy_creds+0x72/0x580 [ 1696.102091] copy_process+0xfef/0x78b0 [ 1696.102860] ? __lock_acquire+0xbb1/0x5b00 [ 1696.103702] ? lock_downgrade+0x6d0/0x6d0 [ 1696.104517] ? __cleanup_sighand+0xb0/0xb0 [ 1696.105343] ? perf_trace_lock+0xac/0x490 [ 1696.106172] ? __lockdep_reset_lock+0x180/0x180 [ 1696.107097] ? find_held_lock+0x2c/0x110 [ 1696.107897] kernel_clone+0xe7/0x980 [ 1696.108623] ? lock_downgrade+0x6d0/0x6d0 02:06:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 02:06:36 executing program 2: fork() r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4200, r0, 0x9, 0x10) 02:06:36 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() fadvise64(r0, 0x9, 0x2, 0x4) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x8000000) lseek(r0, 0x1000, 0x3) r2 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x1bc7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6b96, &(0x7f00000006c0)={0x0, 0xc38c, 0x2, 0x0, 0x388, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000740)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x4690, &(0x7f0000000800)=[{&(0x7f0000000780)="a0ce32c7f52c0643be5551668473c3ff1d26d83ff81c9ac55051274c510375510af3375d777710ae8203d884d9f2fc3b0fdf908277b0e3025b7d8b01b687aacff2b7378360d761b31c6bd5780e406debb4d64410ceb5944b40574db86cfc6fff8f64", 0x62}], 0x1, 0x18, 0x1, {0x2}}, 0xfffffe01) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r8, r7, 0x0, 0xc4e) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="795bf8a61569f31a75bcdbef7d7aab5049eb1a60affe3e136421", 0x1a}, {&(0x7f0000000300)="5fff4251bcfaf0e1c94d86d1b250da066728c188138a5ffaff84702894b50065cb8073d5019708e39514d997e39d1e16f7f9a81ca7d65948c7eccca9975445dab529c1ad8695cd2f5daf3596ad4493d331a32abf197668ceb7c2793151b35d9f8468a9cd4acac08f9eed56f60a5d7348b622f4c619a80701fab8fedccaec7cd16006bf3f7149891802b6d81bce0450e1a5219bea5b1283cefa7ff0", 0x9b}, {&(0x7f0000000240)="c232b139e772eede7be0af362f1065abd0804034340fb2872840056b81b6735ae57ee8617c8d255bd1f74e1ed805ab2290ce445bbb0b559c23bf5f07b8d6280d5f6b6cdf64c4eba327c5175c99f308488d904c795e867760c95f04af59601d35056bc8eea59be433ac6f708a7995", 0x6e}, {&(0x7f00000003c0)="7971cc6cfbebcc5143f87905348a26b176fd7cfb8f8296ce505c8746243e6d6ffe31388484a4db02855284d23bb0ac9e34bf3a2d1d2e74275c149e9c32e5dce752246345e7931ae9b388627c4f14808fa0ae117b7f8ea195d030e84f034cbbff705990159dcf415d29993a739d3103bfd575c5c293cc1a4a5903cb094f6ab66d3b26b116b802a817352e713d01448cfd4d41", 0x92}, {&(0x7f0000000500)="d8ce14821c000000e9ede5fc0ba1863feaf8ab6770412eb0b89a40ae866b1256be478ea80553d9d7a54d0d7644b627ac8f036ce3ecd8329b", 0x38}, {&(0x7f0000000540)="62033a3e7120aad3b2368b45361c5a85cd17f86611ee6eecb526d61452eb62a895e2027bce6ef9b710bc5713404e6fce0b557a7ad52410f872c06f2470562bfee14a06af0e85e842e704dba03a80c9f01b6fcb010190cc8e79a3dbec56bed20be1fe4bb2df7d4af06b796df98e179f2a18df0f8419ff0324259a2803bd144777465167b502e183fcb2010f342ea0ef86f7c8709adf007167228435b084dde4b84d20caf1cc651734d724f33d", 0xac}], 0x6}, 0x0, 0x40000, 0x0, {0x0, r9}}, 0x200) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r7, &(0x7f0000000000)={0x8280, 0x81, 0x9}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8) 02:06:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 1) 02:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 4) 02:06:36 executing program 4: fork() (fail_nth: 65) [ 1696.109657] ? find_held_lock+0x2c/0x110 [ 1696.110621] ? create_io_thread+0xf0/0xf0 [ 1696.111439] ? ksys_write+0x12d/0x260 [ 1696.112189] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.113141] __do_sys_fork+0x8a/0xc0 [ 1696.113859] ? kernel_thread+0xf0/0xf0 [ 1696.114637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.115643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.116644] ? trace_hardirqs_on+0x5b/0x180 [ 1696.117495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.118496] do_syscall_64+0x33/0x40 [ 1696.119221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.120208] RIP: 0033:0x7ff788849b19 [ 1696.120930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.124496] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.125979] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1696.127349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.128713] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.130093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.130602] FAULT_INJECTION: forcing a failure. [ 1696.130602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1696.131459] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1696.133729] FAULT_INJECTION: forcing a failure. [ 1696.133729] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.134562] CPU: 0 PID: 19954 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1696.139392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.141152] Call Trace: [ 1696.141704] dump_stack+0x107/0x167 [ 1696.142482] should_fail.cold+0x5/0xa [ 1696.143289] __alloc_pages_nodemask+0x182/0x600 [ 1696.144265] ? lock_acquire+0x197/0x470 [ 1696.145108] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1696.146391] ? lock_downgrade+0x6d0/0x6d0 [ 1696.147257] ? do_raw_spin_lock+0x121/0x260 [ 1696.148174] alloc_pages_current+0x187/0x280 [ 1696.149105] __pmd_alloc+0x37/0x630 [ 1696.149886] copy_page_range+0x2bd0/0x3800 [ 1696.150790] ? perf_trace_lock+0xac/0x490 [ 1696.151656] ? lock_chain_count+0x20/0x20 [ 1696.152537] ? find_held_lock+0x2c/0x110 [ 1696.153397] ? anon_vma_fork+0x462/0x640 [ 1696.154283] ? up_write+0x191/0x550 [ 1696.155059] ? vm_iomap_memory+0x190/0x190 [ 1696.155947] ? downgrade_write+0x3a0/0x3a0 [ 1696.156848] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1696.157995] ? __vma_link_rb+0x540/0x700 [ 1696.158862] copy_process+0x7658/0x78b0 [ 1696.159755] ? __cleanup_sighand+0xb0/0xb0 [ 1696.160685] ? perf_trace_lock+0xac/0x490 [ 1696.161576] ? find_held_lock+0x2c/0x110 [ 1696.162446] kernel_clone+0xe7/0x980 [ 1696.163242] ? lock_downgrade+0x6d0/0x6d0 [ 1696.164115] ? find_held_lock+0x2c/0x110 [ 1696.164972] ? create_io_thread+0xf0/0xf0 [ 1696.165845] ? ksys_write+0x12d/0x260 [ 1696.166664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.167682] __do_sys_fork+0x8a/0xc0 [ 1696.168467] ? kernel_thread+0xf0/0xf0 [ 1696.169307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.170412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.171484] ? trace_hardirqs_on+0x5b/0x180 [ 1696.172424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.173501] do_syscall_64+0x33/0x40 [ 1696.174298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.175377] RIP: 0033:0x7febfa601b19 [ 1696.176157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.180014] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.181611] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1696.183125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.184628] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.186131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1696.187605] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1696.189145] CPU: 1 PID: 19943 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1696.190509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.192074] Call Trace: [ 1696.192581] dump_stack+0x107/0x167 [ 1696.193258] should_fail.cold+0x5/0xa [ 1696.193976] ? xas_alloc+0x336/0x440 [ 1696.194667] should_failslab+0x5/0x20 [ 1696.195366] kmem_cache_alloc+0x5b/0x310 [ 1696.196132] xas_alloc+0x336/0x440 [ 1696.196792] xas_create+0x34a/0x10d0 [ 1696.197495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1696.198473] xas_store+0x8c/0x1c40 [ 1696.199151] __xa_store+0x164/0x2d0 [ 1696.199830] ? xa_delete_node+0x280/0x280 [ 1696.200609] ? trace_hardirqs_on+0x5b/0x180 [ 1696.201430] xa_store+0x31/0x50 [ 1696.202062] __io_uring_add_tctx_node+0x1cf/0x520 [ 1696.202966] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1696.203934] ? alloc_fd+0x2e7/0x670 [ 1696.204625] io_uring_setup+0x1fbb/0x2980 [ 1696.205402] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1696.206346] ? wait_for_completion_io+0x270/0x270 [ 1696.207268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.208251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.209218] do_syscall_64+0x33/0x40 [ 1696.209917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.210885] RIP: 0033:0x7feb2b3bab19 [ 1696.211572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.214952] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1696.216351] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1696.217667] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1696.218976] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1696.220277] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1696.221580] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1696.263293] FAULT_INJECTION: forcing a failure. [ 1696.263293] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.266067] CPU: 0 PID: 19965 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1696.267528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.269276] Call Trace: [ 1696.269842] dump_stack+0x107/0x167 [ 1696.270643] should_fail.cold+0x5/0xa [ 1696.271464] ? create_object.isra.0+0x3a/0xa30 [ 1696.272438] should_failslab+0x5/0x20 [ 1696.273250] kmem_cache_alloc+0x5b/0x310 [ 1696.274118] ? mark_held_locks+0x9e/0xe0 [ 1696.274982] create_object.isra.0+0x3a/0xa30 [ 1696.275907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1696.276983] kmem_cache_alloc_bulk+0x168/0x320 [ 1696.277982] io_submit_sqes+0x713e/0x8780 [ 1696.278863] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1696.279916] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.280963] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.281991] ? find_held_lock+0x2c/0x110 [ 1696.282863] ? io_submit_sqes+0x8780/0x8780 [ 1696.283777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.284811] ? wait_for_completion_io+0x270/0x270 [ 1696.285843] ? rcu_read_lock_any_held+0x75/0xa0 [ 1696.286831] ? vfs_write+0x354/0xb10 [ 1696.287622] ? fput_many+0x2f/0x1a0 [ 1696.288393] ? ksys_write+0x1a9/0x260 [ 1696.289190] ? __ia32_sys_read+0xb0/0xb0 [ 1696.290056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.291159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.292247] do_syscall_64+0x33/0x40 [ 1696.293030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.294115] RIP: 0033:0x7f8917489b19 [ 1696.294902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.298762] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1696.300355] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1696.301858] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1696.303356] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.304851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.306358] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 2) [ 1696.348697] FAULT_INJECTION: forcing a failure. [ 1696.348697] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.350710] CPU: 1 PID: 20041 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1696.351879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.353270] Call Trace: [ 1696.353723] dump_stack+0x107/0x167 [ 1696.354350] should_fail.cold+0x5/0xa [ 1696.355000] ? create_object.isra.0+0x3a/0xa30 [ 1696.355759] should_failslab+0x5/0x20 [ 1696.356396] kmem_cache_alloc+0x5b/0x310 [ 1696.357088] create_object.isra.0+0x3a/0xa30 [ 1696.357823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1696.358698] kmem_cache_alloc_node+0x169/0x330 [ 1696.359471] copy_process+0x3305/0x78b0 [ 1696.360143] ? __lock_acquire+0xbb1/0x5b00 [ 1696.360866] ? lock_downgrade+0x6d0/0x6d0 [ 1696.361565] ? __cleanup_sighand+0xb0/0xb0 [ 1696.362279] ? perf_trace_lock+0xac/0x490 [ 1696.362980] ? __lockdep_reset_lock+0x180/0x180 [ 1696.363763] ? find_held_lock+0x2c/0x110 [ 1696.364432] kernel_clone+0xe7/0x980 [ 1696.365033] ? lock_downgrade+0x6d0/0x6d0 [ 1696.365701] ? find_held_lock+0x2c/0x110 [ 1696.366362] ? create_io_thread+0xf0/0xf0 [ 1696.367052] ? ksys_write+0x12d/0x260 [ 1696.367672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.368474] __do_sys_fork+0x8a/0xc0 [ 1696.369105] ? kernel_thread+0xf0/0xf0 [ 1696.369777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.370677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.371533] ? trace_hardirqs_on+0x5b/0x180 [ 1696.372250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.373129] do_syscall_64+0x33/0x40 [ 1696.373757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.374615] RIP: 0033:0x7f5b9eb75b19 [ 1696.375243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.378333] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.379627] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1696.380833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.381997] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.383183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.384375] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:06:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 5) 02:06:36 executing program 4: fork() (fail_nth: 66) [ 1696.460093] FAULT_INJECTION: forcing a failure. [ 1696.460093] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.461945] CPU: 1 PID: 20187 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1696.462985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.464264] Call Trace: [ 1696.464682] dump_stack+0x107/0x167 [ 1696.465232] should_fail.cold+0x5/0xa [ 1696.465849] ? create_object.isra.0+0x3a/0xa30 [ 1696.466551] should_failslab+0x5/0x20 [ 1696.467129] kmem_cache_alloc+0x5b/0x310 [ 1696.467742] ? create_object.isra.0+0x3ad/0xa30 [ 1696.468449] create_object.isra.0+0x3a/0xa30 [ 1696.469109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1696.469884] __kmalloc_node+0x1ae/0x420 [ 1696.470515] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1696.471292] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1696.472061] ? trace_hardirqs_on+0x5b/0x180 [ 1696.472717] kmem_cache_alloc_node+0x181/0x330 [ 1696.473413] copy_process+0x3305/0x78b0 [ 1696.474017] ? __lock_acquire+0xbb1/0x5b00 [ 1696.474660] ? lock_downgrade+0x6d0/0x6d0 [ 1696.475300] ? __cleanup_sighand+0xb0/0xb0 [ 1696.475927] ? perf_trace_lock+0xac/0x490 [ 1696.476575] ? __lockdep_reset_lock+0x180/0x180 [ 1696.477274] ? find_held_lock+0x2c/0x110 [ 1696.477888] kernel_clone+0xe7/0x980 [ 1696.478453] ? lock_downgrade+0x6d0/0x6d0 [ 1696.479068] ? find_held_lock+0x2c/0x110 [ 1696.479679] ? create_io_thread+0xf0/0xf0 [ 1696.480298] ? ksys_write+0x12d/0x260 [ 1696.480889] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.481615] __do_sys_fork+0x8a/0xc0 [ 1696.482210] ? kernel_thread+0xf0/0xf0 [ 1696.482803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.483590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.484395] ? trace_hardirqs_on+0x5b/0x180 [ 1696.485056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.485826] do_syscall_64+0x33/0x40 [ 1696.486403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.487195] RIP: 0033:0x7ff788849b19 [ 1696.487745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.490493] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.491613] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1696.492692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.493749] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.494812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.495870] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1696.550033] FAULT_INJECTION: forcing a failure. [ 1696.550033] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.551783] CPU: 1 PID: 20233 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1696.552767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.553947] Call Trace: [ 1696.554331] dump_stack+0x107/0x167 [ 1696.554851] should_fail.cold+0x5/0xa [ 1696.555404] ? __pmd_alloc+0x94/0x630 [ 1696.555948] should_failslab+0x5/0x20 [ 1696.556507] kmem_cache_alloc+0x5b/0x310 [ 1696.557086] __pmd_alloc+0x94/0x630 [ 1696.557608] copy_page_range+0x2bd0/0x3800 [ 1696.558223] ? perf_trace_lock+0xac/0x490 [ 1696.558811] ? lock_chain_count+0x20/0x20 [ 1696.559403] ? find_held_lock+0x2c/0x110 [ 1696.559983] ? anon_vma_fork+0x462/0x640 [ 1696.560588] ? up_write+0x191/0x550 [ 1696.561103] ? vm_iomap_memory+0x190/0x190 [ 1696.561707] ? downgrade_write+0x3a0/0x3a0 [ 1696.562321] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1696.563094] ? __vma_link_rb+0x540/0x700 [ 1696.563684] copy_process+0x7658/0x78b0 [ 1696.564273] ? __cleanup_sighand+0xb0/0xb0 [ 1696.564893] ? perf_trace_lock+0xac/0x490 [ 1696.565505] ? find_held_lock+0x2c/0x110 [ 1696.566101] kernel_clone+0xe7/0x980 [ 1696.566628] ? lock_downgrade+0x6d0/0x6d0 [ 1696.567207] ? find_held_lock+0x2c/0x110 [ 1696.567778] ? create_io_thread+0xf0/0xf0 [ 1696.568364] ? ksys_write+0x12d/0x260 [ 1696.568910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.569594] __do_sys_fork+0x8a/0xc0 [ 1696.570131] ? kernel_thread+0xf0/0xf0 [ 1696.570697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.571430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.572151] ? trace_hardirqs_on+0x5b/0x180 [ 1696.572760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.573482] do_syscall_64+0x33/0x40 [ 1696.574065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.574786] RIP: 0033:0x7febfa601b19 [ 1696.575310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.577861] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.578933] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1696.579918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.580907] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.581894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1696.582893] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:06:36 executing program 2: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x88, @multicast1, 0x4e24, 0x2, 'fo\x00', 0x2, 0x3, 0x70}, 0x2c) syncfs(0xffffffffffffffff) fork() 02:06:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 3) [ 1696.636475] FAULT_INJECTION: forcing a failure. [ 1696.636475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1696.638189] CPU: 1 PID: 20254 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1696.639113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.640245] Call Trace: [ 1696.640612] dump_stack+0x107/0x167 [ 1696.641133] should_fail.cold+0x5/0xa [ 1696.641667] __alloc_pages_nodemask+0x182/0x600 [ 1696.642331] ? lock_downgrade+0x6d0/0x6d0 [ 1696.642918] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1696.643786] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1696.644516] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1696.645191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.645954] copy_process+0x62b/0x78b0 [ 1696.646511] ? __lock_acquire+0x1657/0x5b00 [ 1696.647130] ? __cleanup_sighand+0xb0/0xb0 [ 1696.647725] ? __lockdep_reset_lock+0x180/0x180 [ 1696.648373] ? finish_task_switch+0x126/0x5d0 [ 1696.649013] kernel_clone+0xe7/0x980 [ 1696.649545] ? create_io_thread+0xf0/0xf0 [ 1696.650130] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1696.650759] ? trace_hardirqs_on+0x5b/0x180 [ 1696.651363] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1696.651985] ? finish_task_switch+0x126/0x5d0 [ 1696.652618] ? finish_task_switch+0xef/0x5d0 [ 1696.653223] ? __switch_to+0x572/0xf70 [ 1696.653767] ? __switch_to_asm+0x3a/0x60 [ 1696.654344] ? __switch_to_asm+0x34/0x60 [ 1696.654886] ? __schedule+0x82c/0x1ea0 [ 1696.655436] __do_sys_fork+0x8a/0xc0 [ 1696.655938] ? kernel_thread+0xf0/0xf0 [ 1696.656481] ? io_schedule_timeout+0x140/0x140 [ 1696.657088] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1696.657759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.658493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.659210] ? trace_hardirqs_on+0x5b/0x180 [ 1696.659809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.660531] do_syscall_64+0x33/0x40 [ 1696.661047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.661763] RIP: 0033:0x7f5b9eb75b19 [ 1696.662280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.664851] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1696.665883] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1696.666859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.667807] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.668807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.669801] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:06:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:36 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 1696.761278] FAULT_INJECTION: forcing a failure. [ 1696.761278] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.762865] CPU: 1 PID: 20287 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1696.763718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.764743] Call Trace: [ 1696.765075] dump_stack+0x107/0x167 [ 1696.765531] should_fail.cold+0x5/0xa [ 1696.766016] ? create_object.isra.0+0x3a/0xa30 [ 1696.766579] should_failslab+0x5/0x20 [ 1696.767046] kmem_cache_alloc+0x5b/0x310 [ 1696.767546] ? mark_held_locks+0x9e/0xe0 [ 1696.768060] create_object.isra.0+0x3a/0xa30 [ 1696.768605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1696.769252] kmem_cache_alloc_bulk+0x168/0x320 [ 1696.769822] io_submit_sqes+0x713e/0x8780 [ 1696.770350] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1696.770976] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.771604] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.772201] ? find_held_lock+0x2c/0x110 [ 1696.772721] ? io_submit_sqes+0x8780/0x8780 [ 1696.773262] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.773859] ? wait_for_completion_io+0x270/0x270 [ 1696.774467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1696.775040] ? vfs_write+0x354/0xb10 [ 1696.775498] ? fput_many+0x2f/0x1a0 [ 1696.775944] ? ksys_write+0x1a9/0x260 [ 1696.776408] ? __ia32_sys_read+0xb0/0xb0 [ 1696.776910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.777554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.778203] do_syscall_64+0x33/0x40 [ 1696.778663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.779294] RIP: 0033:0x7f8917489b19 [ 1696.779752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.781989] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1696.782909] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1696.783770] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1696.784630] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.785496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.786361] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:06:56 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 02:06:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 4) 02:06:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 6) 02:06:56 executing program 4: fork() (fail_nth: 67) 02:06:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x81, 0x1f, 0x6, 0x0, 0x20, 0x600, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_config_ext={0xff, 0x1}, 0x2000, 0x8001, 0x3, 0x4, 0xeed1, 0x3, 0x8001, 0x0, 0x2, 0x0, 0xfffffffeffffffff}, 0xffffffffffffffff, 0x6, r0, 0x1a) fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x20, 0x1, 0x7, 0x3, 0x0, 0x4, 0x800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x4000, 0x0, 0x800, 0x9, 0x8, 0xe876, 0x3, 0x0, 0x3, 0x0, 0x4}, r2, 0x9, r1, 0x9) 02:06:56 executing program 2: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000021}, 0x40000c1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r1, 0x1, 0x28, &(0x7f0000000180)={0x77359400}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc4e) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x81) fork() 02:06:56 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 70) [ 1716.356457] FAULT_INJECTION: forcing a failure. [ 1716.356457] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.358703] CPU: 1 PID: 20392 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1716.360059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.361569] FAULT_INJECTION: forcing a failure. [ 1716.361569] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.361655] Call Trace: [ 1716.361687] dump_stack+0x107/0x167 [ 1716.365171] should_fail.cold+0x5/0xa [ 1716.365907] ? create_object.isra.0+0x3a/0xa30 [ 1716.366791] should_failslab+0x5/0x20 [ 1716.367505] kmem_cache_alloc+0x5b/0x310 [ 1716.368285] create_object.isra.0+0x3a/0xa30 [ 1716.369132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.370129] kmem_cache_alloc+0x159/0x310 [ 1716.370937] __pmd_alloc+0x94/0x630 [ 1716.371636] copy_page_range+0x2bd0/0x3800 [ 1716.372427] ? perf_trace_lock+0xac/0x490 [ 1716.373223] ? lock_chain_count+0x20/0x20 [ 1716.374032] ? find_held_lock+0x2c/0x110 [ 1716.374810] ? anon_vma_fork+0x462/0x640 [ 1716.375608] ? up_write+0x191/0x550 [ 1716.376291] ? vm_iomap_memory+0x190/0x190 [ 1716.377097] ? downgrade_write+0x3a0/0x3a0 [ 1716.377913] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1716.378956] ? __vma_link_rb+0x540/0x700 [ 1716.379745] copy_process+0x7658/0x78b0 [ 1716.380530] ? __cleanup_sighand+0xb0/0xb0 [ 1716.381326] ? perf_trace_lock+0xac/0x490 [ 1716.382148] ? find_held_lock+0x2c/0x110 [ 1716.382935] kernel_clone+0xe7/0x980 [ 1716.383643] ? lock_downgrade+0x6d0/0x6d0 [ 1716.384415] ? find_held_lock+0x2c/0x110 [ 1716.385181] ? create_io_thread+0xf0/0xf0 [ 1716.385956] ? ksys_write+0x12d/0x260 [ 1716.386685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.387598] __do_sys_fork+0x8a/0xc0 [ 1716.388289] ? kernel_thread+0xf0/0xf0 [ 1716.389043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.390038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.391012] ? trace_hardirqs_on+0x5b/0x180 [ 1716.391817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.392782] do_syscall_64+0x33/0x40 [ 1716.393481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.394455] RIP: 0033:0x7febfa601b19 [ 1716.395146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.398579] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1716.400015] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1716.401351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.402711] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.404043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.405383] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1716.407104] CPU: 0 PID: 20389 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1716.408555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.410287] Call Trace: [ 1716.410841] dump_stack+0x107/0x167 [ 1716.411602] should_fail.cold+0x5/0xa [ 1716.412401] ? prepare_creds+0x25/0x5e0 [ 1716.413227] should_failslab+0x5/0x20 [ 1716.414051] kmem_cache_alloc+0x5b/0x310 [ 1716.414905] ? lock_downgrade+0x6d0/0x6d0 [ 1716.415069] FAULT_INJECTION: forcing a failure. [ 1716.415069] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.415764] prepare_creds+0x25/0x5e0 [ 1716.415786] copy_creds+0x72/0x580 [ 1716.415816] copy_process+0xfef/0x78b0 [ 1716.420166] ? __lock_acquire+0xbb1/0x5b00 [ 1716.421065] ? lock_downgrade+0x6d0/0x6d0 [ 1716.421940] ? __cleanup_sighand+0xb0/0xb0 [ 1716.422829] ? perf_trace_lock+0xac/0x490 [ 1716.423699] ? __lockdep_reset_lock+0x180/0x180 [ 1716.424677] ? find_held_lock+0x2c/0x110 [ 1716.425540] kernel_clone+0xe7/0x980 [ 1716.426331] ? lock_downgrade+0x6d0/0x6d0 [ 1716.427187] ? find_held_lock+0x2c/0x110 [ 1716.428048] ? create_io_thread+0xf0/0xf0 [ 1716.428913] ? ksys_write+0x12d/0x260 [ 1716.429725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.430748] __do_sys_fork+0x8a/0xc0 [ 1716.431530] ? kernel_thread+0xf0/0xf0 [ 1716.432367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.433470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.434559] ? trace_hardirqs_on+0x5b/0x180 [ 1716.435464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.436545] do_syscall_64+0x33/0x40 [ 1716.437324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.438420] RIP: 0033:0x7f5b9eb75b19 [ 1716.439198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.443049] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1716.444633] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1716.446128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.447612] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.449096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.450596] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1716.452122] CPU: 1 PID: 20391 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1716.453366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.454866] Call Trace: [ 1716.455349] dump_stack+0x107/0x167 [ 1716.456014] should_fail.cold+0x5/0xa [ 1716.456700] ? xas_alloc+0x336/0x440 [ 1716.457382] should_failslab+0x5/0x20 [ 1716.458071] kmem_cache_alloc+0x5b/0x310 [ 1716.458807] xas_alloc+0x336/0x440 [ 1716.459457] xas_create+0x34a/0x10d0 [ 1716.460151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1716.461096] xas_store+0x8c/0x1c40 [ 1716.461750] __xa_store+0x164/0x2d0 [ 1716.462406] ? xa_delete_node+0x280/0x280 [ 1716.463149] ? trace_hardirqs_on+0x5b/0x180 [ 1716.463934] xa_store+0x31/0x50 [ 1716.464527] __io_uring_add_tctx_node+0x1cf/0x520 [ 1716.465381] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1716.466311] ? alloc_fd+0x2e7/0x670 [ 1716.466977] io_uring_setup+0x1fbb/0x2980 [ 1716.467727] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1716.468626] ? wait_for_completion_io+0x270/0x270 [ 1716.469498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.470430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.471360] do_syscall_64+0x33/0x40 [ 1716.472030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.472943] RIP: 0033:0x7feb2b3bab19 [ 1716.473599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.476681] FAULT_INJECTION: forcing a failure. [ 1716.476681] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.476906] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1716.476924] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1716.476934] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1716.476944] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1716.476954] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1716.476964] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1716.491537] CPU: 0 PID: 20388 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1716.492989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.494736] Call Trace: [ 1716.495290] dump_stack+0x107/0x167 [ 1716.496055] should_fail.cold+0x5/0xa [ 1716.496857] ? security_prepare_creds+0x112/0x190 [ 1716.497867] should_failslab+0x5/0x20 [ 1716.498677] __kmalloc+0x72/0x390 [ 1716.499423] security_prepare_creds+0x112/0x190 [ 1716.500400] prepare_creds+0x452/0x5e0 [ 1716.501230] copy_creds+0x72/0x580 [ 1716.501981] copy_process+0xfef/0x78b0 [ 1716.502815] ? __lock_acquire+0xbb1/0x5b00 [ 1716.503717] ? lock_downgrade+0x6d0/0x6d0 [ 1716.504600] ? __cleanup_sighand+0xb0/0xb0 [ 1716.505487] ? perf_trace_lock+0xac/0x490 [ 1716.506381] ? __lockdep_reset_lock+0x180/0x180 [ 1716.507365] ? find_held_lock+0x2c/0x110 [ 1716.508222] kernel_clone+0xe7/0x980 [ 1716.509008] ? lock_downgrade+0x6d0/0x6d0 [ 1716.509873] ? find_held_lock+0x2c/0x110 [ 1716.510733] ? create_io_thread+0xf0/0xf0 [ 1716.511609] ? ksys_write+0x12d/0x260 [ 1716.512418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.513441] __do_sys_fork+0x8a/0xc0 [ 1716.514233] ? kernel_thread+0xf0/0xf0 [ 1716.515072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.516171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.517243] ? trace_hardirqs_on+0x5b/0x180 [ 1716.518164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.519250] do_syscall_64+0x33/0x40 [ 1716.520033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.521111] RIP: 0033:0x7ff788849b19 [ 1716.521895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.525771] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1716.527385] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1716.528874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.530384] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.531881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.533387] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1716.553078] FAULT_INJECTION: forcing a failure. [ 1716.553078] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.554998] CPU: 1 PID: 20390 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1716.556119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.557489] Call Trace: [ 1716.557941] dump_stack+0x107/0x167 [ 1716.558567] should_fail.cold+0x5/0xa [ 1716.559207] ? create_object.isra.0+0x3a/0xa30 [ 1716.559975] should_failslab+0x5/0x20 [ 1716.560607] kmem_cache_alloc+0x5b/0x310 [ 1716.561272] ? mark_held_locks+0x9e/0xe0 [ 1716.561936] create_object.isra.0+0x3a/0xa30 [ 1716.562657] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.563491] kmem_cache_alloc_bulk+0x168/0x320 [ 1716.564240] io_submit_sqes+0x713e/0x8780 [ 1716.564924] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1716.565722] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1716.566528] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1716.567304] ? find_held_lock+0x2c/0x110 [ 1716.567973] ? io_submit_sqes+0x8780/0x8780 [ 1716.568679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.569459] ? wait_for_completion_io+0x270/0x270 [ 1716.570247] ? rcu_read_lock_any_held+0x75/0xa0 [ 1716.570991] ? vfs_write+0x354/0xb10 [ 1716.571599] ? fput_many+0x2f/0x1a0 [ 1716.572191] ? ksys_write+0x1a9/0x260 [ 1716.572801] ? __ia32_sys_read+0xb0/0xb0 [ 1716.573464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.574310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.575149] do_syscall_64+0x33/0x40 [ 1716.575748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.576565] RIP: 0033:0x7f8917489b19 [ 1716.577157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.580075] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1716.581275] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1716.582418] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1716.583546] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.584668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.585799] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:06:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 5) 02:06:56 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 71) 02:06:56 executing program 4: fork() (fail_nth: 68) [ 1716.687008] FAULT_INJECTION: forcing a failure. [ 1716.687008] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.688752] CPU: 1 PID: 20617 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1716.689777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.691001] Call Trace: [ 1716.691403] dump_stack+0x107/0x167 [ 1716.691945] should_fail.cold+0x5/0xa [ 1716.692510] ? create_object.isra.0+0x3a/0xa30 [ 1716.693188] should_failslab+0x5/0x20 [ 1716.693747] kmem_cache_alloc+0x5b/0x310 [ 1716.694355] ? create_object.isra.0+0x3ad/0xa30 [ 1716.695055] create_object.isra.0+0x3a/0xa30 [ 1716.695698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.696443] __kmalloc_node+0x1ae/0x420 [ 1716.697029] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1716.697784] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1716.698523] ? trace_hardirqs_on+0x5b/0x180 [ 1716.699156] kmem_cache_alloc_node+0x181/0x330 [ 1716.699832] copy_process+0x3305/0x78b0 [ 1716.700434] ? __lock_acquire+0xbb1/0x5b00 [ 1716.701066] ? lock_downgrade+0x6d0/0x6d0 [ 1716.701691] ? __cleanup_sighand+0xb0/0xb0 [ 1716.702316] ? perf_trace_lock+0xac/0x490 [ 1716.702934] ? __lockdep_reset_lock+0x180/0x180 [ 1716.703624] ? find_held_lock+0x2c/0x110 [ 1716.704226] kernel_clone+0xe7/0x980 [ 1716.704780] ? lock_downgrade+0x6d0/0x6d0 [ 1716.705381] ? find_held_lock+0x2c/0x110 [ 1716.705974] ? create_io_thread+0xf0/0xf0 [ 1716.706582] ? ksys_write+0x12d/0x260 [ 1716.707138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.707842] __do_sys_fork+0x8a/0xc0 [ 1716.708380] ? kernel_thread+0xf0/0xf0 [ 1716.708959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.709717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.710467] ? trace_hardirqs_on+0x5b/0x180 [ 1716.711094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.711846] do_syscall_64+0x33/0x40 [ 1716.712386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.713128] RIP: 0033:0x7f5b9eb75b19 [ 1716.713676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.716326] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1716.717427] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1716.718458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.719486] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.720516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.721538] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1716.756150] FAULT_INJECTION: forcing a failure. [ 1716.756150] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.758575] FAULT_INJECTION: forcing a failure. [ 1716.758575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1716.758592] CPU: 1 PID: 20683 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1716.758600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.758605] Call Trace: [ 1716.758624] dump_stack+0x107/0x167 [ 1716.758641] should_fail.cold+0x5/0xa [ 1716.758661] __alloc_pages_nodemask+0x182/0x600 [ 1716.758680] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1716.758693] ? find_held_lock+0x2c/0x110 [ 1716.758720] ? __pmd_alloc+0x31d/0x630 [ 1716.758735] ? lock_downgrade+0x6d0/0x6d0 [ 1716.758748] ? do_raw_spin_lock+0x121/0x260 [ 1716.758766] alloc_pages_current+0x187/0x280 [ 1716.758785] pte_alloc_one+0x16/0x1a0 [ 1716.758800] __pte_alloc+0x1d/0x330 [ 1716.758819] copy_page_range+0x1b62/0x3800 [ 1716.758833] ? perf_trace_lock+0xac/0x490 [ 1716.758853] ? find_held_lock+0x2c/0x110 [ 1716.758872] ? anon_vma_fork+0x462/0x640 [ 1716.758903] ? up_write+0x191/0x550 [ 1716.758918] ? vm_iomap_memory+0x190/0x190 [ 1716.758931] ? downgrade_write+0x3a0/0x3a0 [ 1716.758949] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1716.758965] ? __vma_link_rb+0x540/0x700 [ 1716.758987] copy_process+0x7658/0x78b0 [ 1716.759032] ? __cleanup_sighand+0xb0/0xb0 [ 1716.777001] ? perf_trace_lock+0xac/0x490 [ 1716.777622] ? find_held_lock+0x2c/0x110 [ 1716.778224] kernel_clone+0xe7/0x980 [ 1716.778761] ? lock_downgrade+0x6d0/0x6d0 [ 1716.779350] ? find_held_lock+0x2c/0x110 [ 1716.779931] ? create_io_thread+0xf0/0xf0 [ 1716.780525] ? ksys_write+0x12d/0x260 [ 1716.781075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.781786] __do_sys_fork+0x8a/0xc0 [ 1716.782333] ? kernel_thread+0xf0/0xf0 [ 1716.782900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.783661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.784399] ? trace_hardirqs_on+0x5b/0x180 [ 1716.785014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.785744] do_syscall_64+0x33/0x40 [ 1716.786278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.787007] RIP: 0033:0x7febfa601b19 [ 1716.787547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.790145] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1716.791211] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1716.792209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.793203] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.794217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.795218] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1716.796255] CPU: 0 PID: 20660 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1716.797714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.799459] Call Trace: [ 1716.800019] dump_stack+0x107/0x167 [ 1716.800782] should_fail.cold+0x5/0xa [ 1716.801580] ? ___slab_alloc+0x360/0x700 [ 1716.802438] ? create_object.isra.0+0x3a/0xa30 [ 1716.803390] should_failslab+0x5/0x20 [ 1716.804193] kmem_cache_alloc+0x5b/0x310 [ 1716.805050] create_object.isra.0+0x3a/0xa30 [ 1716.805961] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.807043] kmem_cache_alloc+0x159/0x310 [ 1716.807923] xas_alloc+0x336/0x440 [ 1716.808669] xas_create+0x34a/0x10d0 [ 1716.809467] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1716.810575] xas_store+0x8c/0x1c40 [ 1716.811336] __xa_store+0x164/0x2d0 [ 1716.812097] ? xa_delete_node+0x280/0x280 [ 1716.812974] ? trace_hardirqs_on+0x5b/0x180 [ 1716.813884] xa_store+0x31/0x50 [ 1716.814588] __io_uring_add_tctx_node+0x1cf/0x520 [ 1716.815602] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1716.816693] ? alloc_fd+0x2e7/0x670 [ 1716.817469] io_uring_setup+0x1fbb/0x2980 [ 1716.818364] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1716.819432] ? wait_for_completion_io+0x270/0x270 [ 1716.820462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.821569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.822676] do_syscall_64+0x33/0x40 [ 1716.823457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.824541] RIP: 0033:0x7feb2b3bab19 [ 1716.825330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.829158] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1716.830752] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1716.832244] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1716.833749] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1716.835257] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1716.836751] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:06:56 executing program 2: r0 = fork() ptrace(0x8, r0) ptrace(0x4208, r0) 02:06:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:06:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 6) 02:06:57 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 02:06:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 7) 02:06:57 executing program 4: fork() (fail_nth: 69) [ 1717.006492] FAULT_INJECTION: forcing a failure. [ 1717.006492] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.007940] CPU: 1 PID: 20888 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1717.008761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.009751] Call Trace: [ 1717.010107] dump_stack+0x107/0x167 [ 1717.010569] should_fail.cold+0x5/0xa [ 1717.011035] ? create_object.isra.0+0x3a/0xa30 [ 1717.011590] should_failslab+0x5/0x20 [ 1717.012057] kmem_cache_alloc+0x5b/0x310 [ 1717.012552] create_object.isra.0+0x3a/0xa30 [ 1717.013087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1717.013698] __kmalloc+0x16e/0x390 [ 1717.014151] security_prepare_creds+0x112/0x190 [ 1717.014719] prepare_creds+0x452/0x5e0 [ 1717.015185] copy_creds+0x72/0x580 [ 1717.015625] copy_process+0xfef/0x78b0 [ 1717.016108] ? __lock_acquire+0xbb1/0x5b00 [ 1717.016636] ? lock_downgrade+0x6d0/0x6d0 [ 1717.017133] ? __cleanup_sighand+0xb0/0xb0 [ 1717.017641] ? perf_trace_lock+0xac/0x490 [ 1717.018150] ? __lockdep_reset_lock+0x180/0x180 [ 1717.018710] ? find_held_lock+0x2c/0x110 [ 1717.019204] kernel_clone+0xe7/0x980 [ 1717.019653] ? lock_downgrade+0x6d0/0x6d0 [ 1717.020147] ? find_held_lock+0x2c/0x110 [ 1717.020636] ? create_io_thread+0xf0/0xf0 [ 1717.021129] ? ksys_write+0x12d/0x260 [ 1717.021593] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1717.022186] __do_sys_fork+0x8a/0xc0 [ 1717.022641] ? kernel_thread+0xf0/0xf0 [ 1717.023114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1717.023743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.024352] ? trace_hardirqs_on+0x5b/0x180 [ 1717.024859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.025465] do_syscall_64+0x33/0x40 [ 1717.025905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1717.026518] RIP: 0033:0x7ff788849b19 [ 1717.026960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.029110] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1717.030025] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1717.030868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.031711] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.032549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.033379] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1717.039462] FAULT_INJECTION: forcing a failure. [ 1717.039462] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.040849] CPU: 1 PID: 20909 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1717.041646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.042291] FAULT_INJECTION: forcing a failure. [ 1717.042291] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.042617] Call Trace: [ 1717.042638] dump_stack+0x107/0x167 [ 1717.045639] should_fail.cold+0x5/0xa [ 1717.046101] ? __pmd_alloc+0x94/0x630 [ 1717.046546] should_failslab+0x5/0x20 [ 1717.046984] kmem_cache_alloc+0x5b/0x310 [ 1717.047465] __pmd_alloc+0x94/0x630 [ 1717.047896] copy_page_range+0x2bd0/0x3800 [ 1717.048384] ? perf_trace_lock+0xac/0x490 [ 1717.048866] ? lock_chain_count+0x20/0x20 [ 1717.049346] ? find_held_lock+0x2c/0x110 [ 1717.049822] ? anon_vma_fork+0x462/0x640 [ 1717.050317] ? up_write+0x191/0x550 [ 1717.050737] ? vm_iomap_memory+0x190/0x190 [ 1717.051230] ? downgrade_write+0x3a0/0x3a0 [ 1717.051721] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1717.052343] ? __vma_link_rb+0x540/0x700 [ 1717.052818] copy_process+0x7658/0x78b0 [ 1717.053301] ? __cleanup_sighand+0xb0/0xb0 [ 1717.053788] ? perf_trace_lock+0xac/0x490 [ 1717.054299] ? find_held_lock+0x2c/0x110 [ 1717.054768] kernel_clone+0xe7/0x980 [ 1717.055207] ? lock_downgrade+0x6d0/0x6d0 [ 1717.055679] ? find_held_lock+0x2c/0x110 [ 1717.056142] ? create_io_thread+0xf0/0xf0 [ 1717.056621] ? ksys_write+0x12d/0x260 [ 1717.057063] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1717.057635] __do_sys_fork+0x8a/0xc0 [ 1717.058071] ? kernel_thread+0xf0/0xf0 [ 1717.058532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1717.059130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.059717] ? trace_hardirqs_on+0x5b/0x180 [ 1717.060213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.060805] do_syscall_64+0x33/0x40 [ 1717.061230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1717.061818] RIP: 0033:0x7febfa601b19 [ 1717.062254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.064336] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1717.065211] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1717.066028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.066834] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.067641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.068458] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1717.069294] CPU: 0 PID: 20903 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1717.070899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.072624] Call Trace: [ 1717.073179] dump_stack+0x107/0x167 [ 1717.073940] should_fail.cold+0x5/0xa [ 1717.074755] ? create_object.isra.0+0x3a/0xa30 [ 1717.075703] should_failslab+0x5/0x20 [ 1717.076491] kmem_cache_alloc+0x5b/0x310 [ 1717.077334] ? mark_held_locks+0x9e/0xe0 [ 1717.078184] create_object.isra.0+0x3a/0xa30 [ 1717.079089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1717.080146] kmem_cache_alloc_bulk+0x168/0x320 [ 1717.081100] io_submit_sqes+0x713e/0x8780 [ 1717.081959] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1717.083013] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1717.084046] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1717.085048] ? find_held_lock+0x2c/0x110 [ 1717.085896] ? io_submit_sqes+0x8780/0x8780 [ 1717.086811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1717.087812] ? wait_for_completion_io+0x270/0x270 [ 1717.088814] ? rcu_read_lock_any_held+0x75/0xa0 [ 1717.089760] ? vfs_write+0x354/0xb10 [ 1717.090540] ? fput_many+0x2f/0x1a0 [ 1717.091295] ? ksys_write+0x1a9/0x260 [ 1717.092082] ? __ia32_sys_read+0xb0/0xb0 [ 1717.092929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1717.094032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.095122] do_syscall_64+0x33/0x40 [ 1717.095890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1717.096952] RIP: 0033:0x7f8917489b19 [ 1717.097717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.101513] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1717.103096] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1717.104569] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1717.106048] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.107514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.108987] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 [ 1717.126241] FAULT_INJECTION: forcing a failure. [ 1717.126241] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.127504] CPU: 1 PID: 21029 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1717.128270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.129194] Call Trace: [ 1717.129510] dump_stack+0x107/0x167 [ 1717.129926] should_fail.cold+0x5/0xa [ 1717.130382] ? security_prepare_creds+0x112/0x190 [ 1717.130928] should_failslab+0x5/0x20 [ 1717.131366] __kmalloc+0x72/0x390 [ 1717.131762] security_prepare_creds+0x112/0x190 [ 1717.132290] prepare_creds+0x452/0x5e0 [ 1717.132734] copy_creds+0x72/0x580 [ 1717.133139] copy_process+0xfef/0x78b0 [ 1717.133590] ? __lock_acquire+0xbb1/0x5b00 [ 1717.134084] ? lock_downgrade+0x6d0/0x6d0 [ 1717.134560] ? __cleanup_sighand+0xb0/0xb0 [ 1717.135036] ? perf_trace_lock+0xac/0x490 [ 1717.135519] ? __lockdep_reset_lock+0x180/0x180 [ 1717.136061] ? find_held_lock+0x2c/0x110 [ 1717.136526] kernel_clone+0xe7/0x980 [ 1717.136951] ? lock_downgrade+0x6d0/0x6d0 [ 1717.137429] ? find_held_lock+0x2c/0x110 [ 1717.137888] ? create_io_thread+0xf0/0xf0 [ 1717.138365] ? ksys_write+0x12d/0x260 [ 1717.138805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1717.139362] __do_sys_fork+0x8a/0xc0 [ 1717.139789] ? kernel_thread+0xf0/0xf0 [ 1717.140241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1717.140845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.141424] ? trace_hardirqs_on+0x5b/0x180 [ 1717.141914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.142509] do_syscall_64+0x33/0x40 [ 1717.142931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1717.143505] RIP: 0033:0x7f5b9eb75b19 [ 1717.143927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.146020] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1717.146890] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1717.147701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.148511] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.149307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.150119] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:07:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:14 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 02:07:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 7) 02:07:14 executing program 4: fork() (fail_nth: 70) 02:07:14 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x2, 0x8) fork() r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe, r2}}, 0xfffffc00) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0, 0x40000, 0x0, {0x0, r2}}, 0x200) perf_event_open(&(0x7f00000000c0)={0x3611fa5b0d84ea61, 0x80, 0x5, 0x2, 0xe3, 0x1, 0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xca7a, 0x7fff}, 0x0, 0x200, 0xfa3, 0x0, 0x0, 0x10000, 0x100, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0xcd7e) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000500)={{0x107, 0x3, 0x81, 0x37c, 0x3af, 0x0, 0x11a, 0x9}, "0e46", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x622) 02:07:14 executing program 2: r0 = fork() r1 = fork() r2 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, r2, 0xffffffffffffffff) 02:07:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 8) 02:07:14 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 72) [ 1734.554508] FAULT_INJECTION: forcing a failure. [ 1734.554508] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.556422] CPU: 0 PID: 21047 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1734.557207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.558146] Call Trace: [ 1734.558451] dump_stack+0x107/0x167 [ 1734.558868] should_fail.cold+0x5/0xa [ 1734.559306] ? create_object.isra.0+0x3a/0xa30 [ 1734.559824] should_failslab+0x5/0x20 [ 1734.560259] kmem_cache_alloc+0x5b/0x310 [ 1734.560718] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1734.561397] create_object.isra.0+0x3a/0xa30 [ 1734.561895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1734.562477] kmem_cache_alloc+0x159/0x310 [ 1734.562954] ptlock_alloc+0x1d/0x70 [ 1734.563370] pte_alloc_one+0x68/0x1a0 [ 1734.563799] __pte_alloc+0x1d/0x330 [ 1734.564214] copy_page_range+0x1b62/0x3800 [ 1734.564693] ? perf_trace_lock+0xac/0x490 [ 1734.564979] FAULT_INJECTION: forcing a failure. [ 1734.564979] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.565180] ? find_held_lock+0x2c/0x110 [ 1734.568359] ? anon_vma_fork+0x462/0x640 [ 1734.568841] ? up_write+0x191/0x550 [ 1734.569254] ? vm_iomap_memory+0x190/0x190 [ 1734.569729] ? downgrade_write+0x3a0/0x3a0 [ 1734.570220] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1734.570837] ? __vma_link_rb+0x540/0x700 [ 1734.571312] copy_process+0x7658/0x78b0 [ 1734.571786] ? __cleanup_sighand+0xb0/0xb0 [ 1734.572262] ? perf_trace_lock+0xac/0x490 [ 1734.572742] ? find_held_lock+0x2c/0x110 [ 1734.573206] kernel_clone+0xe7/0x980 [ 1734.573625] ? lock_downgrade+0x6d0/0x6d0 [ 1734.574106] ? find_held_lock+0x2c/0x110 [ 1734.574561] ? create_io_thread+0xf0/0xf0 [ 1734.575031] ? ksys_write+0x12d/0x260 [ 1734.575468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.576017] __do_sys_fork+0x8a/0xc0 [ 1734.576438] ? kernel_thread+0xf0/0xf0 [ 1734.576889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.577487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.578074] ? trace_hardirqs_on+0x5b/0x180 [ 1734.578564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.579147] do_syscall_64+0x33/0x40 [ 1734.579569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.580145] RIP: 0033:0x7febfa601b19 [ 1734.580569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.582648] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1734.583504] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1734.584308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.585108] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.585909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.586718] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1734.587566] CPU: 1 PID: 21042 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1734.589372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.591540] Call Trace: [ 1734.592229] dump_stack+0x107/0x167 [ 1734.593186] should_fail.cold+0x5/0xa [ 1734.594204] ? create_object.isra.0+0x3a/0xa30 [ 1734.595369] should_failslab+0x5/0x20 [ 1734.596358] kmem_cache_alloc+0x5b/0x310 [ 1734.597433] create_object.isra.0+0x3a/0xa30 [ 1734.598582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1734.599869] __kmalloc+0x16e/0x390 [ 1734.600123] FAULT_INJECTION: forcing a failure. [ 1734.600123] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.600804] security_prepare_creds+0x112/0x190 [ 1734.600844] prepare_creds+0x452/0x5e0 [ 1734.600875] copy_creds+0x72/0x580 [ 1734.600912] copy_process+0xfef/0x78b0 [ 1734.600955] ? __lock_acquire+0xbb1/0x5b00 [ 1734.601007] ? lock_downgrade+0x6d0/0x6d0 [ 1734.608026] ? __cleanup_sighand+0xb0/0xb0 [ 1734.608964] ? perf_trace_lock+0xac/0x490 [ 1734.609843] ? __lockdep_reset_lock+0x180/0x180 [ 1734.610853] ? find_held_lock+0x2c/0x110 [ 1734.611709] kernel_clone+0xe7/0x980 [ 1734.612497] ? lock_downgrade+0x6d0/0x6d0 [ 1734.613386] ? find_held_lock+0x2c/0x110 [ 1734.614251] ? create_io_thread+0xf0/0xf0 [ 1734.615124] ? ksys_write+0x12d/0x260 [ 1734.615947] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.616982] __do_sys_fork+0x8a/0xc0 [ 1734.617774] ? kernel_thread+0xf0/0xf0 [ 1734.618622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.619733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.620828] ? trace_hardirqs_on+0x5b/0x180 [ 1734.621741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.622843] do_syscall_64+0x33/0x40 [ 1734.623629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.624720] RIP: 0033:0x7f5b9eb75b19 [ 1734.625503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.629352] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1734.630972] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1734.632478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.633971] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.635468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.637059] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1734.638624] CPU: 0 PID: 21045 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1734.639412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.640343] Call Trace: [ 1734.640643] dump_stack+0x107/0x167 [ 1734.641066] should_fail.cold+0x5/0xa [ 1734.641511] ? create_object.isra.0+0x3a/0xa30 [ 1734.642033] should_failslab+0x5/0x20 [ 1734.642466] kmem_cache_alloc+0x5b/0x310 [ 1734.642923] ? mark_held_locks+0x9e/0xe0 [ 1734.643383] create_object.isra.0+0x3a/0xa30 [ 1734.643876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1734.644449] kmem_cache_alloc_bulk+0x168/0x320 [ 1734.644970] io_submit_sqes+0x713e/0x8780 [ 1734.645441] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1734.646001] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1734.646568] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1734.647115] ? find_held_lock+0x2c/0x110 [ 1734.647579] ? io_submit_sqes+0x8780/0x8780 [ 1734.648068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.648185] FAULT_INJECTION: forcing a failure. [ 1734.648185] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.648618] ? wait_for_completion_io+0x270/0x270 [ 1734.651770] ? rcu_read_lock_any_held+0x75/0xa0 [ 1734.652297] ? vfs_write+0x354/0xb10 [ 1734.652718] ? fput_many+0x2f/0x1a0 [ 1734.653132] ? ksys_write+0x1a9/0x260 [ 1734.653559] ? __ia32_sys_read+0xb0/0xb0 [ 1734.654022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.654629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.655214] do_syscall_64+0x33/0x40 [ 1734.655633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.656207] RIP: 0033:0x7f8917489b19 [ 1734.656625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.658807] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1734.659872] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1734.660856] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1734.661850] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.662854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.663838] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 [ 1734.664867] CPU: 1 PID: 21049 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1734.666400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.668155] Call Trace: [ 1734.668742] dump_stack+0x107/0x167 [ 1734.669529] should_fail.cold+0x5/0xa [ 1734.670361] ? xas_alloc+0x336/0x440 [ 1734.671176] should_failslab+0x5/0x20 [ 1734.672000] kmem_cache_alloc+0x5b/0x310 [ 1734.672873] xas_alloc+0x336/0x440 [ 1734.673628] xas_create+0x34a/0x10d0 [ 1734.674440] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1734.675568] xas_store+0x8c/0x1c40 [ 1734.676359] __xa_store+0x164/0x2d0 [ 1734.677155] ? xa_delete_node+0x280/0x280 [ 1734.678050] ? trace_hardirqs_on+0x5b/0x180 [ 1734.678993] xa_store+0x31/0x50 [ 1734.679699] __io_uring_add_tctx_node+0x1cf/0x520 [ 1734.680742] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1734.681843] ? alloc_fd+0x2e7/0x670 [ 1734.682657] io_uring_setup+0x1fbb/0x2980 [ 1734.683549] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1734.684814] ? wait_for_completion_io+0x270/0x270 [ 1734.686162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.687538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.688875] do_syscall_64+0x33/0x40 [ 1734.689841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.691176] RIP: 0033:0x7feb2b3bab19 [ 1734.692146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.696841] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1734.698823] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1734.700711] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1734.702518] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1734.704135] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1734.705685] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:07:14 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:07:14 executing program 4: fork() (fail_nth: 71) [ 1734.727663] FAULT_INJECTION: forcing a failure. [ 1734.727663] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.730320] CPU: 1 PID: 21048 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1734.731770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.733502] Call Trace: [ 1734.734058] dump_stack+0x107/0x167 [ 1734.734862] should_fail.cold+0x5/0xa [ 1734.735674] ? __delayacct_tsk_init+0x1b/0x80 [ 1734.736618] should_failslab+0x5/0x20 [ 1734.737424] kmem_cache_alloc+0x5b/0x310 [ 1734.738293] ? prepare_creds+0x466/0x5e0 [ 1734.739149] __delayacct_tsk_init+0x1b/0x80 [ 1734.740050] copy_process+0x3399/0x78b0 [ 1734.740896] ? __lock_acquire+0xbb1/0x5b00 [ 1734.741821] ? lock_downgrade+0x6d0/0x6d0 [ 1734.742712] ? __cleanup_sighand+0xb0/0xb0 [ 1734.743594] ? perf_trace_lock+0xac/0x490 [ 1734.744470] ? __lockdep_reset_lock+0x180/0x180 [ 1734.745451] ? find_held_lock+0x2c/0x110 [ 1734.746326] kernel_clone+0xe7/0x980 [ 1734.747107] ? lock_downgrade+0x6d0/0x6d0 [ 1734.747972] ? find_held_lock+0x2c/0x110 [ 1734.748825] ? create_io_thread+0xf0/0xf0 [ 1734.749697] ? ksys_write+0x12d/0x260 [ 1734.750511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.751519] __do_sys_fork+0x8a/0xc0 [ 1734.752294] ? kernel_thread+0xf0/0xf0 [ 1734.753139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.754253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.755341] ? trace_hardirqs_on+0x5b/0x180 [ 1734.756251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.757339] do_syscall_64+0x33/0x40 [ 1734.758130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.759218] RIP: 0033:0x7ff788849b19 [ 1734.759990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.763824] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1734.765423] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1734.766939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.768467] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.769972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.771493] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:07:14 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 73) [ 1734.796367] FAULT_INJECTION: forcing a failure. [ 1734.796367] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.797827] CPU: 0 PID: 21093 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1734.798614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.799543] Call Trace: [ 1734.799848] dump_stack+0x107/0x167 [ 1734.800265] should_fail.cold+0x5/0xa [ 1734.800695] ? create_object.isra.0+0x3a/0xa30 [ 1734.801212] should_failslab+0x5/0x20 [ 1734.801647] kmem_cache_alloc+0x5b/0x310 [ 1734.802115] ? mark_held_locks+0x9e/0xe0 [ 1734.802578] create_object.isra.0+0x3a/0xa30 [ 1734.803071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1734.803648] kmem_cache_alloc_bulk+0x168/0x320 [ 1734.804167] io_submit_sqes+0x713e/0x8780 [ 1734.804639] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1734.805203] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1734.805763] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1734.806321] ? find_held_lock+0x2c/0x110 [ 1734.806783] ? io_submit_sqes+0x8780/0x8780 [ 1734.807278] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.807825] ? wait_for_completion_io+0x270/0x270 [ 1734.808372] ? rcu_read_lock_any_held+0x75/0xa0 [ 1734.808894] ? vfs_write+0x354/0xb10 [ 1734.809317] ? fput_many+0x2f/0x1a0 [ 1734.809725] ? ksys_write+0x1a9/0x260 [ 1734.810161] ? __ia32_sys_read+0xb0/0xb0 [ 1734.810625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.811218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.811803] do_syscall_64+0x33/0x40 [ 1734.812222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.812801] RIP: 0033:0x7f8917489b19 [ 1734.813223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.815295] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1734.816154] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1734.816958] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1734.817761] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.818569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.819373] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 [ 1734.835541] FAULT_INJECTION: forcing a failure. [ 1734.835541] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.838136] CPU: 1 PID: 21166 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1734.839667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.841563] Call Trace: [ 1734.842171] dump_stack+0x107/0x167 [ 1734.843007] should_fail.cold+0x5/0xa [ 1734.843881] ? vm_area_dup+0x78/0x290 [ 1734.844742] should_failslab+0x5/0x20 [ 1734.845606] kmem_cache_alloc+0x5b/0x310 [ 1734.846540] ? lock_downgrade+0x6d0/0x6d0 [ 1734.847473] vm_area_dup+0x78/0x290 [ 1734.848285] ? _cond_resched+0x10/0x30 [ 1734.849102] ? copy_page_range+0x24e9/0x3800 [ 1734.850142] ? vm_area_alloc+0x110/0x110 [ 1734.851027] ? up_write+0x191/0x550 [ 1734.851792] ? vm_iomap_memory+0x190/0x190 [ 1734.852713] ? downgrade_write+0x3a0/0x3a0 [ 1734.853662] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1734.854800] ? __vma_link_rb+0x540/0x700 [ 1734.855726] copy_process+0x298b/0x78b0 [ 1734.856605] ? __cleanup_sighand+0xb0/0xb0 [ 1734.857567] ? perf_trace_lock+0xac/0x490 [ 1734.858476] ? find_held_lock+0x2c/0x110 [ 1734.859366] kernel_clone+0xe7/0x980 [ 1734.860215] ? lock_downgrade+0x6d0/0x6d0 [ 1734.861166] ? find_held_lock+0x2c/0x110 [ 1734.862005] FAULT_INJECTION: forcing a failure. [ 1734.862005] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.862120] ? create_io_thread+0xf0/0xf0 [ 1734.864269] ? ksys_write+0x12d/0x260 [ 1734.865091] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1734.866109] __do_sys_fork+0x8a/0xc0 [ 1734.866909] ? kernel_thread+0xf0/0xf0 [ 1734.867747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.868838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.869911] ? trace_hardirqs_on+0x5b/0x180 [ 1734.870830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.871917] do_syscall_64+0x33/0x40 [ 1734.872703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.873775] RIP: 0033:0x7febfa601b19 [ 1734.874573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.878395] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1734.879978] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1734.881460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.882967] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.884459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.885966] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1734.887518] CPU: 0 PID: 21221 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1734.888316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.889247] Call Trace: [ 1734.889551] dump_stack+0x107/0x167 [ 1734.889966] should_fail.cold+0x5/0xa [ 1734.890409] ? create_object.isra.0+0x3a/0xa30 [ 1734.890928] should_failslab+0x5/0x20 [ 1734.891356] kmem_cache_alloc+0x5b/0x310 [ 1734.891817] ? mark_held_locks+0x9e/0xe0 [ 1734.892279] create_object.isra.0+0x3a/0xa30 [ 1734.892771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1734.893353] kmem_cache_alloc+0x159/0x310 [ 1734.893849] xas_alloc+0x336/0x440 [ 1734.894269] xas_create+0x34a/0x10d0 [ 1734.894696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1734.895288] xas_store+0x8c/0x1c40 [ 1734.895700] __xa_store+0x164/0x2d0 [ 1734.896115] ? xa_delete_node+0x280/0x280 [ 1734.896595] ? trace_hardirqs_on+0x5b/0x180 [ 1734.897085] xa_store+0x31/0x50 [ 1734.897458] __io_uring_add_tctx_node+0x1cf/0x520 [ 1734.898002] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1734.898602] ? alloc_fd+0x2e7/0x670 [ 1734.899022] io_uring_setup+0x1fbb/0x2980 [ 1734.899500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1734.900070] ? wait_for_completion_io+0x270/0x270 [ 1734.900629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1734.901222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.901805] do_syscall_64+0x33/0x40 [ 1734.902233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1734.902805] RIP: 0033:0x7feb2b3bab19 [ 1734.903223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.905286] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1734.906154] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1734.906954] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1734.907754] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1734.908553] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1734.909351] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:07:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 8) 02:07:15 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xf1af) fork() 02:07:15 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x9) fork() 02:07:15 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 74) 02:07:15 executing program 4: fork() (fail_nth: 72) [ 1735.051442] FAULT_INJECTION: forcing a failure. [ 1735.051442] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.052960] CPU: 0 PID: 21370 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1735.053744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.054702] Call Trace: [ 1735.055020] dump_stack+0x107/0x167 [ 1735.055439] should_fail.cold+0x5/0xa [ 1735.055873] ? __delayacct_tsk_init+0x1b/0x80 [ 1735.056387] should_failslab+0x5/0x20 [ 1735.056820] kmem_cache_alloc+0x5b/0x310 [ 1735.057284] ? prepare_creds+0x466/0x5e0 [ 1735.057743] __delayacct_tsk_init+0x1b/0x80 [ 1735.058245] copy_process+0x3399/0x78b0 [ 1735.058700] ? __lock_acquire+0xbb1/0x5b00 [ 1735.059186] ? lock_downgrade+0x6d0/0x6d0 [ 1735.059660] ? __cleanup_sighand+0xb0/0xb0 [ 1735.060135] ? perf_trace_lock+0xac/0x490 [ 1735.060606] ? __lockdep_reset_lock+0x180/0x180 [ 1735.061141] ? find_held_lock+0x2c/0x110 [ 1735.061603] kernel_clone+0xe7/0x980 [ 1735.062029] ? lock_downgrade+0x6d0/0x6d0 [ 1735.062503] ? find_held_lock+0x2c/0x110 [ 1735.062964] ? create_io_thread+0xf0/0xf0 [ 1735.063436] ? ksys_write+0x12d/0x260 [ 1735.063872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1735.064429] __do_sys_fork+0x8a/0xc0 [ 1735.064854] ? kernel_thread+0xf0/0xf0 [ 1735.065304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1735.065901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.066492] ? trace_hardirqs_on+0x5b/0x180 [ 1735.066983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.067569] do_syscall_64+0x33/0x40 [ 1735.067993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.068573] RIP: 0033:0x7f5b9eb75b19 [ 1735.068993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.071072] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1735.071935] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1735.072741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.073553] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.074365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.074821] FAULT_INJECTION: forcing a failure. [ 1735.074821] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.075167] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1735.079320] CPU: 1 PID: 21374 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1735.080811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.082556] Call Trace: [ 1735.083117] dump_stack+0x107/0x167 [ 1735.083897] should_fail.cold+0x5/0xa [ 1735.084705] ? xas_alloc+0x336/0x440 [ 1735.085504] should_failslab+0x5/0x20 [ 1735.086313] kmem_cache_alloc+0x5b/0x310 [ 1735.087168] xas_alloc+0x336/0x440 [ 1735.087920] xas_create+0x34a/0x10d0 [ 1735.088729] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1735.089853] xas_store+0x8c/0x1c40 [ 1735.090645] __xa_store+0x164/0x2d0 [ 1735.091435] ? xa_delete_node+0x280/0x280 [ 1735.092338] ? trace_hardirqs_on+0x5b/0x180 [ 1735.092426] FAULT_INJECTION: forcing a failure. [ 1735.092426] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.093271] xa_store+0x31/0x50 [ 1735.093297] __io_uring_add_tctx_node+0x1cf/0x520 [ 1735.093319] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1735.093338] ? alloc_fd+0x2e7/0x670 [ 1735.093374] io_uring_setup+0x1fbb/0x2980 [ 1735.093407] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1735.093426] ? wait_for_completion_io+0x270/0x270 [ 1735.093498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1735.103989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.105346] do_syscall_64+0x33/0x40 [ 1735.106338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.107660] RIP: 0033:0x7feb2b3bab19 [ 1735.108653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.113443] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1735.115440] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1735.117127] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1735.118853] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1735.120378] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1735.121869] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1735.123411] CPU: 0 PID: 21388 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1735.124205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.125134] Call Trace: [ 1735.125446] dump_stack+0x107/0x167 [ 1735.125874] should_fail.cold+0x5/0xa [ 1735.126321] ? create_object.isra.0+0x3a/0xa30 [ 1735.126836] should_failslab+0x5/0x20 [ 1735.127269] kmem_cache_alloc+0x5b/0x310 [ 1735.127733] create_object.isra.0+0x3a/0xa30 [ 1735.128226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1735.128800] kmem_cache_alloc+0x159/0x310 [ 1735.129267] ? lock_downgrade+0x6d0/0x6d0 [ 1735.129734] vm_area_dup+0x78/0x290 [ 1735.130161] ? _cond_resched+0x10/0x30 [ 1735.130598] ? copy_page_range+0x24e9/0x3800 [ 1735.131118] ? vm_area_alloc+0x110/0x110 [ 1735.131577] ? up_write+0x191/0x550 [ 1735.131987] ? vm_iomap_memory+0x190/0x190 [ 1735.132463] ? downgrade_write+0x3a0/0x3a0 [ 1735.132942] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1735.133558] ? __vma_link_rb+0x540/0x700 [ 1735.134024] copy_process+0x298b/0x78b0 [ 1735.134515] ? __cleanup_sighand+0xb0/0xb0 [ 1735.134998] ? perf_trace_lock+0xac/0x490 [ 1735.135483] ? find_held_lock+0x2c/0x110 [ 1735.135947] kernel_clone+0xe7/0x980 [ 1735.136373] ? lock_downgrade+0x6d0/0x6d0 [ 1735.136837] ? find_held_lock+0x2c/0x110 [ 1735.137294] ? create_io_thread+0xf0/0xf0 [ 1735.137759] ? ksys_write+0x12d/0x260 [ 1735.138199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1735.138750] __do_sys_fork+0x8a/0xc0 [ 1735.139176] ? kernel_thread+0xf0/0xf0 [ 1735.139625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1735.140220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.140797] ? trace_hardirqs_on+0x5b/0x180 [ 1735.141287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.141866] do_syscall_64+0x33/0x40 [ 1735.142297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.142868] RIP: 0033:0x7febfa601b19 [ 1735.143293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.145353] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1735.146222] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1735.147020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.147818] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.148623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.149432] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:07:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:15 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1735.177441] FAULT_INJECTION: forcing a failure. [ 1735.177441] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.180408] CPU: 1 PID: 21407 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1735.181870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.184036] Call Trace: [ 1735.184678] dump_stack+0x107/0x167 [ 1735.185455] should_fail.cold+0x5/0xa [ 1735.186296] ? create_object.isra.0+0x3a/0xa30 [ 1735.187288] should_failslab+0x5/0x20 [ 1735.188102] kmem_cache_alloc+0x5b/0x310 [ 1735.189001] ? mark_held_locks+0x9e/0xe0 [ 1735.189913] create_object.isra.0+0x3a/0xa30 [ 1735.190894] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1735.191974] kmem_cache_alloc_bulk+0x168/0x320 [ 1735.192996] io_submit_sqes+0x713e/0x8780 [ 1735.193912] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1735.195022] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1735.196194] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1735.197538] ? find_held_lock+0x2c/0x110 [ 1735.198702] ? io_submit_sqes+0x8780/0x8780 [ 1735.199891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1735.201204] ? wait_for_completion_io+0x270/0x270 [ 1735.202531] ? rcu_read_lock_any_held+0x75/0xa0 [ 1735.203793] ? vfs_write+0x354/0xb10 [ 1735.204815] ? fput_many+0x2f/0x1a0 [ 1735.205817] ? ksys_write+0x1a9/0x260 [ 1735.206868] ? __ia32_sys_read+0xb0/0xb0 [ 1735.207981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1735.209405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.210824] do_syscall_64+0x33/0x40 [ 1735.211836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.213224] RIP: 0033:0x7f8917489b19 [ 1735.214161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.218623] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1735.220302] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1735.221899] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1735.223511] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.225087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.226668] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:07:15 executing program 2: r0 = fork() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/150, 0x96}, {&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000001c0)=""/159, 0x9f}, {&(0x7f0000000280)=""/55, 0x37}], 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)}], 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/255, 0xff}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}, 0x10023) r2 = syz_open_dev$evdev(&(0x7f0000000740), 0x6, 0x20400) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) kcmp(r0, r1, 0x6, r2, r3) 02:07:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 9) [ 1735.340387] FAULT_INJECTION: forcing a failure. [ 1735.340387] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.342171] CPU: 0 PID: 21666 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1735.342971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1735.343923] Call Trace: [ 1735.344236] dump_stack+0x107/0x167 [ 1735.344667] should_fail.cold+0x5/0xa [ 1735.345113] ? create_object.isra.0+0x3a/0xa30 [ 1735.345628] should_failslab+0x5/0x20 [ 1735.346073] kmem_cache_alloc+0x5b/0x310 [ 1735.346550] create_object.isra.0+0x3a/0xa30 [ 1735.347053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1735.347640] kmem_cache_alloc+0x159/0x310 [ 1735.348116] ? prepare_creds+0x466/0x5e0 [ 1735.348590] __delayacct_tsk_init+0x1b/0x80 [ 1735.349087] copy_process+0x3399/0x78b0 [ 1735.349545] ? __lock_acquire+0xbb1/0x5b00 [ 1735.350045] ? lock_downgrade+0x6d0/0x6d0 [ 1735.350534] ? __cleanup_sighand+0xb0/0xb0 [ 1735.351018] ? perf_trace_lock+0xac/0x490 [ 1735.351498] ? __lockdep_reset_lock+0x180/0x180 [ 1735.352038] ? find_held_lock+0x2c/0x110 [ 1735.352513] kernel_clone+0xe7/0x980 [ 1735.352937] ? lock_downgrade+0x6d0/0x6d0 [ 1735.353421] ? find_held_lock+0x2c/0x110 [ 1735.353885] ? create_io_thread+0xf0/0xf0 [ 1735.354360] ? ksys_write+0x12d/0x260 [ 1735.354804] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1735.355366] __do_sys_fork+0x8a/0xc0 [ 1735.355792] ? kernel_thread+0xf0/0xf0 [ 1735.356251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1735.356856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.357457] ? trace_hardirqs_on+0x5b/0x180 [ 1735.357954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1735.358552] do_syscall_64+0x33/0x40 [ 1735.358982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1735.359570] RIP: 0033:0x7ff788849b19 [ 1735.359998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.362069] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1735.362945] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1735.363767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.364583] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.365403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.366230] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:07:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 10) 02:07:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 9) 02:07:32 executing program 4: fork() (fail_nth: 73) 02:07:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 02:07:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:07:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x8, 0x1, 0x4c, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf820, 0x7800, 0x1, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@mcast2, 0x8, r1}) 02:07:32 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 75) [ 1752.392206] FAULT_INJECTION: forcing a failure. [ 1752.392206] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.395170] CPU: 1 PID: 21800 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1752.396870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.398925] Call Trace: [ 1752.399577] dump_stack+0x107/0x167 [ 1752.400473] should_fail.cold+0x5/0xa [ 1752.401411] ? dup_fd+0x89/0xe40 [ 1752.402255] should_failslab+0x5/0x20 [ 1752.403200] kmem_cache_alloc+0x5b/0x310 [ 1752.404208] dup_fd+0x89/0xe40 [ 1752.404993] ? audit_filter_inodes+0x40/0x40 [ 1752.406092] ? security_task_alloc+0xe6/0x260 [ 1752.407216] copy_process+0x197c/0x78b0 [ 1752.408205] ? __lock_acquire+0xbb1/0x5b00 [ 1752.409082] ? __cleanup_sighand+0xb0/0xb0 [ 1752.410102] ? perf_trace_lock+0xac/0x490 [ 1752.411135] ? __lockdep_reset_lock+0x180/0x180 [ 1752.412270] ? find_held_lock+0x2c/0x110 [ 1752.413090] kernel_clone+0xe7/0x980 [ 1752.413993] ? lock_downgrade+0x6d0/0x6d0 [ 1752.415007] ? find_held_lock+0x2c/0x110 [ 1752.415990] ? create_io_thread+0xf0/0xf0 [ 1752.417002] ? ksys_write+0x12d/0x260 [ 1752.417925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.419106] __do_sys_fork+0x8a/0xc0 [ 1752.420012] ? kernel_thread+0xf0/0xf0 [ 1752.420969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.422238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.423245] ? trace_hardirqs_on+0x5b/0x180 [ 1752.424288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.425531] do_syscall_64+0x33/0x40 [ 1752.426446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.427695] RIP: 0033:0x7ff788849b19 [ 1752.428586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.428606] FAULT_INJECTION: forcing a failure. [ 1752.428606] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.435607] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1752.437421] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1752.439117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.440830] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.442534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.444235] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1752.446061] CPU: 0 PID: 21810 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1752.447736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.449713] Call Trace: [ 1752.450343] dump_stack+0x107/0x167 [ 1752.451230] should_fail.cold+0x5/0xa [ 1752.452168] ? vm_area_dup+0x78/0x290 [ 1752.453092] should_failslab+0x5/0x20 [ 1752.454008] kmem_cache_alloc+0x5b/0x310 [ 1752.455005] vm_area_dup+0x78/0x290 [ 1752.455880] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1752.456977] ? lock_downgrade+0x6d0/0x6d0 [ 1752.457798] FAULT_INJECTION: forcing a failure. [ 1752.457798] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.457981] ? copy_page_range+0x24e9/0x3800 [ 1752.458031] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1752.462509] ? avc_has_extended_perms+0xf40/0xf40 [ 1752.463684] ? vm_area_alloc+0x110/0x110 [ 1752.464683] ? selinux_vm_enough_memory+0x114/0x180 [ 1752.465863] ? selinux_sb_statfs+0x250/0x250 [ 1752.466946] ? percpu_counter_add_batch+0x8b/0x140 [ 1752.468145] ? __vm_enough_memory+0x184/0x360 [ 1752.469204] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1752.470464] copy_process+0x298b/0x78b0 [ 1752.471468] ? __cleanup_sighand+0xb0/0xb0 [ 1752.472465] ? perf_trace_lock+0xac/0x490 [ 1752.473452] ? find_held_lock+0x2c/0x110 [ 1752.474418] kernel_clone+0xe7/0x980 [ 1752.475290] ? lock_downgrade+0x6d0/0x6d0 [ 1752.476263] ? find_held_lock+0x2c/0x110 [ 1752.477217] ? create_io_thread+0xf0/0xf0 [ 1752.478187] ? ksys_write+0x12d/0x260 [ 1752.479077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.480211] __do_sys_fork+0x8a/0xc0 [ 1752.481069] ? kernel_thread+0xf0/0xf0 [ 1752.481992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.483217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.484408] ? trace_hardirqs_on+0x5b/0x180 [ 1752.485410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.486619] do_syscall_64+0x33/0x40 [ 1752.487482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.488659] RIP: 0033:0x7febfa601b19 [ 1752.489518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.493674] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1752.495406] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1752.497022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.498661] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.500276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.501899] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1752.503577] CPU: 1 PID: 21814 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1752.505163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.507077] Call Trace: [ 1752.507687] dump_stack+0x107/0x167 [ 1752.508530] should_fail.cold+0x5/0xa [ 1752.509409] ? create_object.isra.0+0x3a/0xa30 [ 1752.510467] should_failslab+0x5/0x20 [ 1752.511328] kmem_cache_alloc+0x5b/0x310 [ 1752.512104] ? mark_held_locks+0x9e/0xe0 [ 1752.513032] create_object.isra.0+0x3a/0xa30 [ 1752.513922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.514885] kmem_cache_alloc+0x159/0x310 [ 1752.515670] xas_alloc+0x336/0x440 [ 1752.516357] xas_create+0x34a/0x10d0 [ 1752.517075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1752.518067] xas_store+0x8c/0x1c40 [ 1752.518768] __xa_store+0x164/0x2d0 [ 1752.519234] FAULT_INJECTION: forcing a failure. [ 1752.519234] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.519455] ? xa_delete_node+0x280/0x280 [ 1752.522731] ? trace_hardirqs_on+0x5b/0x180 [ 1752.523545] xa_store+0x31/0x50 [ 1752.524172] __io_uring_add_tctx_node+0x1cf/0x520 [ 1752.525065] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1752.526055] ? alloc_fd+0x2e7/0x670 [ 1752.526761] io_uring_setup+0x1fbb/0x2980 [ 1752.527547] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1752.528490] ? wait_for_completion_io+0x270/0x270 [ 1752.529411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.530407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.531366] do_syscall_64+0x33/0x40 [ 1752.532052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.532982] RIP: 0033:0x7feb2b3bab19 [ 1752.533675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.537052] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1752.538461] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1752.539770] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1752.541083] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1752.542395] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1752.543711] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1752.545053] CPU: 0 PID: 21811 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1752.546621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.548479] Call Trace: [ 1752.549069] dump_stack+0x107/0x167 [ 1752.549889] should_fail.cold+0x5/0xa [ 1752.550744] ? create_object.isra.0+0x3a/0xa30 [ 1752.551750] should_failslab+0x5/0x20 [ 1752.552589] kmem_cache_alloc+0x5b/0x310 [ 1752.553498] create_object.isra.0+0x3a/0xa30 [ 1752.554471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.555603] kmem_cache_alloc+0x159/0x310 [ 1752.556516] ? prepare_creds+0x466/0x5e0 [ 1752.557421] __delayacct_tsk_init+0x1b/0x80 [ 1752.558386] copy_process+0x3399/0x78b0 [ 1752.559275] ? __lock_acquire+0xbb1/0x5b00 [ 1752.560230] ? lock_downgrade+0x6d0/0x6d0 [ 1752.561156] ? __cleanup_sighand+0xb0/0xb0 [ 1752.562096] ? perf_trace_lock+0xac/0x490 [ 1752.563032] ? __lockdep_reset_lock+0x180/0x180 [ 1752.564074] ? find_held_lock+0x2c/0x110 [ 1752.564984] kernel_clone+0xe7/0x980 [ 1752.565817] ? lock_downgrade+0x6d0/0x6d0 [ 1752.566735] ? find_held_lock+0x2c/0x110 [ 1752.567637] ? create_io_thread+0xf0/0xf0 [ 1752.568558] ? ksys_write+0x12d/0x260 [ 1752.569399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.570470] __do_sys_fork+0x8a/0xc0 [ 1752.571279] ? kernel_thread+0xf0/0xf0 [ 1752.572148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.573293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.574427] ? trace_hardirqs_on+0x5b/0x180 [ 1752.575375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.576502] do_syscall_64+0x33/0x40 [ 1752.577315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.578437] RIP: 0033:0x7f5b9eb75b19 [ 1752.579243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.583243] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1752.584893] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1752.586463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.587999] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.589530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.591071] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:07:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x9832a000) fork() [ 1752.624656] FAULT_INJECTION: forcing a failure. [ 1752.624656] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.628264] CPU: 0 PID: 21813 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1752.630235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.632288] Call Trace: [ 1752.632922] dump_stack+0x107/0x167 [ 1752.633786] should_fail.cold+0x5/0xa [ 1752.634701] ? create_object.isra.0+0x3a/0xa30 [ 1752.635778] should_failslab+0x5/0x20 [ 1752.636679] kmem_cache_alloc+0x5b/0x310 [ 1752.637568] ? mark_held_locks+0x9e/0xe0 [ 1752.638436] create_object.isra.0+0x3a/0xa30 [ 1752.639361] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.640441] kmem_cache_alloc_bulk+0x168/0x320 [ 1752.641415] io_submit_sqes+0x713e/0x8780 [ 1752.642309] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1752.643359] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.644407] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.645440] ? find_held_lock+0x2c/0x110 [ 1752.646325] ? io_submit_sqes+0x8780/0x8780 [ 1752.647255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.648277] ? wait_for_completion_io+0x270/0x270 [ 1752.649305] ? rcu_read_lock_any_held+0x75/0xa0 [ 1752.650289] ? vfs_write+0x354/0xb10 [ 1752.651085] ? fput_many+0x2f/0x1a0 02:07:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1752.651853] ? ksys_write+0x1a9/0x260 [ 1752.652816] ? __ia32_sys_read+0xb0/0xb0 [ 1752.653683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.654804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.655895] do_syscall_64+0x33/0x40 [ 1752.656679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.657768] RIP: 0033:0x7f8917489b19 [ 1752.658555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.662445] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1752.664038] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1752.665548] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1752.667076] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.668586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.670091] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:07:32 executing program 4: fork() (fail_nth: 74) 02:07:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 11) [ 1752.713893] FAULT_INJECTION: forcing a failure. [ 1752.713893] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.715832] CPU: 1 PID: 21964 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1752.717206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.718603] Call Trace: [ 1752.719140] dump_stack+0x107/0x167 [ 1752.719870] should_fail.cold+0x5/0xa [ 1752.720639] ? create_object.isra.0+0x3a/0xa30 [ 1752.721554] should_failslab+0x5/0x20 [ 1752.722332] kmem_cache_alloc+0x5b/0x310 [ 1752.723156] create_object.isra.0+0x3a/0xa30 [ 1752.724031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.724841] kmem_cache_alloc+0x159/0x310 [ 1752.725681] vm_area_dup+0x78/0x290 [ 1752.726429] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1752.727362] ? lock_downgrade+0x6d0/0x6d0 [ 1752.728191] ? copy_page_range+0x24e9/0x3800 [ 1752.728909] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1752.729837] ? avc_has_extended_perms+0xf40/0xf40 [ 1752.730813] ? vm_area_alloc+0x110/0x110 [ 1752.731628] ? selinux_vm_enough_memory+0x114/0x180 [ 1752.732617] ? selinux_sb_statfs+0x250/0x250 [ 1752.733500] ? percpu_counter_add_batch+0x8b/0x140 [ 1752.734496] ? __vm_enough_memory+0x184/0x360 [ 1752.735376] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1752.736392] copy_process+0x298b/0x78b0 [ 1752.737054] ? __cleanup_sighand+0xb0/0xb0 [ 1752.737886] ? perf_trace_lock+0xac/0x490 [ 1752.738584] ? find_held_lock+0x2c/0x110 [ 1752.739389] kernel_clone+0xe7/0x980 [ 1752.739978] ? lock_downgrade+0x6d0/0x6d0 [ 1752.740796] ? find_held_lock+0x2c/0x110 [ 1752.741436] ? create_io_thread+0xf0/0xf0 [ 1752.742275] ? ksys_write+0x12d/0x260 [ 1752.743040] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.744004] __do_sys_fork+0x8a/0xc0 [ 1752.744732] ? kernel_thread+0xf0/0xf0 [ 1752.745522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.746558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.747567] ? trace_hardirqs_on+0x5b/0x180 [ 1752.748416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.749426] do_syscall_64+0x33/0x40 [ 1752.750163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.751164] RIP: 0033:0x7febfa601b19 [ 1752.751892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.755484] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1752.756969] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1752.758357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.759739] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.761116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.762505] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1752.795709] FAULT_INJECTION: forcing a failure. [ 1752.795709] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.799171] CPU: 0 PID: 22026 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1752.800640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.802400] Call Trace: [ 1752.802961] dump_stack+0x107/0x167 [ 1752.803735] should_fail.cold+0x5/0xa [ 1752.804548] ? create_object.isra.0+0x3a/0xa30 [ 1752.805523] should_failslab+0x5/0x20 [ 1752.806347] kmem_cache_alloc+0x5b/0x310 [ 1752.807216] create_object.isra.0+0x3a/0xa30 [ 1752.808146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.809228] kmem_cache_alloc+0x159/0x310 [ 1752.810119] dup_fd+0x89/0xe40 [ 1752.810814] ? audit_filter_inodes+0x40/0x40 [ 1752.811754] ? security_task_alloc+0xe6/0x260 [ 1752.812718] copy_process+0x197c/0x78b0 [ 1752.813568] ? __lock_acquire+0xbb1/0x5b00 [ 1752.814500] ? __cleanup_sighand+0xb0/0xb0 [ 1752.815398] ? perf_trace_lock+0xac/0x490 [ 1752.816292] ? __lockdep_reset_lock+0x180/0x180 [ 1752.817288] ? find_held_lock+0x2c/0x110 [ 1752.818162] kernel_clone+0xe7/0x980 [ 1752.818956] ? lock_downgrade+0x6d0/0x6d0 [ 1752.819835] ? find_held_lock+0x2c/0x110 [ 1752.820697] ? create_io_thread+0xf0/0xf0 [ 1752.821576] ? ksys_write+0x12d/0x260 [ 1752.822399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.823424] __do_sys_fork+0x8a/0xc0 [ 1752.824218] ? kernel_thread+0xf0/0xf0 [ 1752.825057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.826179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.827279] ? trace_hardirqs_on+0x5b/0x180 [ 1752.828203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.829303] do_syscall_64+0x33/0x40 [ 1752.830109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.831202] RIP: 0033:0x7ff788849b19 [ 1752.831990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.835891] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1752.837494] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1752.839026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.840528] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.842037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.843542] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:07:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:53 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 76) 02:07:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 12) 02:07:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="c98f000000000000000005"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x40}, 0x4804) perf_event_open(&(0x7f0000000480)={0x0, 0xfffffe3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4040010) fork() 02:07:53 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 02:07:53 executing program 2: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) fork() 02:07:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 10) 02:07:53 executing program 4: fork() (fail_nth: 75) 02:07:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1773.770923] FAULT_INJECTION: forcing a failure. [ 1773.770923] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.771505] FAULT_INJECTION: forcing a failure. [ 1773.771505] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.773243] CPU: 1 PID: 22250 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1773.773254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.773262] Call Trace: [ 1773.773289] dump_stack+0x107/0x167 [ 1773.773315] should_fail.cold+0x5/0xa [ 1773.773339] ? anon_vma_clone+0xdc/0x590 [ 1773.773358] should_failslab+0x5/0x20 [ 1773.773379] kmem_cache_alloc+0x5b/0x310 [ 1773.773407] anon_vma_clone+0xdc/0x590 [ 1773.773440] anon_vma_fork+0x82/0x640 [ 1773.773458] ? __vm_enough_memory+0x184/0x360 [ 1773.773483] copy_process+0x72cd/0x78b0 [ 1773.773545] ? __cleanup_sighand+0xb0/0xb0 [ 1773.787187] ? perf_trace_lock+0xac/0x490 [ 1773.788050] ? find_held_lock+0x2c/0x110 [ 1773.788876] kernel_clone+0xe7/0x980 [ 1773.789621] ? lock_downgrade+0x6d0/0x6d0 [ 1773.790470] ? find_held_lock+0x2c/0x110 [ 1773.791280] ? create_io_thread+0xf0/0xf0 [ 1773.792113] ? ksys_write+0x12d/0x260 [ 1773.792894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.793873] __do_sys_fork+0x8a/0xc0 [ 1773.794635] ? kernel_thread+0xf0/0xf0 [ 1773.795439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.796490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.797505] ? trace_hardirqs_on+0x5b/0x180 [ 1773.798375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.799407] do_syscall_64+0x33/0x40 [ 1773.800151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.801159] RIP: 0033:0x7febfa601b19 [ 1773.801896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.805536] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1773.807045] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1773.808450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1773.809858] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.811280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.812682] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1773.814142] CPU: 0 PID: 22249 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1773.815851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.817606] Call Trace: [ 1773.818156] FAULT_INJECTION: forcing a failure. [ 1773.818156] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.820487] dump_stack+0x107/0x167 [ 1773.821261] should_fail.cold+0x5/0xa [ 1773.822069] ? xas_alloc+0x336/0x440 [ 1773.822860] should_failslab+0x5/0x20 [ 1773.823664] kmem_cache_alloc+0x5b/0x310 [ 1773.824528] xas_alloc+0x336/0x440 [ 1773.825282] xas_create+0x34a/0x10d0 [ 1773.826084] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1773.827230] xas_store+0x8c/0x1c40 [ 1773.828001] __xa_store+0x164/0x2d0 [ 1773.828776] ? xa_delete_node+0x280/0x280 [ 1773.829665] ? trace_hardirqs_on+0x5b/0x180 [ 1773.830606] xa_store+0x31/0x50 [ 1773.831309] __io_uring_add_tctx_node+0x1cf/0x520 [ 1773.832341] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1773.833442] ? alloc_fd+0x2e7/0x670 [ 1773.834234] io_uring_setup+0x1fbb/0x2980 [ 1773.835119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1773.836199] ? wait_for_completion_io+0x270/0x270 [ 1773.837248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.838365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.839516] do_syscall_64+0x33/0x40 [ 1773.840330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.841466] RIP: 0033:0x7feb2b3bab19 [ 1773.842273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.846151] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1773.847769] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1773.849274] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1773.850788] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1773.852286] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1773.853779] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1773.855321] CPU: 1 PID: 22248 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1773.856700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.858312] Call Trace: [ 1773.858820] dump_stack+0x107/0x167 [ 1773.859525] should_fail.cold+0x5/0xa [ 1773.860265] ? dup_fd+0x89/0xe40 [ 1773.860911] should_failslab+0x5/0x20 [ 1773.861644] kmem_cache_alloc+0x5b/0x310 [ 1773.862440] dup_fd+0x89/0xe40 [ 1773.863055] ? audit_filter_inodes+0x40/0x40 [ 1773.863907] ? security_task_alloc+0xe6/0x260 [ 1773.864770] copy_process+0x197c/0x78b0 [ 1773.865544] ? __lock_acquire+0xbb1/0x5b00 [ 1773.866398] ? __cleanup_sighand+0xb0/0xb0 [ 1773.867210] ? perf_trace_lock+0xac/0x490 [ 1773.868016] ? __lockdep_reset_lock+0x180/0x180 [ 1773.868919] ? find_held_lock+0x2c/0x110 [ 1773.869700] kernel_clone+0xe7/0x980 [ 1773.870427] ? lock_downgrade+0x6d0/0x6d0 [ 1773.871220] ? find_held_lock+0x2c/0x110 [ 1773.871999] ? create_io_thread+0xf0/0xf0 [ 1773.872794] ? ksys_write+0x12d/0x260 [ 1773.873535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.874475] __do_sys_fork+0x8a/0xc0 [ 1773.875192] ? kernel_thread+0xf0/0xf0 [ 1773.875960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.876969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.877954] ? trace_hardirqs_on+0x5b/0x180 [ 1773.878800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.879785] do_syscall_64+0x33/0x40 [ 1773.880500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.881481] RIP: 0033:0x7f5b9eb75b19 [ 1773.882191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.885704] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1773.887161] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1773.888509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1773.889859] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.891223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.892598] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1773.912476] FAULT_INJECTION: forcing a failure. [ 1773.912476] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.915727] CPU: 0 PID: 22259 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1773.917201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.918952] Call Trace: [ 1773.919519] dump_stack+0x107/0x167 [ 1773.920294] should_fail.cold+0x5/0xa [ 1773.921109] ? alloc_fdtable+0x9e/0x2c0 [ 1773.921952] should_failslab+0x5/0x20 [ 1773.922775] kmem_cache_alloc_trace+0x55/0x320 [ 1773.923740] ? rwlock_bug.part.0+0x90/0x90 [ 1773.924641] alloc_fdtable+0x9e/0x2c0 [ 1773.925453] dup_fd+0x92d/0xe40 [ 1773.926170] copy_process+0x197c/0x78b0 [ 1773.927031] ? __lock_acquire+0xbb1/0x5b00 [ 1773.927952] ? __cleanup_sighand+0xb0/0xb0 [ 1773.928844] ? perf_trace_lock+0xac/0x490 [ 1773.929732] ? __lockdep_reset_lock+0x180/0x180 [ 1773.930737] ? find_held_lock+0x2c/0x110 [ 1773.931607] kernel_clone+0xe7/0x980 [ 1773.932405] ? lock_downgrade+0x6d0/0x6d0 [ 1773.933286] ? find_held_lock+0x2c/0x110 [ 1773.934140] ? create_io_thread+0xf0/0xf0 [ 1773.935031] ? ksys_write+0x12d/0x260 [ 1773.935885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.936948] __do_sys_fork+0x8a/0xc0 [ 1773.937761] ? kernel_thread+0xf0/0xf0 [ 1773.938618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.939736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.940824] ? trace_hardirqs_on+0x5b/0x180 [ 1773.941737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.942834] do_syscall_64+0x33/0x40 [ 1773.943626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.944722] RIP: 0033:0x7ff788849b19 [ 1773.945512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.949412] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1773.951021] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1773.952532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1773.954029] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.955536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.957046] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1773.967440] FAULT_INJECTION: forcing a failure. [ 1773.967440] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.970348] CPU: 0 PID: 22263 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1773.971829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.973574] Call Trace: [ 1773.974136] dump_stack+0x107/0x167 [ 1773.974923] should_fail.cold+0x5/0xa [ 1773.975736] ? getname_flags.part.0+0x50/0x4f0 [ 1773.976702] should_failslab+0x5/0x20 [ 1773.977509] kmem_cache_alloc+0x5b/0x310 [ 1773.978377] ? lock_downgrade+0x6d0/0x6d0 [ 1773.979265] getname_flags.part.0+0x50/0x4f0 [ 1773.980201] getname+0x8e/0xd0 [ 1773.980885] __io_openat_prep+0x228/0x4c0 [ 1773.981767] io_submit_sqes+0x2602/0x8780 [ 1773.982700] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1773.983960] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1773.985283] ? find_held_lock+0x2c/0x110 [ 1773.986430] ? io_submit_sqes+0x8780/0x8780 [ 1773.987622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.988934] ? wait_for_completion_io+0x270/0x270 [ 1773.990273] ? rcu_read_lock_any_held+0x75/0xa0 [ 1773.991318] ? vfs_write+0x354/0xb10 [ 1773.992158] ? fput_many+0x2f/0x1a0 [ 1773.993099] ? ksys_write+0x1a9/0x260 [ 1773.993957] ? __ia32_sys_read+0xb0/0xb0 [ 1773.994886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.996009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.997113] do_syscall_64+0x33/0x40 [ 1773.997908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.999003] RIP: 0033:0x7f8917489b19 [ 1773.999792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.003705] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1774.005310] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1774.006822] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1774.008322] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.009820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.011336] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:07:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 77) [ 1774.121110] FAULT_INJECTION: forcing a failure. [ 1774.121110] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.123057] CPU: 1 PID: 22463 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1774.124202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.125556] Call Trace: [ 1774.125997] dump_stack+0x107/0x167 [ 1774.126611] should_fail.cold+0x5/0xa [ 1774.127238] ? xas_alloc+0x336/0x440 [ 1774.127841] should_failslab+0x5/0x20 [ 1774.128461] kmem_cache_alloc+0x5b/0x310 [ 1774.129133] xas_alloc+0x336/0x440 [ 1774.129722] xas_create+0x34a/0x10d0 [ 1774.130349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.131211] xas_store+0x8c/0x1c40 [ 1774.131819] __xa_store+0x164/0x2d0 [ 1774.132421] ? xa_delete_node+0x280/0x280 [ 1774.133100] ? trace_hardirqs_on+0x5b/0x180 [ 1774.133815] xa_store+0x31/0x50 [ 1774.134372] __io_uring_add_tctx_node+0x1cf/0x520 [ 1774.135162] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1774.136008] ? alloc_fd+0x2e7/0x670 [ 1774.136617] io_uring_setup+0x1fbb/0x2980 [ 1774.137301] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1774.138129] ? wait_for_completion_io+0x270/0x270 02:07:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d315) r1 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x890c, &(0x7f0000000080)={@local, 0x78, r2}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58bc0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000009a180000000500060001000000340001801400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f736530000000000000000000000008000700ff0f00"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0xff, 0x3800000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x20, 0x63df4dfb, 0x8a6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0xd9, 0xf8, 0x1, 0x2c, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7800, 0x401, 0x3}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) r8 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x890c, &(0x7f0000000080)={@local, 0x78, r9}) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58bc0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000009a180000000500060001000000340001801400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r9, @ANYBLOB="14000200726f736530000000000000000000000008000700ff0f00"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8005}, 0x8800) fork() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x3f, 0x6, 0x7, 0x0, 0x8001, 0x20, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x200, 0xb04, 0x8001, 0x1, 0xfffffffffffffffc, 0x1, 0x882, 0x0, 0x2, 0x0, 0x6f61}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) [ 1774.138954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.140016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.140888] do_syscall_64+0x33/0x40 [ 1774.141497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.142333] RIP: 0033:0x7feb2b3bab19 [ 1774.142943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.145930] RSP: 002b:00007feb28930108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1774.147179] RAX: ffffffffffffffda RBX: 00007feb2b4cdf60 RCX: 00007feb2b3bab19 [ 1774.148330] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 00000000000011d9 [ 1774.149482] RBP: 00000000200002c0 R08: 00000000200000c0 R09: 00000000200000c0 [ 1774.150641] R10: 0000000020000340 R11: 0000000000000202 R12: 00000000200000c0 [ 1774.151800] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:07:54 executing program 4: fork() (fail_nth: 76) [ 1774.197117] FAULT_INJECTION: forcing a failure. [ 1774.197117] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.198929] CPU: 1 PID: 22468 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1774.199987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.201263] Call Trace: [ 1774.201668] dump_stack+0x107/0x167 [ 1774.202235] should_fail.cold+0x5/0xa [ 1774.202831] ? create_object.isra.0+0x3a/0xa30 [ 1774.203528] should_failslab+0x5/0x20 [ 1774.204097] kmem_cache_alloc+0x5b/0x310 [ 1774.204718] create_object.isra.0+0x3a/0xa30 [ 1774.205367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.206155] kmem_cache_alloc+0x159/0x310 [ 1774.206796] vm_area_dup+0x78/0x290 02:07:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 13) 02:07:54 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1774.207347] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1774.208241] ? lock_downgrade+0x6d0/0x6d0 [ 1774.208861] ? copy_page_range+0x24e9/0x3800 [ 1774.209559] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1774.210268] ? avc_has_extended_perms+0xf40/0xf40 [ 1774.210995] ? vm_area_alloc+0x110/0x110 [ 1774.211606] ? selinux_vm_enough_memory+0x114/0x180 [ 1774.212362] ? selinux_sb_statfs+0x250/0x250 [ 1774.213028] ? percpu_counter_add_batch+0x8b/0x140 [ 1774.213761] ? __vm_enough_memory+0x184/0x360 [ 1774.214448] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1774.215218] copy_process+0x298b/0x78b0 [ 1774.215843] ? __cleanup_sighand+0xb0/0xb0 [ 1774.216464] ? perf_trace_lock+0xac/0x490 [ 1774.217093] ? find_held_lock+0x2c/0x110 [ 1774.217697] kernel_clone+0xe7/0x980 [ 1774.218253] ? lock_downgrade+0x6d0/0x6d0 [ 1774.218861] ? find_held_lock+0x2c/0x110 [ 1774.219462] ? create_io_thread+0xf0/0xf0 [ 1774.220074] ? ksys_write+0x12d/0x260 [ 1774.220645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.221368] __do_sys_fork+0x8a/0xc0 [ 1774.221915] ? kernel_thread+0xf0/0xf0 [ 1774.222514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.223283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.224039] ? trace_hardirqs_on+0x5b/0x180 [ 1774.224679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.225451] do_syscall_64+0x33/0x40 [ 1774.226000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.226763] RIP: 0033:0x7febfa601b19 [ 1774.227322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.230015] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1774.231136] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1774.232196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.233250] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.234302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.235355] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:07:54 executing program 7: fork() 02:07:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 11) [ 1774.384567] FAULT_INJECTION: forcing a failure. [ 1774.384567] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.386247] CPU: 1 PID: 22643 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1774.387240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.388353] Call Trace: [ 1774.388729] dump_stack+0x107/0x167 [ 1774.389218] should_fail.cold+0x5/0xa [ 1774.389726] ? create_object.isra.0+0x3a/0xa30 [ 1774.390342] should_failslab+0x5/0x20 [ 1774.390547] FAULT_INJECTION: forcing a failure. [ 1774.390547] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.390862] kmem_cache_alloc+0x5b/0x310 [ 1774.390880] create_object.isra.0+0x3a/0xa30 [ 1774.390892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.390909] kmem_cache_alloc+0x159/0x310 [ 1774.390927] dup_fd+0x89/0xe40 [ 1774.390939] ? audit_filter_inodes+0x40/0x40 [ 1774.390956] ? security_task_alloc+0xe6/0x260 [ 1774.390973] copy_process+0x197c/0x78b0 [ 1774.390992] ? __lock_acquire+0xbb1/0x5b00 [ 1774.391022] ? __cleanup_sighand+0xb0/0xb0 [ 1774.391033] ? perf_trace_lock+0xac/0x490 [ 1774.391051] ? __lockdep_reset_lock+0x180/0x180 [ 1774.391070] ? find_held_lock+0x2c/0x110 [ 1774.391087] kernel_clone+0xe7/0x980 [ 1774.391099] ? lock_downgrade+0x6d0/0x6d0 [ 1774.391110] ? find_held_lock+0x2c/0x110 [ 1774.391122] ? create_io_thread+0xf0/0xf0 [ 1774.391135] ? ksys_write+0x12d/0x260 [ 1774.391154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.391173] __do_sys_fork+0x8a/0xc0 [ 1774.391184] ? kernel_thread+0xf0/0xf0 [ 1774.391208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.391223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.391234] ? trace_hardirqs_on+0x5b/0x180 [ 1774.391249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.391262] do_syscall_64+0x33/0x40 [ 1774.391275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.391284] RIP: 0033:0x7f5b9eb75b19 02:07:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 12) [ 1774.391296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.391303] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1774.391317] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1774.391324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.391332] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.391339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.391347] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1774.443338] FAULT_INJECTION: forcing a failure. [ 1774.443338] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.445036] CPU: 0 PID: 22592 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1774.449043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.450774] Call Trace: [ 1774.451326] dump_stack+0x107/0x167 [ 1774.452109] should_fail.cold+0x5/0xa [ 1774.452907] ? create_object.isra.0+0x3a/0xa30 [ 1774.453861] should_failslab+0x5/0x20 [ 1774.454665] kmem_cache_alloc+0x5b/0x310 [ 1774.455516] create_object.isra.0+0x3a/0xa30 [ 1774.456427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.457488] kmem_cache_alloc_trace+0x151/0x320 [ 1774.458464] ? rwlock_bug.part.0+0x90/0x90 [ 1774.459354] alloc_fdtable+0x9e/0x2c0 [ 1774.460151] dup_fd+0x92d/0xe40 [ 1774.460860] copy_process+0x197c/0x78b0 [ 1774.461694] ? visit_groups_merge.constprop.0.isra.0+0x771/0xae0 [ 1774.462972] ? __lock_acquire+0x1657/0x5b00 [ 1774.463895] ? __cleanup_sighand+0xb0/0xb0 [ 1774.464776] ? __lockdep_reset_lock+0x180/0x180 [ 1774.465745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.466833] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1774.467937] ? trace_hardirqs_on+0x5b/0x180 [ 1774.468838] kernel_clone+0xe7/0x980 [ 1774.469612] ? create_io_thread+0xf0/0xf0 [ 1774.470471] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1774.471389] ? _raw_spin_unlock_irq+0x27/0x30 [ 1774.472313] ? finish_task_switch+0x126/0x5d0 [ 1774.473229] ? finish_task_switch+0xef/0x5d0 [ 1774.474130] ? __switch_to+0x572/0xf70 [ 1774.474939] ? __switch_to_asm+0x3a/0x60 [ 1774.475765] ? __switch_to_asm+0x34/0x60 [ 1774.476602] ? __schedule+0x82c/0x1ea0 [ 1774.477406] __do_sys_fork+0x8a/0xc0 [ 1774.478169] ? kernel_thread+0xf0/0xf0 [ 1774.478973] ? io_schedule_timeout+0x140/0x140 [ 1774.479918] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1774.480882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.481964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.483028] ? trace_hardirqs_on+0x5b/0x180 [ 1774.483918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.484977] do_syscall_64+0x33/0x40 [ 1774.485744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.486812] RIP: 0033:0x7ff788849b19 [ 1774.487578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.491390] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1774.492960] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1774.494438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.495906] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.497377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.498855] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1774.500350] CPU: 1 PID: 22648 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1774.501214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.502288] Call Trace: [ 1774.502627] dump_stack+0x107/0x167 [ 1774.503074] should_fail.cold+0x5/0xa [ 1774.503544] ? alloc_fdtable+0x9e/0x2c0 [ 1774.504028] should_failslab+0x5/0x20 [ 1774.504543] kmem_cache_alloc_trace+0x55/0x320 [ 1774.505191] ? rwlock_bug.part.0+0x90/0x90 [ 1774.505733] alloc_fdtable+0x9e/0x2c0 [ 1774.506272] dup_fd+0x92d/0xe40 [ 1774.506689] copy_process+0x197c/0x78b0 [ 1774.507181] ? __lock_acquire+0xbb1/0x5b00 [ 1774.507716] ? __cleanup_sighand+0xb0/0xb0 [ 1774.508361] ? perf_trace_lock+0xac/0x490 [ 1774.508905] ? __lockdep_reset_lock+0x180/0x180 [ 1774.509479] ? find_held_lock+0x2c/0x110 [ 1774.509976] kernel_clone+0xe7/0x980 [ 1774.510439] ? lock_downgrade+0x6d0/0x6d0 [ 1774.510936] ? find_held_lock+0x2c/0x110 [ 1774.511428] ? create_io_thread+0xf0/0xf0 [ 1774.511932] ? ksys_write+0x12d/0x260 [ 1774.512395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.513079] __do_sys_fork+0x8a/0xc0 [ 1774.513617] ? kernel_thread+0xf0/0xf0 [ 1774.514099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.514743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.515366] ? trace_hardirqs_on+0x5b/0x180 [ 1774.515892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.516516] do_syscall_64+0x33/0x40 [ 1774.516966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.517589] RIP: 0033:0x7f5b9eb75b19 [ 1774.518047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.520268] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1774.521183] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1774.522036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.522897] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.523761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.524622] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1774.540106] FAULT_INJECTION: forcing a failure. [ 1774.540106] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.541458] CPU: 1 PID: 22601 Comm: syz-executor.3 Not tainted 5.10.262 #1 [ 1774.542289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.543276] Call Trace: [ 1774.543593] dump_stack+0x107/0x167 [ 1774.544028] should_fail.cold+0x5/0xa [ 1774.544497] ? create_object.isra.0+0x3a/0xa30 [ 1774.545048] should_failslab+0x5/0x20 [ 1774.545519] kmem_cache_alloc+0x5b/0x310 [ 1774.546006] create_object.isra.0+0x3a/0xa30 [ 1774.546541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.547151] kmem_cache_alloc+0x159/0x310 [ 1774.547646] ? lock_downgrade+0x6d0/0x6d0 [ 1774.548144] getname_flags.part.0+0x50/0x4f0 [ 1774.548671] getname+0x8e/0xd0 [ 1774.549059] __io_openat_prep+0x228/0x4c0 [ 1774.549556] io_submit_sqes+0x2602/0x8780 [ 1774.550070] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1774.550676] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1774.551249] ? find_held_lock+0x2c/0x110 [ 1774.551741] ? io_submit_sqes+0x8780/0x8780 [ 1774.552253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.552830] ? wait_for_completion_io+0x270/0x270 [ 1774.553403] ? rcu_read_lock_any_held+0x75/0xa0 [ 1774.553949] ? vfs_write+0x354/0xb10 [ 1774.554407] ? fput_many+0x2f/0x1a0 [ 1774.554839] ? ksys_write+0x1a9/0x260 [ 1774.555294] ? __ia32_sys_read+0xb0/0xb0 [ 1774.555778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.556394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.557009] do_syscall_64+0x33/0x40 [ 1774.557458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.558064] RIP: 0033:0x7f8917489b19 [ 1774.558513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.560679] RSP: 002b:00007f89149ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1774.561578] RAX: ffffffffffffffda RBX: 00007f891759cf60 RCX: 00007f8917489b19 [ 1774.562424] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1774.563258] RBP: 00007f89149ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.564095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.564926] R13: 00007ffcf7c806ff R14: 00007f89149ff300 R15: 0000000000022000 02:07:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 78) 02:07:54 executing program 4: fork() (fail_nth: 77) [ 1774.595648] FAULT_INJECTION: forcing a failure. [ 1774.595648] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.597403] CPU: 1 PID: 22685 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1774.598204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.599171] Call Trace: [ 1774.599479] dump_stack+0x107/0x167 [ 1774.599902] should_fail.cold+0x5/0xa [ 1774.600341] ? vm_area_dup+0x78/0x290 [ 1774.600781] should_failslab+0x5/0x20 [ 1774.601218] kmem_cache_alloc+0x5b/0x310 [ 1774.601689] vm_area_dup+0x78/0x290 [ 1774.602110] ? lock_release+0x680/0x680 [ 1774.602583] ? mark_lock+0xf5/0x2df0 [ 1774.603018] ? lock_chain_count+0x20/0x20 [ 1774.603504] ? mark_lock+0xf5/0x2df0 [ 1774.603936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.604548] ? lock_chain_count+0x20/0x20 [ 1774.605030] ? mark_lock+0xf5/0x2df0 [ 1774.605474] ? vm_area_alloc+0x110/0x110 [ 1774.605949] ? __lock_acquire+0x1657/0x5b00 [ 1774.606473] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.607082] ? SOFTIRQ_verbose+0x10/0x10 [ 1774.607559] ? vmacache_find+0x55/0x2a0 [ 1774.608025] __split_vma+0xa8/0x4e0 [ 1774.608453] __do_munmap+0x365/0x1260 [ 1774.608904] ? arch_get_unmapped_area+0x450/0x450 [ 1774.609465] ? lock_release+0x680/0x680 [ 1774.609928] mmap_region+0x7cc/0x1500 [ 1774.610393] do_mmap+0x868/0x1370 [ 1774.610805] vm_mmap_pgoff+0x198/0x1f0 [ 1774.611260] ? randomize_page+0xb0/0xb0 [ 1774.611739] ksys_mmap_pgoff+0x41c/0x560 [ 1774.612213] ? find_mergeable_anon_vma+0x250/0x250 [ 1774.612785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.613387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.613993] do_syscall_64+0x33/0x40 [ 1774.614438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.615029] RIP: 0033:0x7feb2b3bab62 [ 1774.615466] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1774.617600] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1774.618482] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1774.619302] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1774.620119] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1774.620942] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1774.621761] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:07:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:07:54 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 79) [ 1774.670901] FAULT_INJECTION: forcing a failure. [ 1774.670901] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.672246] CPU: 1 PID: 22689 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1774.673044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.673995] Call Trace: [ 1774.674312] dump_stack+0x107/0x167 [ 1774.674736] should_fail.cold+0x5/0xa [ 1774.675176] ? create_object.isra.0+0x3a/0xa30 [ 1774.675701] should_failslab+0x5/0x20 [ 1774.676140] kmem_cache_alloc+0x5b/0x310 [ 1774.676615] create_object.isra.0+0x3a/0xa30 [ 1774.677119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.677721] kmem_cache_alloc+0x159/0x310 [ 1774.678207] vm_area_dup+0x78/0x290 [ 1774.678645] ? lock_release+0x680/0x680 [ 1774.679105] ? mark_lock+0xf5/0x2df0 [ 1774.679547] ? lock_chain_count+0x20/0x20 [ 1774.680027] ? mark_lock+0xf5/0x2df0 [ 1774.680467] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.681082] ? lock_chain_count+0x20/0x20 [ 1774.681562] ? mark_lock+0xf5/0x2df0 [ 1774.681996] ? vm_area_alloc+0x110/0x110 [ 1774.682484] ? __lock_acquire+0x1657/0x5b00 [ 1774.683003] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.683613] ? SOFTIRQ_verbose+0x10/0x10 [ 1774.684087] ? vmacache_find+0x55/0x2a0 [ 1774.684554] __split_vma+0xa8/0x4e0 [ 1774.684980] __do_munmap+0x365/0x1260 [ 1774.685431] ? arch_get_unmapped_area+0x450/0x450 [ 1774.685992] ? lock_release+0x680/0x680 [ 1774.686466] mmap_region+0x7cc/0x1500 [ 1774.686916] do_mmap+0x868/0x1370 [ 1774.687330] vm_mmap_pgoff+0x198/0x1f0 [ 1774.687789] ? randomize_page+0xb0/0xb0 [ 1774.688263] ksys_mmap_pgoff+0x41c/0x560 [ 1774.688739] ? find_mergeable_anon_vma+0x250/0x250 [ 1774.689311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.689919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.690537] do_syscall_64+0x33/0x40 [ 1774.690968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.691566] RIP: 0033:0x7feb2b3bab62 [ 1774.691997] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1774.694126] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1774.695010] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1774.695842] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1774.696670] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1774.697504] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1774.698342] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1774.703911] FAULT_INJECTION: forcing a failure. [ 1774.703911] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.705249] CPU: 1 PID: 22693 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1774.706057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.707035] Call Trace: [ 1774.707345] dump_stack+0x107/0x167 [ 1774.707777] should_fail.cold+0x5/0xa [ 1774.708223] ? create_object.isra.0+0x3a/0xa30 [ 1774.708755] should_failslab+0x5/0x20 [ 1774.709201] kmem_cache_alloc+0x5b/0x310 [ 1774.709688] create_object.isra.0+0x3a/0xa30 [ 1774.710201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.710805] kmem_cache_alloc+0x159/0x310 [ 1774.711294] vm_area_dup+0x78/0x290 [ 1774.711726] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1774.712275] ? lock_downgrade+0x6d0/0x6d0 [ 1774.712764] ? copy_page_range+0x24e9/0x3800 [ 1774.713291] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1774.713838] ? avc_has_extended_perms+0xf40/0xf40 [ 1774.714423] ? vm_area_alloc+0x110/0x110 [ 1774.714905] ? selinux_vm_enough_memory+0x114/0x180 [ 1774.715486] ? selinux_sb_statfs+0x250/0x250 [ 1774.716007] ? percpu_counter_add_batch+0x8b/0x140 [ 1774.716588] ? __vm_enough_memory+0x184/0x360 [ 1774.717112] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1774.717719] copy_process+0x298b/0x78b0 [ 1774.718200] ? __cleanup_sighand+0xb0/0xb0 [ 1774.718704] ? perf_trace_lock+0xac/0x490 [ 1774.719202] ? find_held_lock+0x2c/0x110 [ 1774.719678] kernel_clone+0xe7/0x980 [ 1774.720111] ? lock_downgrade+0x6d0/0x6d0 [ 1774.720595] ? find_held_lock+0x2c/0x110 [ 1774.721065] ? create_io_thread+0xf0/0xf0 [ 1774.721550] ? ksys_write+0x12d/0x260 [ 1774.721996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.722568] __do_sys_fork+0x8a/0xc0 [ 1774.723002] ? kernel_thread+0xf0/0xf0 [ 1774.723471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.724082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.724686] ? trace_hardirqs_on+0x5b/0x180 [ 1774.725190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.725793] do_syscall_64+0x33/0x40 [ 1774.726235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.726828] RIP: 0033:0x7febfa601b19 [ 1774.727261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.729408] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1774.730305] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1774.731137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.731973] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.732805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.733634] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1792.721487] FAULT_INJECTION: forcing a failure. [ 1792.721487] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.723046] CPU: 0 PID: 22805 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1792.723866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.724848] Call Trace: [ 1792.725168] dump_stack+0x107/0x167 [ 1792.725607] should_fail.cold+0x5/0xa [ 1792.726061] ? create_object.isra.0+0x3a/0xa30 [ 1792.726607] should_failslab+0x5/0x20 [ 1792.727054] kmem_cache_alloc+0x5b/0x310 [ 1792.727539] create_object.isra.0+0x3a/0xa30 [ 1792.728058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1792.728651] kmem_cache_alloc+0x159/0x310 [ 1792.729150] anon_vma_clone+0xdc/0x590 [ 1792.729618] anon_vma_fork+0x82/0x640 [ 1792.730070] ? __vm_enough_memory+0x184/0x360 [ 1792.730613] copy_process+0x72cd/0x78b0 [ 1792.731098] ? __cleanup_sighand+0xb0/0xb0 [ 1792.731603] ? perf_trace_lock+0xac/0x490 [ 1792.732108] ? find_held_lock+0x2c/0x110 [ 1792.732591] kernel_clone+0xe7/0x980 [ 1792.733034] ? lock_downgrade+0x6d0/0x6d0 [ 1792.733523] ? find_held_lock+0x2c/0x110 [ 1792.733996] ? create_io_thread+0xf0/0xf0 [ 1792.734497] ? ksys_write+0x12d/0x260 [ 1792.734953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1792.735524] __do_sys_fork+0x8a/0xc0 [ 1792.735965] ? kernel_thread+0xf0/0xf0 [ 1792.736436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.737042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.737649] ? trace_hardirqs_on+0x5b/0x180 [ 1792.738156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.738765] do_syscall_64+0x33/0x40 [ 1792.739203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.739802] RIP: 0033:0x7febfa601b19 [ 1792.740231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1792.742393] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1792.743262] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1792.744096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.744927] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1792.745741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.746589] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:08:12 executing program 2: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)="904baa4689feb27f2d3fe623280c01932b3aa280fbc15b7e66e71340c2125f758c2e97f1e8d3d8658e936b2fc5a2d6c715917fc0e7a0e285ce12d752866a8f3f9d0eaa2e24a876d1f48dd7f2a90000f46e83f4a38fcbf716471a591fa70f29e769913af3ba4caa33b403f6bb5f41480634cb1616c1d31f587482826ee3cd058a9bca9bf713c007e166f300093cf546ecf64426a2ff1acc105b8e160a0216c3259335b2b1f8ff075232a713442f16ace1965b6a0caaa5d3cc59efa151fe9cbab4457c0800"/208, 0xd0) fork() 02:08:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:08:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 14) 02:08:12 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 80) 02:08:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 13) 02:08:12 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:08:12 executing program 4: fork() (fail_nth: 78) 02:08:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fork() socket$inet6_tcp(0xa, 0x1, 0x0) [ 1792.758483] FAULT_INJECTION: forcing a failure. [ 1792.758483] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.759946] CPU: 0 PID: 22809 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1792.760747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.761699] Call Trace: [ 1792.762005] dump_stack+0x107/0x167 [ 1792.762436] should_fail.cold+0x5/0xa [ 1792.762881] ? create_object.isra.0+0x3a/0xa30 [ 1792.763417] should_failslab+0x5/0x20 [ 1792.763866] kmem_cache_alloc+0x5b/0x310 [ 1792.764343] create_object.isra.0+0x3a/0xa30 [ 1792.764862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1792.765443] kmem_cache_alloc_trace+0x151/0x320 [ 1792.765977] ? rwlock_bug.part.0+0x90/0x90 [ 1792.766482] alloc_fdtable+0x9e/0x2c0 [ 1792.766936] dup_fd+0x92d/0xe40 [ 1792.767322] copy_process+0x197c/0x78b0 [ 1792.767793] ? __lock_acquire+0xbb1/0x5b00 [ 1792.768293] ? __cleanup_sighand+0xb0/0xb0 [ 1792.768785] ? perf_trace_lock+0xac/0x490 [ 1792.769268] ? __lockdep_reset_lock+0x180/0x180 [ 1792.769824] ? find_held_lock+0x2c/0x110 [ 1792.770304] kernel_clone+0xe7/0x980 [ 1792.770577] FAULT_INJECTION: forcing a failure. [ 1792.770577] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.770730] ? lock_downgrade+0x6d0/0x6d0 [ 1792.770740] ? find_held_lock+0x2c/0x110 [ 1792.770751] ? create_io_thread+0xf0/0xf0 [ 1792.770762] ? ksys_write+0x12d/0x260 [ 1792.770778] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1792.770798] __do_sys_fork+0x8a/0xc0 [ 1792.776105] ? kernel_thread+0xf0/0xf0 [ 1792.776555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.777164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.777749] ? trace_hardirqs_on+0x5b/0x180 [ 1792.778237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.778823] do_syscall_64+0x33/0x40 [ 1792.779246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.779822] RIP: 0033:0x7f5b9eb75b19 [ 1792.780242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1792.782321] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1792.783175] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1792.783973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.784768] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1792.785563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.786371] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1792.787195] CPU: 1 PID: 22815 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1792.788794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.790707] Call Trace: [ 1792.791332] dump_stack+0x107/0x167 [ 1792.792175] should_fail.cold+0x5/0xa [ 1792.793074] ? vm_area_dup+0x78/0x290 [ 1792.793943] should_failslab+0x5/0x20 [ 1792.794458] FAULT_INJECTION: forcing a failure. [ 1792.794458] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.794834] kmem_cache_alloc+0x5b/0x310 [ 1792.794864] vm_area_dup+0x78/0x290 [ 1792.794888] ? lock_release+0x680/0x680 [ 1792.794915] ? mark_lock+0xf5/0x2df0 [ 1792.794945] ? lock_chain_count+0x20/0x20 [ 1792.794967] ? mark_lock+0xf5/0x2df0 [ 1792.794995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1792.795017] ? lock_chain_count+0x20/0x20 [ 1792.795045] ? mark_lock+0xf5/0x2df0 [ 1792.795069] ? vm_area_alloc+0x110/0x110 [ 1792.795100] ? __lock_acquire+0x1657/0x5b00 [ 1792.806428] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1792.807631] ? SOFTIRQ_verbose+0x10/0x10 [ 1792.808600] ? vmacache_find+0x55/0x2a0 [ 1792.809513] __split_vma+0xa8/0x4e0 [ 1792.810364] __do_munmap+0x365/0x1260 [ 1792.811242] ? arch_get_unmapped_area+0x450/0x450 [ 1792.812355] ? lock_release+0x680/0x680 [ 1792.813274] mmap_region+0x7cc/0x1500 [ 1792.814196] do_mmap+0x868/0x1370 [ 1792.815023] vm_mmap_pgoff+0x198/0x1f0 [ 1792.815946] ? randomize_page+0xb0/0xb0 [ 1792.816877] ksys_mmap_pgoff+0x41c/0x560 [ 1792.817821] ? find_mergeable_anon_vma+0x250/0x250 [ 1792.818968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.820186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.821410] do_syscall_64+0x33/0x40 [ 1792.822276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.823494] RIP: 0033:0x7feb2b3bab62 [ 1792.824352] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1792.828633] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1792.830388] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1792.832047] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1792.833682] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1792.835342] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1792.836974] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1792.838658] CPU: 0 PID: 22814 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1792.839442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.840372] Call Trace: [ 1792.840671] dump_stack+0x107/0x167 [ 1792.841079] should_fail.cold+0x5/0xa [ 1792.841505] ? kvmalloc_node+0x119/0x170 [ 1792.841966] should_failslab+0x5/0x20 [ 1792.842402] __kmalloc_node+0x76/0x420 [ 1792.842850] kvmalloc_node+0x119/0x170 [ 1792.843289] alloc_fdtable+0xed/0x2c0 [ 1792.843725] dup_fd+0x92d/0xe40 [ 1792.844102] copy_process+0x197c/0x78b0 [ 1792.844551] ? __lock_acquire+0xbb1/0x5b00 [ 1792.845037] ? __cleanup_sighand+0xb0/0xb0 [ 1792.845508] ? perf_trace_lock+0xac/0x490 [ 1792.845986] ? __lockdep_reset_lock+0x180/0x180 [ 1792.846521] ? find_held_lock+0x2c/0x110 [ 1792.846979] kernel_clone+0xe7/0x980 [ 1792.847405] ? lock_downgrade+0x6d0/0x6d0 [ 1792.847866] ? find_held_lock+0x2c/0x110 [ 1792.848320] ? create_io_thread+0xf0/0xf0 [ 1792.848792] ? ksys_write+0x12d/0x260 [ 1792.849222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1792.849780] __do_sys_fork+0x8a/0xc0 [ 1792.850197] ? kernel_thread+0xf0/0xf0 [ 1792.850656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.851241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.851827] ? trace_hardirqs_on+0x5b/0x180 [ 1792.852311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.852905] do_syscall_64+0x33/0x40 [ 1792.853322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.853914] RIP: 0033:0x7ff788849b19 [ 1792.854339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1792.856444] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1792.857294] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1792.858085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.858886] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1792.859678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.860473] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:08:31 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 81) 02:08:31 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1811.747514] FAULT_INJECTION: forcing a failure. [ 1811.747514] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.749079] CPU: 0 PID: 23037 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1811.749156] FAULT_INJECTION: forcing a failure. [ 1811.749156] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.749871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.749876] Call Trace: [ 1811.749895] dump_stack+0x107/0x167 [ 1811.749913] should_fail.cold+0x5/0xa [ 1811.749936] ? kvmalloc_node+0x119/0x170 [ 1811.755343] should_failslab+0x5/0x20 [ 1811.755775] __kmalloc_node+0x76/0x420 [ 1811.756223] kvmalloc_node+0x119/0x170 [ 1811.756671] alloc_fdtable+0xed/0x2c0 [ 1811.757108] dup_fd+0x92d/0xe40 [ 1811.757498] copy_process+0x197c/0x78b0 [ 1811.757962] ? __lock_acquire+0xbb1/0x5b00 [ 1811.758466] ? __cleanup_sighand+0xb0/0xb0 [ 1811.758948] ? perf_trace_lock+0xac/0x490 [ 1811.759427] ? __lockdep_reset_lock+0x180/0x180 [ 1811.759962] ? find_held_lock+0x2c/0x110 [ 1811.760427] kernel_clone+0xe7/0x980 [ 1811.760853] ? lock_downgrade+0x6d0/0x6d0 [ 1811.761325] ? find_held_lock+0x2c/0x110 [ 1811.761791] ? create_io_thread+0xf0/0xf0 [ 1811.762263] ? ksys_write+0x12d/0x260 [ 1811.762715] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1811.763269] __do_sys_fork+0x8a/0xc0 [ 1811.763695] ? kernel_thread+0xf0/0xf0 [ 1811.764146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.764748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.765331] ? trace_hardirqs_on+0x5b/0x180 [ 1811.765826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.766421] do_syscall_64+0x33/0x40 [ 1811.766848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.767428] RIP: 0033:0x7f5b9eb75b19 [ 1811.767852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.769939] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1811.770819] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1811.771625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.772435] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.773247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.774057] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1811.774916] CPU: 1 PID: 23034 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1811.776745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.778911] Call Trace: [ 1811.779605] dump_stack+0x107/0x167 [ 1811.780561] should_fail.cold+0x5/0xa [ 1811.781557] ? anon_vma_fork+0xf1/0x640 [ 1811.782615] should_failslab+0x5/0x20 [ 1811.783609] kmem_cache_alloc+0x5b/0x310 [ 1811.784682] anon_vma_fork+0xf1/0x640 [ 1811.785676] ? __vm_enough_memory+0x184/0x360 [ 1811.786866] copy_process+0x72cd/0x78b0 [ 1811.787866] ? __cleanup_sighand+0xb0/0xb0 [ 1811.788778] ? perf_trace_lock+0xac/0x490 [ 1811.789697] ? find_held_lock+0x2c/0x110 [ 1811.790590] kernel_clone+0xe7/0x980 [ 1811.791395] ? lock_downgrade+0x6d0/0x6d0 [ 1811.792290] ? find_held_lock+0x2c/0x110 [ 1811.793163] ? create_io_thread+0xf0/0xf0 [ 1811.794059] ? ksys_write+0x12d/0x260 [ 1811.794899] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1811.795951] __do_sys_fork+0x8a/0xc0 [ 1811.796755] ? kernel_thread+0xf0/0xf0 [ 1811.797614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.798755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.799858] ? trace_hardirqs_on+0x5b/0x180 [ 1811.800791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.801900] do_syscall_64+0x33/0x40 [ 1811.802718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.803818] RIP: 0033:0x7febfa601b19 02:08:31 executing program 7: r0 = fork() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x9, 0xfffff801, 0x6, 0x4, 0x101, 0x7fff, 0x6}, 0x0) sendfile(r2, r1, 0x0, 0xc4e) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x81, 0x7, 0x9, 0x2, 0x0, 0x6, 0x1c10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x1080, 0x401, 0x9, 0x8, 0x84, 0x400, 0x3, 0x0, 0x8, 0x0, 0x2}, r0, 0x4, r1, 0x8) 02:08:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), 0xfffffffffffffffe) fork() r1 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@nl=@unspec, 0x0, 0x80800, 0x1}, 0x9) 02:08:31 executing program 4: fork() (fail_nth: 79) 02:08:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:08:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 15) 02:08:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 14) [ 1811.804625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.808949] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1811.810603] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1811.812111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.813650] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.815184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.816683] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1811.820593] FAULT_INJECTION: forcing a failure. [ 1811.820593] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.823913] CPU: 1 PID: 23086 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1811.826003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.828238] Call Trace: [ 1811.828934] dump_stack+0x107/0x167 [ 1811.829900] should_fail.cold+0x5/0xa [ 1811.830922] ? create_object.isra.0+0x3a/0xa30 [ 1811.832114] should_failslab+0x5/0x20 [ 1811.833125] kmem_cache_alloc+0x5b/0x310 [ 1811.834203] create_object.isra.0+0x3a/0xa30 [ 1811.835367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1811.836709] kmem_cache_alloc+0x159/0x310 [ 1811.837813] vm_area_dup+0x78/0x290 [ 1811.838623] ? lock_release+0x680/0x680 [ 1811.839690] ? mark_lock+0xf5/0x2df0 [ 1811.840678] ? lock_chain_count+0x20/0x20 [ 1811.841767] ? mark_lock+0xf5/0x2df0 [ 1811.842768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1811.844148] ? lock_chain_count+0x20/0x20 [ 1811.845239] ? mark_lock+0xf5/0x2df0 [ 1811.846223] ? vm_area_alloc+0x110/0x110 [ 1811.847313] ? __lock_acquire+0x1657/0x5b00 [ 1811.848282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1811.849640] ? SOFTIRQ_verbose+0x10/0x10 [ 1811.850728] ? vmacache_find+0x55/0x2a0 [ 1811.851767] __split_vma+0xa8/0x4e0 [ 1811.852738] __do_munmap+0x365/0x1260 [ 1811.853745] ? arch_get_unmapped_area+0x450/0x450 [ 1811.855034] ? lock_release+0x680/0x680 [ 1811.856089] mmap_region+0x7cc/0x1500 [ 1811.857112] do_mmap+0x868/0x1370 [ 1811.858038] vm_mmap_pgoff+0x198/0x1f0 [ 1811.858915] ? randomize_page+0xb0/0xb0 [ 1811.859987] ksys_mmap_pgoff+0x41c/0x560 [ 1811.861066] ? find_mergeable_anon_vma+0x250/0x250 [ 1811.862348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.863757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.865103] do_syscall_64+0x33/0x40 [ 1811.866088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.867448] RIP: 0033:0x7feb2b3bab62 02:08:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 15) [ 1811.868421] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1811.873398] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1811.875423] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1811.877298] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1811.879171] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1811.881039] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1811.882925] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:08:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c"], 0x1c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x490, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r2 = open(&(0x7f0000000180)='./file0\x00', 0x400001, 0x9c) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x15ac, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_EXPRESSIONS={0x1574, 0x4, 0x0, 0x1, [{0xc4, 0x1, 0x0, 0x1, [@connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}, @reject={{0xb}, @void}, @fwd={{0x8}, @void}, @fib={{0x8}, @void}, @fib={{0x8}, @void}, @match={{0xa}, @void}, @exthdr={{0xb}, @void}, @limit={{0xa}, @void}]}, {0xe4, 0x1, 0x0, 0x1, [@rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @exthdr={{0xb}, @void}, @cmp={{0x8}, @void}, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}, @bitwise={{0xc}, @void}, @exthdr={{0xb}, @void}, @dup_ipv6={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}, @redir={{0xa}, @void}, @payload={{0xc}, @void}]}, {0x70, 0x1, 0x0, 0x1, [@tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}, @numgen={{0xb}, @void}, @fib={{0x8}, @void}, @tunnel={{0xb}, @void}, @notrack={{0xc}, @void}, @synproxy={{0xd}, @void}]}, {0x12cc, 0x1, 0x0, 0x1, [@redir={{0xa}, @void}, @range={{0xa}, @val={0x1260, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1244, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "ef934d9f62416616d80c29362f152006ed68f685b72caef1dcb21baa8d65ab2bfafb96a7144cda435d01c1df0bfebdaf3fdf4984b6d24a92c75aa1ec8f16f4bd5486a033155ee7c543c8efe77bbb4ce875ab8b8aad2691c1e6cfcd835f0f340e3f3167f36a5654ecc1294a847ef1414bf36e57bc2d09fd98f9021436b6f3194639b3e86064823c30df42ebbbedde93f37f08167095d6e89212cbb3c0c2a1371acb65f07adb6aa0df278df016fef34d9c3bab538325bd585b23c98d4f2ea5bd0f3efb6e81b210696d17202d3516a94105b400dc54e7c2f7fbe7882375a8cee19ec4de180bdb72d02fccfd6e4bd8a995d2a67b92f8ddd3a2e1643a73f1abf859dac1afb4cb3887921847ab621c0c9d738ad33af7e2c873dddb49c686bc95f994ef30abd28e1f066cc8ce7acf501ff718de186be18111619fb6d63037df6997fabf028d13f53811a321d4fb7a1f0a869ee2fc725280f79b5d359cd6896084a0249377abaa745282cf5e2d81627fa7309f5c054c090165ba8168f924470960dd3c5cd0101fa57ea4c7cf5372dd2dc4cd9fcb87c1438b9dd8b19185c2bdb485655ef95b7e01de8182882af02e5317ab8aa7d00714896698972b6b2425754f19cf0715bc932f87e96109143a6c779c76fab85c37a9bf126e51343f65e28b67bc6cf8a04e529dd40ac74f1921f497f5952ff2548eb5c429097dacac4f049379fa87c3cc9cb5e026a3764e907bf3a29f0e0cfcd466ee0fc5b5b659a4b54365081a6a80d244495e151b691dd36709662222ba002af0682a54e71ac1f38b8921ed1fc16d22c8cd16db84bc88a18f71516be3cda3b20b356f0f7c196e19e73b46d38bbeac8d764a12b5c25eb13542c60db976a4a612fc6e3161a10173ac10482bf0e5535b9a579cf31e4d40fede6aba0452081d8c7b3b1994d677c8378e29f45f6d44b98af35128f458e9859df55a74aa3870d14dd3a5e708af0513446ffabeb2b327e098e7026f08f4bcec83ec946fa9f3405b1afa83134f5d90e7fa02164ea32d909040f1101f092394ab821382519e78454f5f78a865c233aaf35a61e5d5b55996cc49bdba7e2f9f93aa5dd339401b926c4823ff77f03806e4fcd271590943d145cc1c3bcfd56fc1d51f2370c5e2787cb15c6f34d3209d45d81365055c8b7e0ef00458c409097306c6b8498df1fad5fa97b494139d5bc5f4ae279eeddc0362fc643da76562c001a8960f32b5c44a585370ff4980c86e2cda28a039fbfbc882a2b20a94d6bdcffc50680dc94127e0984ae8fd327405391d057fedf7d50fa29a6eea03dd8f094e0fcde71be90c89a41469f3e29b8765a4a8ecf447ba3acbe4d52ed89465c47e4f5c5b31d47271f05d3d5ae3c73c9e340c716eaf3d557d11db7909d17cb7ea0ba3b9cd0158b64d75f47c67fa2f5bc8b353aba7fb453d07d63f0523dda349baf6aa4444b6331e4b9039ec60e33e9d51d244e5c737bf1682f8af8f3561745de092a7782267ee100dded1a6bacbfd2853e48fe7de13095e8953504934e8aafcbe8771f5a80d272c87f9f381133ee259e77acd337d83736499928573d0815b8030c87e82696bfcb719e17fa2710960120e537185b75ef0b3e7f82a5272bdf0d28ec9268348444674a00462eaa55db235853ee823e46b290154cb48cdb70c551ffb411c15a2c1088f8646610e7e3b8eb5e9c5785e8be65534d147d0779f28a07012d177596b4aa67cfc00d89d4bd37ea76232afb1fd5ca48082b91c4e23ae3e61943b282abeafae1cbf37152e81275df7f204a079309639e6e042d461c0218522adf0a7ab942c983a977c807876f52a77eea2ff594957faa2180942ec13407c269fc1da38a1b4bbacaaf1a2a2cf907b6ee1f4e104080961f0275b81fe364a0cef3973eeb27c89961ce0daf1c98f844722a52349a59f9b6788125cae4d18e087a01465a96dc627e1469ed9ad17e018a55af820018466653d6e11232550e73d259be2e4c2325ad6826179ca71a604cf2d25a5af676c5b5baa4bd02c8371daaab6773f8eb2eeea9db5b7f34ea042656ba069bd560711c4ca5ff66c89a85e72bce3f318a9c620f59b190bf81b9f24e79f71213880fd52810b83a178c4837b5056675564312f00190b25e6a76351663620e0b367ce582da9aba6832c61d284198504ed0041136d614b80457084563d55a3bc0c885199939fdce6d3067c52af510b5beff53efe5a8a1dc96b9276479cd0db7d1b5bac3249e7df0a38be866bac734c47667a84adaf0661c0ae661bd8e8f965a6d4a28c1e95adc2c79df220e015a733cd02194f678e5bd3b9b2184b480f31577dd972584a71a4853d633f4d69e278547685ec9f9824eb55764b4ce2c9df1ce466797f71cca14564340cb4c913a58eafcbebac17a40f7982883144c4ad97afbd039df10cc12f725d024e4978c271c3c0ecd1313bd9707dc18179d7eb2c1967d2cef146892e7e7fe54f0004226e12e1d771ffeb5f034696c87f24a6dbaf29d8038cec934d55136b420c7ab2f03109738c40dbf484e3fbeeb23b2dc98d7050bfa73bedb2799f9f54b780518d41fbf666f613cfde00ab04de4558e2d3de1a9e82cfb2bd21a5effbb62f9e4c24afc46a4a0e3c115683d6f0f895fcc970d3b5edd4d1433a6a1afede463f48a0f03b7d990a7f8754c54a38b3c146fd5f1a7398560bd2aabca418a9b0e65575d2bb5b375c50ae7e1d9a4c90ec265f32e855e2f03872f3c3587acea4a12e4c459ea6cde1ff2a28d49fec6d23482adb8115e7a693a32ad6d2700ef6bc44abe10b9a8df312c677375d17039b79885754a4a028f78fa38a681ae4f233bf40d6ba30939cfc3c13578d6db0d608bb89540246c8ca75c872e20efd17ae52cb5fa241135050294c8ad38f7bcb7b453c40b120fa00c95332967513f5fd32fb96a8c54ea8a7b771ebe20ca29a5396799a943a6dc2786c2d65e295d7174c4fdb532d0f61e7d1a7575a6af4e92416ee50a60807db1646b07616fb8b2bc2a4dfafb0809c9e18282b4258ce72d9bf447b7e88602ac684b9244778d23cc78b10a65eded88fa71903db6d22e96166c1a0faa37233ceb0c0084803f70737cdc9d9c9cc9578cb3097f06fc18f6484ba5a3ddd287eaa03eefbacb97fb6db64d0fd762c0b02d10bf2797435c7bc3ad6f8d8ebc075851717649324e5d503431df510d0704d0c1e0e94b8e4ee91da07f700ee07848b57ab954d057c7665db59f8bd06ed21a2aa01ed890efb92de1b5722adf9aa2e536145e22a725814fec0fc47d62c6cd83d74ae9db36f43788bc4f65661e427390b6c136947c87f93e38b53b4db94e1dcc5f71a79896ec79bda4047ba07d702ac5322e9f58f858dad5680326e81d6b8644464114b1456c837e17f8988cb06b628c3aa9f32d8cbe1b59b931776adc671be1b1ddd17aa1711fa1f3ddec9509669105162bc1ee88aede2f50ba4b91423e246e99f28636dfde5b70c6d421674de205ca0bd8d0dc7fa07c424ae6335c8f5c458db06c4e94b8fece73718c05aec24c2c064bec418085194e7ce1ec70d81b47d0369266b6c8c374f7f1d3253f29b13ab1c0039337d407d0ec7dfca4dfbbb5869d6282d85f8dbebac4a58650682cc5df35b45ebd4dd6e9ef5a22581452df41e08a1ea970d26edc5ff4c27c43833a5ee2f0852c5cb034254983b072f4e5f7146d65bf94c43ce9adb657cd0f6e3e0228b6aea984e4b1cc052393d644d2255b71e865578b2c42b08e0d6b6f9e053c1e94c51fea084153245141f1c6978f49c7ec939b2be6b70edda7f8253a17e9fba11015deb58af584bda22833f6001d3b6e19de545647e721e05ba32443c5fff8ede2a1233ecf2a6047ab3ad5bcd08f86dd818bed00c205a2c26f025491cf3203cf50d7043e13c308a6e04b334600a5588e6fdcb219f3d4e6b320c2c0109b8802ece21af21759df41c2d947f5276246a20bc74dd77b27905631431eccf56434f0856f9359155d23074f487a52c0133c9d67f4389ff5e17f6c757e2d4bd5e60583d06dfdf7e2601ae71ba12aad54f6ae12e44755e7d1470d460bb27422a160f274f4e78ca61b3a4e190d41651cb5829efa0e710ad0c949a3cd52abce41758bb6fd04f614cd9b6bd95ef9d60f4d477f6282aee56248f724f22c8a2898caae060cf5681a502451fd2d5b7b65a1365dff4327a4ef2de23e27229e2b9a2be5d7fa8bbda8de34a39684d7302a3926788c56fce8065978f5797fe3dba5a43ea8fdb5690c4748f41817bab5232f808a6c1dc3369ce0366cb8c61be53dba280ffd3713ed3a61e500e1c845b5b37f620ef210cae729452b16798c09e016219124b8cc0b93bdfffdcd07d354086cd5d1cf5117dba7918fd1a51119819bc7b03e06edc45c28eb6fb4204eebe222fff18ebcaa2dc266dd9f284e348a4926e3aa80a91c808a25d7d41ef925fb748ed14dec9ee22f5630be2a7b74ff38e399cbc7c8061aa305eabbcfedb6bf2f76977ab731f5e0a999de964ee58023670c3e483b49cac1c98b029ce191d5e77543e52651c3ac494da2ebf409c5801fb9162a06f921bd6e35cc2d55506b8dc76712e8eea34f2df22aaa1fe73f81438c2eb2c797ce27a4961691931b7cdb7952fdbad3083cf795f5407cff30e8dad4200edeb992db27a5b473f7ced7bd06152233cb9092efe25bf60d444f5b4430396729bf77960f128642c810c3d51bf65e5538b66a37b15c66e1994b92614f8bdaddd9d8f6dadbd836511049ef76e256e5e334dc9a42a80b714cee79a4a74b3c663a32b0c8e610b44edd45b5c553cfba1a559e699ae9bcf285d08ed72c319f11e6745d8bcab0245cb984565446b61dbdd49a4c6bfad904321ad63ddfa352b0087dac909ee30cf8e47ddbd6af2dbef44ced629381e359e955f71fc8779de6e43789a73e7299f0d8c5f65daa4017d0eb967bab4a073f37486e4e72f0d4c63bc65b3c57010ae03b9a6190a37dd1a714dd444edef7f801b16ddd74ec05792431f0df246087efe76d20c5c243fb5d72574b390f361d2c2a35087c5e03b3b72f73c6eae853496669cc3d0bc823e08901f83988d3cfec00ef91df359b12a9b4f8da2e84ebc7d51c921fdbe0056496f247d9aa4393f2888efc265b5634442456e6dfbd5f0fabff1a1a446aa7f8a860dbb4068c4c1e3e8ff87438481fb65fa83cdf1a7ee623a65f7e7fbc7ae1bb41dc12851c3f6c29b9c865f8a081e3bdc1500df5c687c2defe1be823ab171b2fef2256bb1316d047698eb39ed48bb58eab9e4d8cbcd7427167bbba659dea827277a9ee4f6205dd5d751bbd53e7ed67b825a3eb0e325c5095b49ee3c2f6ff4e88e178db9086198d1a6bdd9885977d90523a3d5c77e60a5d77b5db36303d0b28af3e67181605d3d6b699b47d063920dd1f1fe6e7417c2cdb58c85c47232366b5ea93dfe10c8fef54a24f6632550d1b6afde2de006031797d150282b398bdb973cba1b43cd065a5a7e7e982a824cf1771e555d1962320b48e63a2c14221d74e011ab84bf33ea3d5c27143679fbd0a26c6ae05ecb036f846c5b347edf78e735ade627e706c01fb10cd3b6c5cc9a62118e1c3448d6e83d4a80a39f392cf30c478b844ce1b4f74e81d6da603dab63acbb688681e68d70e065f7d1a8a2a57a9bf98ca82c45163915c66e1980fd146a412807062f14ec62fde83fc41bb00e66d784496fc1e79eaa12bf030fae21089bcd7391a24b6c12c3e408e9729bb0ab0a57e7beb6c38e95b0b6c22e7c00b37ce902992f24867a6050efa4d5d8de51c4e6ddf0f272ac95ffec83d12a876a2c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "4d9b5e0a353fd7e69b3b480defb772a43ac04ce6f7b76f58ebe25caa9c15bea05eefa9e8efea860812a959f48dd896da8e5e10c33694630700c950088eee982112e466a46d5483e183c0cc2829ef58c2abd0c7925021f223"}, @NFTA_DATA_VALUE={0x53, 0x1, "aa573bf20c8ea1ced8a527dbb9a729e9fe1cf4f2a3b01307e10429a87f78e41031ef44bb23f13d3e25f4abdb60a110986ef5bf2685c1c7fb128eedf2f16ca3434d3f25909470d7c3f4520d5f0b86e9"}, @NFTA_DATA_VALUE={0x73, 0x1, "a767617d2bea45f7bc59d6c8abc0569e255e57704c7aad2999260264b46b74ccea46e31149db85d058692727dba1a96a1b6f92c365ff587895befedeb7fc0e63bc82c6b3faafd7e27533ad1702f3a6cc6e930ee4297fb63bcdccf933622a3e9acc7f4d01a49b27c10c8021edde03e3"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_DREG={0x8}]}}, @notrack={{0xc}, @void}, @queue={{0xa}, @void}, @queue={{0xa}, @void}]}, {0x68, 0x1, 0x0, 0x1, [@cmp={{0x8}, @void}, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}, @objref={{0xb}, @void}, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @dup_ipv4={{0x8}, @void}]}, {0x24, 0x1, 0x0, 0x1, [@lookup={{0xb}, @void}, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}]}]}]}, 0x15ac}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000040) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x453, 0x800, 0x70bd27, 0x25dfdbfc, "3f3bcc277fbde88066020ac8ae36ca623e094f13f71728c22e0602acf5a86bf22eb0700fc0496d77264bb68d708b4c6fa196cfcb8127d95a952c226a1d8f7d2d4e815289074af021fa27926add09019ec10d3126712ac2b4c2419c8e98271b", [""]}, 0x70}}, 0x80) fork() [ 1811.912621] FAULT_INJECTION: forcing a failure. [ 1811.912621] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.915252] CPU: 1 PID: 23146 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1811.916737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.918562] Call Trace: [ 1811.919140] dump_stack+0x107/0x167 [ 1811.919932] should_fail.cold+0x5/0xa [ 1811.920758] ? create_object.isra.0+0x3a/0xa30 [ 1811.921741] should_failslab+0x5/0x20 [ 1811.922568] kmem_cache_alloc+0x5b/0x310 [ 1811.923450] create_object.isra.0+0x3a/0xa30 [ 1811.924399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1811.925495] __kmalloc_node+0x1ae/0x420 [ 1811.926359] kvmalloc_node+0x119/0x170 [ 1811.927240] alloc_fdtable+0xed/0x2c0 [ 1811.928072] dup_fd+0x92d/0xe40 [ 1811.928802] copy_process+0x197c/0x78b0 [ 1811.929679] ? __lock_acquire+0xbb1/0x5b00 [ 1811.930600] FAULT_INJECTION: forcing a failure. [ 1811.930600] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.930625] ? __cleanup_sighand+0xb0/0xb0 [ 1811.932841] ? perf_trace_lock+0xac/0x490 [ 1811.933744] ? __lockdep_reset_lock+0x180/0x180 [ 1811.934775] ? find_held_lock+0x2c/0x110 [ 1811.935666] kernel_clone+0xe7/0x980 [ 1811.936484] ? lock_downgrade+0x6d0/0x6d0 [ 1811.937383] ? find_held_lock+0x2c/0x110 [ 1811.938265] ? create_io_thread+0xf0/0xf0 [ 1811.939178] ? ksys_write+0x12d/0x260 [ 1811.940017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1811.941078] __do_sys_fork+0x8a/0xc0 [ 1811.941888] ? kernel_thread+0xf0/0xf0 [ 1811.942762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.943916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.945048] ? trace_hardirqs_on+0x5b/0x180 [ 1811.946002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.947136] do_syscall_64+0x33/0x40 [ 1811.947953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.949071] RIP: 0033:0x7ff788849b19 [ 1811.949876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.953912] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1811.955562] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1811.957121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.958680] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.960216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.961753] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1811.963340] CPU: 0 PID: 23151 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1811.964206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1811.965149] Call Trace: [ 1811.965469] dump_stack+0x107/0x167 [ 1811.965886] should_fail.cold+0x5/0xa [ 1811.966322] ? create_object.isra.0+0x3a/0xa30 [ 1811.966848] should_failslab+0x5/0x20 [ 1811.967291] kmem_cache_alloc+0x5b/0x310 [ 1811.967755] create_object.isra.0+0x3a/0xa30 [ 1811.968251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1811.968826] __kmalloc_node+0x1ae/0x420 [ 1811.969281] kvmalloc_node+0x119/0x170 [ 1811.969732] alloc_fdtable+0xed/0x2c0 [ 1811.970178] dup_fd+0x92d/0xe40 [ 1811.970572] copy_process+0x197c/0x78b0 [ 1811.971026] ? __lock_acquire+0xbb1/0x5b00 [ 1811.971518] ? __cleanup_sighand+0xb0/0xb0 [ 1811.971995] ? perf_trace_lock+0xac/0x490 [ 1811.972476] ? __lockdep_reset_lock+0x180/0x180 [ 1811.973013] ? find_held_lock+0x2c/0x110 [ 1811.973474] kernel_clone+0xe7/0x980 [ 1811.973900] ? lock_downgrade+0x6d0/0x6d0 [ 1811.974365] ? find_held_lock+0x2c/0x110 [ 1811.974835] ? create_io_thread+0xf0/0xf0 [ 1811.975312] ? ksys_write+0x12d/0x260 [ 1811.975757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1811.976318] __do_sys_fork+0x8a/0xc0 [ 1811.976742] ? kernel_thread+0xf0/0xf0 [ 1811.977193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1811.977793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.978383] ? trace_hardirqs_on+0x5b/0x180 [ 1811.978882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1811.979467] do_syscall_64+0x33/0x40 [ 1811.979896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1811.980478] RIP: 0033:0x7f5b9eb75b19 [ 1811.980902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1811.982997] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1811.983866] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1811.984676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1811.985492] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1811.986300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.987121] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:08:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:08:32 executing program 4: fork() (fail_nth: 80) [ 1812.140944] FAULT_INJECTION: forcing a failure. [ 1812.140944] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.142526] CPU: 0 PID: 23461 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1812.143341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1812.144295] Call Trace: [ 1812.144605] dump_stack+0x107/0x167 [ 1812.145026] should_fail.cold+0x5/0xa [ 1812.145470] ? create_object.isra.0+0x3a/0xa30 [ 1812.145994] should_failslab+0x5/0x20 [ 1812.146442] kmem_cache_alloc+0x5b/0x310 [ 1812.146911] create_object.isra.0+0x3a/0xa30 [ 1812.147415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1812.148009] kmem_cache_alloc+0x159/0x310 [ 1812.148493] anon_vma_fork+0xf1/0x640 [ 1812.148932] ? __vm_enough_memory+0x184/0x360 [ 1812.149450] copy_process+0x72cd/0x78b0 [ 1812.149931] ? __cleanup_sighand+0xb0/0xb0 [ 1812.150431] ? perf_trace_lock+0xac/0x490 [ 1812.150919] ? find_held_lock+0x2c/0x110 [ 1812.151388] kernel_clone+0xe7/0x980 [ 1812.151819] ? lock_downgrade+0x6d0/0x6d0 [ 1812.152297] ? find_held_lock+0x2c/0x110 [ 1812.152763] ? create_io_thread+0xf0/0xf0 [ 1812.153244] ? ksys_write+0x12d/0x260 [ 1812.153694] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1812.154253] __do_sys_fork+0x8a/0xc0 [ 1812.154684] ? kernel_thread+0xf0/0xf0 [ 1812.155143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1812.155746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.156333] ? trace_hardirqs_on+0x5b/0x180 [ 1812.156838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.157432] do_syscall_64+0x33/0x40 [ 1812.157862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1812.158455] RIP: 0033:0x7febfa601b19 [ 1812.158880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1812.160992] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1812.161862] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1812.162684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1812.163500] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1812.164319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.165137] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:08:32 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x200000) fork() fork() getpid() 02:08:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:08:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 02:08:32 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0xc4e) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xc4e) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000040)=@lrpcs={0x1, 0x1, 0x5, 0x8b, 0x4}) fork() 02:08:32 executing program 4: fork() (fail_nth: 81) 02:08:32 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 82) 02:08:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 16) 02:08:32 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) 02:08:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 16) [ 1812.424392] FAULT_INJECTION: forcing a failure. [ 1812.424392] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.425941] CPU: 0 PID: 23704 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1812.426740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1812.427657] FAULT_INJECTION: forcing a failure. [ 1812.427657] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.427698] Call Trace: [ 1812.427737] dump_stack+0x107/0x167 [ 1812.430821] should_fail.cold+0x5/0xa [ 1812.431260] ? kvmalloc_node+0x119/0x170 [ 1812.431726] should_failslab+0x5/0x20 [ 1812.432163] __kmalloc_node+0x76/0x420 [ 1812.432610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1812.433193] kvmalloc_node+0x119/0x170 [ 1812.433648] alloc_fdtable+0x159/0x2c0 [ 1812.434096] dup_fd+0x92d/0xe40 [ 1812.434500] copy_process+0x197c/0x78b0 [ 1812.434971] ? __lock_acquire+0xbb1/0x5b00 [ 1812.435474] ? __cleanup_sighand+0xb0/0xb0 [ 1812.435958] ? perf_trace_lock+0xac/0x490 [ 1812.436446] ? __lockdep_reset_lock+0x180/0x180 [ 1812.436988] ? find_held_lock+0x2c/0x110 [ 1812.437456] kernel_clone+0xe7/0x980 [ 1812.437893] ? lock_downgrade+0x6d0/0x6d0 [ 1812.438368] ? find_held_lock+0x2c/0x110 [ 1812.438845] ? create_io_thread+0xf0/0xf0 [ 1812.439322] ? ksys_write+0x12d/0x260 [ 1812.439763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1812.440315] __do_sys_fork+0x8a/0xc0 [ 1812.440745] ? kernel_thread+0xf0/0xf0 [ 1812.441199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1812.441802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.442397] ? trace_hardirqs_on+0x5b/0x180 [ 1812.442893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.443483] do_syscall_64+0x33/0x40 [ 1812.443918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1812.444503] RIP: 0033:0x7f5b9eb75b19 [ 1812.444932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1812.447048] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1812.447923] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1812.448743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1812.449558] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1812.450372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.451197] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1812.452037] CPU: 1 PID: 23703 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1812.453584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1812.455422] Call Trace: [ 1812.456020] dump_stack+0x107/0x167 [ 1812.456885] should_fail.cold+0x5/0xa [ 1812.457763] ? vm_area_alloc+0x1c/0x110 [ 1812.458675] should_failslab+0x5/0x20 [ 1812.459515] kmem_cache_alloc+0x5b/0x310 [ 1812.460412] vm_area_alloc+0x1c/0x110 [ 1812.461259] mmap_region+0x982/0x1500 [ 1812.462105] do_mmap+0x868/0x1370 [ 1812.462897] vm_mmap_pgoff+0x198/0x1f0 [ 1812.463737] ? randomize_page+0xb0/0xb0 [ 1812.464630] ksys_mmap_pgoff+0x41c/0x560 [ 1812.465511] ? find_mergeable_anon_vma+0x250/0x250 [ 1812.466606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1812.467745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.468861] do_syscall_64+0x33/0x40 [ 1812.469653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1812.470759] RIP: 0033:0x7feb2b3bab62 [ 1812.470778] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1812.470789] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:08:32 executing program 2: r0 = fork() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/226, 0xe2}], 0x4, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/131, 0x83}], 0x2, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/253, 0xfd}], 0x1}}], 0x3, 0x40000000, 0x0) clone3(&(0x7f0000000200)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x26}, &(0x7f00000000c0)=""/115, 0x73, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=[r0, r1, r0, r0], 0x4}, 0x58) wait4(r2, &(0x7f0000000280), 0x4, 0x0) [ 1812.470810] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1812.470821] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1812.470832] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1812.470843] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1812.470854] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1812.487346] FAULT_INJECTION: forcing a failure. [ 1812.487346] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.487369] CPU: 1 PID: 23652 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1812.487379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1812.487385] Call Trace: [ 1812.487409] dump_stack+0x107/0x167 [ 1812.487433] should_fail.cold+0x5/0xa [ 1812.487455] ? anon_vma_clone+0xdc/0x590 [ 1812.487473] should_failslab+0x5/0x20 [ 1812.487493] kmem_cache_alloc+0x5b/0x310 [ 1812.487522] anon_vma_clone+0xdc/0x590 [ 1812.487555] anon_vma_fork+0x82/0x640 [ 1812.487573] ? __vm_enough_memory+0x184/0x360 [ 1812.487598] copy_process+0x72cd/0x78b0 [ 1812.487662] ? __cleanup_sighand+0xb0/0xb0 [ 1812.487681] ? perf_trace_lock+0xac/0x490 [ 1812.487733] ? find_held_lock+0x2c/0x110 [ 1812.487760] kernel_clone+0xe7/0x980 [ 1812.487781] ? lock_downgrade+0x6d0/0x6d0 [ 1812.487798] ? find_held_lock+0x2c/0x110 [ 1812.487817] ? create_io_thread+0xf0/0xf0 [ 1812.487839] ? ksys_write+0x12d/0x260 [ 1812.487869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1812.487900] __do_sys_fork+0x8a/0xc0 [ 1812.487919] ? kernel_thread+0xf0/0xf0 [ 1812.487961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1812.487982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.487998] ? trace_hardirqs_on+0x5b/0x180 [ 1812.488022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.488041] do_syscall_64+0x33/0x40 [ 1812.488062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1812.488075] RIP: 0033:0x7febfa601b19 [ 1812.488094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1812.488105] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1812.488126] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1812.488137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1812.488148] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1812.488159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.488170] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1812.508727] FAULT_INJECTION: forcing a failure. [ 1812.508727] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.509217] CPU: 0 PID: 23769 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1812.509224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1812.509227] Call Trace: [ 1812.509247] dump_stack+0x107/0x167 [ 1812.509262] should_fail.cold+0x5/0xa [ 1812.509277] ? create_object.isra.0+0x3a/0xa30 [ 1812.509289] should_failslab+0x5/0x20 [ 1812.509306] kmem_cache_alloc+0x5b/0x310 [ 1812.509321] create_object.isra.0+0x3a/0xa30 [ 1812.509331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1812.509346] kmem_cache_alloc_trace+0x151/0x320 [ 1812.509356] ? rwlock_bug.part.0+0x90/0x90 [ 1812.509372] alloc_fdtable+0x9e/0x2c0 [ 1812.509384] dup_fd+0x92d/0xe40 [ 1812.509406] copy_process+0x197c/0x78b0 [ 1812.509423] ? __lock_acquire+0xbb1/0x5b00 [ 1812.509448] ? __cleanup_sighand+0xb0/0xb0 [ 1812.509458] ? perf_trace_lock+0xac/0x490 [ 1812.509473] ? __lockdep_reset_lock+0x180/0x180 [ 1812.509490] ? find_held_lock+0x2c/0x110 [ 1812.509504] kernel_clone+0xe7/0x980 [ 1812.509515] ? lock_downgrade+0x6d0/0x6d0 [ 1812.509524] ? find_held_lock+0x2c/0x110 [ 1812.509534] ? create_io_thread+0xf0/0xf0 [ 1812.509546] ? ksys_write+0x12d/0x260 [ 1812.509563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1812.509579] __do_sys_fork+0x8a/0xc0 [ 1812.509588] ? kernel_thread+0xf0/0xf0 [ 1812.509609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1812.509622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.509632] ? trace_hardirqs_on+0x5b/0x180 [ 1812.509645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1812.509656] do_syscall_64+0x33/0x40 [ 1812.509668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1812.509675] RIP: 0033:0x7ff788849b19 [ 1812.509685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1812.509691] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1812.509702] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1812.509712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1812.509718] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1812.509725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.509731] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1829.148366] FAULT_INJECTION: forcing a failure. [ 1829.148366] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.149794] CPU: 1 PID: 23903 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1829.150619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1829.151595] Call Trace: [ 1829.151913] dump_stack+0x107/0x167 [ 1829.152345] should_fail.cold+0x5/0xa [ 1829.152796] ? create_object.isra.0+0x3a/0xa30 [ 1829.153336] should_failslab+0x5/0x20 [ 1829.153789] kmem_cache_alloc+0x5b/0x310 [ 1829.154273] create_object.isra.0+0x3a/0xa30 [ 1829.154795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1829.155398] __kmalloc_node+0x1ae/0x420 [ 1829.155870] kvmalloc_node+0x119/0x170 [ 1829.156338] alloc_fdtable+0x159/0x2c0 [ 1829.156797] dup_fd+0x92d/0xe40 [ 1829.157199] copy_process+0x197c/0x78b0 [ 1829.157673] ? __lock_acquire+0xbb1/0x5b00 [ 1829.158185] ? __cleanup_sighand+0xb0/0xb0 [ 1829.158689] ? perf_trace_lock+0xac/0x490 [ 1829.159187] ? __lockdep_reset_lock+0x180/0x180 [ 1829.159741] ? find_held_lock+0x2c/0x110 [ 1829.160225] kernel_clone+0xe7/0x980 [ 1829.160661] ? lock_downgrade+0x6d0/0x6d0 [ 1829.161152] ? find_held_lock+0x2c/0x110 [ 1829.161631] ? create_io_thread+0xf0/0xf0 [ 1829.162120] ? ksys_write+0x12d/0x260 [ 1829.162581] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1829.163152] __do_sys_fork+0x8a/0xc0 [ 1829.163588] ? kernel_thread+0xf0/0xf0 [ 1829.164059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1829.164680] ? syscall_enter_from_user_mode+0x1d/0x50 02:08:49 executing program 4: fork() (fail_nth: 82) 02:08:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80800, 0x187) fork() r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4200, r0, 0x9, 0x23) 02:08:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 02:08:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 17) 02:08:49 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 83) 02:08:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 17) [ 1829.165295] ? trace_hardirqs_on+0x5b/0x180 [ 1829.166110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.166837] do_syscall_64+0x33/0x40 [ 1829.167312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1829.167938] RIP: 0033:0x7ff788849b19 [ 1829.168372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1829.170519] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1829.171413] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1829.172247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1829.173080] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.173917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.174765] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1829.176353] FAULT_INJECTION: forcing a failure. [ 1829.176353] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.179183] CPU: 0 PID: 23904 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1829.180643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1829.182380] Call Trace: [ 1829.182951] dump_stack+0x107/0x167 [ 1829.183728] should_fail.cold+0x5/0xa [ 1829.184538] ? create_object.isra.0+0x3a/0xa30 [ 1829.185495] should_failslab+0x5/0x20 [ 1829.186295] kmem_cache_alloc+0x5b/0x310 [ 1829.187169] create_object.isra.0+0x3a/0xa30 [ 1829.188086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1829.189144] kmem_cache_alloc+0x159/0x310 [ 1829.190022] vm_area_alloc+0x1c/0x110 [ 1829.190833] mmap_region+0x982/0x1500 [ 1829.191652] do_mmap+0x868/0x1370 [ 1829.192402] vm_mmap_pgoff+0x198/0x1f0 [ 1829.193227] ? randomize_page+0xb0/0xb0 [ 1829.194079] ksys_mmap_pgoff+0x41c/0x560 [ 1829.194947] ? find_mergeable_anon_vma+0x250/0x250 [ 1829.195988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1829.197097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.198182] do_syscall_64+0x33/0x40 [ 1829.198978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1829.200051] RIP: 0033:0x7feb2b3bab62 [ 1829.200849] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1829.204701] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1829.206297] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1829.207793] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1829.209280] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1829.210780] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1829.212270] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1829.219490] FAULT_INJECTION: forcing a failure. [ 1829.219490] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.222175] CPU: 0 PID: 23900 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1829.223664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1829.225439] Call Trace: [ 1829.225999] dump_stack+0x107/0x167 [ 1829.226792] should_fail.cold+0x5/0xa [ 1829.227609] ? create_object.isra.0+0x3a/0xa30 [ 1829.228581] should_failslab+0x5/0x20 [ 1829.229409] kmem_cache_alloc+0x5b/0x310 [ 1829.230277] create_object.isra.0+0x3a/0xa30 [ 1829.231213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1829.232304] __kmalloc_node+0x1ae/0x420 [ 1829.233146] kvmalloc_node+0x119/0x170 [ 1829.233978] alloc_fdtable+0x159/0x2c0 [ 1829.234813] dup_fd+0x92d/0xe40 [ 1829.235539] copy_process+0x197c/0x78b0 [ 1829.236396] ? __lock_acquire+0xbb1/0x5b00 [ 1829.237335] ? __cleanup_sighand+0xb0/0xb0 [ 1829.238229] ? perf_trace_lock+0xac/0x490 02:08:49 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 02:08:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1829.239126] ? __lockdep_reset_lock+0x180/0x180 [ 1829.240328] ? find_held_lock+0x2c/0x110 [ 1829.241185] kernel_clone+0xe7/0x980 [ 1829.241963] ? lock_downgrade+0x6d0/0x6d0 [ 1829.242840] ? find_held_lock+0x2c/0x110 [ 1829.243695] ? create_io_thread+0xf0/0xf0 [ 1829.244573] ? ksys_write+0x12d/0x260 [ 1829.245382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1829.246404] __do_sys_fork+0x8a/0xc0 [ 1829.247207] ? kernel_thread+0xf0/0xf0 [ 1829.248062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1829.249160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.250239] ? trace_hardirqs_on+0x5b/0x180 [ 1829.251151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.252234] do_syscall_64+0x33/0x40 [ 1829.253019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1829.254100] RIP: 0033:0x7f5b9eb75b19 [ 1829.254900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1829.258764] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1829.260356] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1829.261837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1829.263339] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.264848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.266343] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:08:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 18) 02:08:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x5745, &(0x7f0000000080)={0x0, 0x3fa3, 0x2, 0x0, 0x3d8, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r1, 0x8000000) [ 1829.299173] FAULT_INJECTION: forcing a failure. [ 1829.299173] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.301834] CPU: 0 PID: 23917 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1829.303284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1829.304989] Call Trace: [ 1829.305540] dump_stack+0x107/0x167 [ 1829.306292] should_fail.cold+0x5/0xa [ 1829.307104] ? create_object.isra.0+0x3a/0xa30 [ 1829.308043] should_failslab+0x5/0x20 [ 1829.308833] kmem_cache_alloc+0x5b/0x310 [ 1829.309678] create_object.isra.0+0x3a/0xa30 [ 1829.310602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1829.311676] kmem_cache_alloc+0x159/0x310 [ 1829.312585] anon_vma_fork+0x1ff/0x640 [ 1829.313415] copy_process+0x72cd/0x78b0 [ 1829.314286] ? __cleanup_sighand+0xb0/0xb0 [ 1829.315183] ? perf_trace_lock+0xac/0x490 [ 1829.316078] ? find_held_lock+0x2c/0x110 [ 1829.316931] kernel_clone+0xe7/0x980 [ 1829.317722] ? lock_downgrade+0x6d0/0x6d0 [ 1829.318604] ? find_held_lock+0x2c/0x110 [ 1829.319449] ? create_io_thread+0xf0/0xf0 [ 1829.320324] ? ksys_write+0x12d/0x260 [ 1829.321140] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1829.322154] __do_sys_fork+0x8a/0xc0 [ 1829.322946] ? kernel_thread+0xf0/0xf0 [ 1829.323784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1829.324893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.325155] FAULT_INJECTION: forcing a failure. [ 1829.325155] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.325982] ? trace_hardirqs_on+0x5b/0x180 [ 1829.326011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.329319] do_syscall_64+0x33/0x40 [ 1829.330125] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1829.331237] RIP: 0033:0x7febfa601b19 [ 1829.332038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1829.335997] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1829.337635] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1829.339171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1829.340704] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.342233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.343786] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 [ 1829.345346] CPU: 1 PID: 23923 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1829.346170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1829.347153] Call Trace: [ 1829.347468] dump_stack+0x107/0x167 [ 1829.347898] should_fail.cold+0x5/0xa [ 1829.348355] ? copy_fs_struct+0x45/0x340 [ 1829.348832] should_failslab+0x5/0x20 [ 1829.349277] kmem_cache_alloc+0x5b/0x310 [ 1829.349756] copy_fs_struct+0x45/0x340 [ 1829.350222] copy_process+0x34b5/0x78b0 [ 1829.350704] ? __lock_acquire+0xbb1/0x5b00 [ 1829.351216] ? __cleanup_sighand+0xb0/0xb0 [ 1829.351709] ? perf_trace_lock+0xac/0x490 [ 1829.352192] ? __lockdep_reset_lock+0x180/0x180 [ 1829.352742] ? find_held_lock+0x2c/0x110 [ 1829.353219] kernel_clone+0xe7/0x980 [ 1829.353655] ? lock_downgrade+0x6d0/0x6d0 [ 1829.354133] ? find_held_lock+0x2c/0x110 [ 1829.354618] ? create_io_thread+0xf0/0xf0 [ 1829.355101] ? ksys_write+0x12d/0x260 [ 1829.355558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1829.356123] __do_sys_fork+0x8a/0xc0 [ 1829.356557] ? kernel_thread+0xf0/0xf0 [ 1829.357021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1829.357640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.358240] ? trace_hardirqs_on+0x5b/0x180 [ 1829.358752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1829.359358] do_syscall_64+0x33/0x40 [ 1829.359793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1829.360397] RIP: 0033:0x7ff788849b19 [ 1829.360836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1829.362985] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1829.363875] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1829.364706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1829.365547] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.366385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.367227] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1848.518997] FAULT_INJECTION: forcing a failure. [ 1848.518997] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.521360] CPU: 1 PID: 24235 Comm: syz-executor.1 Not tainted 5.10.262 #1 [ 1848.522762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.524436] Call Trace: [ 1848.524979] dump_stack+0x107/0x167 [ 1848.525720] should_fail.cold+0x5/0xa [ 1848.526504] ? copy_fs_struct+0x45/0x340 [ 1848.527334] should_failslab+0x5/0x20 [ 1848.528108] kmem_cache_alloc+0x5b/0x310 [ 1848.528934] copy_fs_struct+0x45/0x340 [ 1848.529728] copy_process+0x34b5/0x78b0 [ 1848.530556] ? __lock_acquire+0xbb1/0x5b00 [ 1848.531440] ? __cleanup_sighand+0xb0/0xb0 [ 1848.532290] ? perf_trace_lock+0xac/0x490 [ 1848.533127] ? __lockdep_reset_lock+0x180/0x180 [ 1848.534077] ? find_held_lock+0x2c/0x110 [ 1848.534905] kernel_clone+0xe7/0x980 [ 1848.535647] ? lock_downgrade+0x6d0/0x6d0 [ 1848.536475] ? find_held_lock+0x2c/0x110 [ 1848.537288] ? create_io_thread+0xf0/0xf0 [ 1848.538126] ? ksys_write+0x12d/0x260 [ 1848.538918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1848.539885] __do_sys_fork+0x8a/0xc0 [ 1848.540630] ? kernel_thread+0xf0/0xf0 [ 1848.541427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.542490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.543531] ? trace_hardirqs_on+0x5b/0x180 [ 1848.544401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.545430] do_syscall_64+0x33/0x40 [ 1848.546178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.547216] RIP: 0033:0x7f5b9eb75b19 [ 1848.547960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.551648] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1848.553167] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1848.554586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 02:09:08 executing program 4: fork() (fail_nth: 83) 02:09:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) 02:09:08 executing program 2: syz_io_uring_setup(0x2090, &(0x7f0000000080)={0x0, 0xb18c, 0x8, 0x3, 0x51}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2f, 0x40, &(0x7f0000000040)=0x1) fork() 02:09:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 18) 02:09:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fork() 02:09:08 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 02:09:08 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 84) 02:09:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 19) [ 1848.556001] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.557769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.559230] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 [ 1848.578123] FAULT_INJECTION: forcing a failure. [ 1848.578123] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.580425] CPU: 1 PID: 24237 Comm: syz-executor.5 Not tainted 5.10.262 #1 [ 1848.581781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.583424] Call Trace: [ 1848.583496] FAULT_INJECTION: forcing a failure. [ 1848.583496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1848.583939] dump_stack+0x107/0x167 [ 1848.583961] should_fail.cold+0x5/0xa [ 1848.583980] ? create_object.isra.0+0x3a/0xa30 [ 1848.583997] should_failslab+0x5/0x20 [ 1848.584014] kmem_cache_alloc+0x5b/0x310 [ 1848.584038] create_object.isra.0+0x3a/0xa30 [ 1848.584053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1848.584077] kmem_cache_alloc+0x159/0x310 [ 1848.584103] copy_fs_struct+0x45/0x340 [ 1848.584124] copy_process+0x34b5/0x78b0 [ 1848.584148] ? __lock_acquire+0xbb1/0x5b00 [ 1848.584191] ? __cleanup_sighand+0xb0/0xb0 [ 1848.584207] ? perf_trace_lock+0xac/0x490 [ 1848.584232] ? __lockdep_reset_lock+0x180/0x180 [ 1848.584259] ? find_held_lock+0x2c/0x110 [ 1848.584282] kernel_clone+0xe7/0x980 [ 1848.599537] ? lock_downgrade+0x6d0/0x6d0 [ 1848.600334] ? find_held_lock+0x2c/0x110 [ 1848.601128] ? create_io_thread+0xf0/0xf0 [ 1848.601937] ? ksys_write+0x12d/0x260 [ 1848.602693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1848.603638] __do_sys_fork+0x8a/0xc0 [ 1848.604367] ? kernel_thread+0xf0/0xf0 [ 1848.605145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.606161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.607168] ? trace_hardirqs_on+0x5b/0x180 [ 1848.608004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.608996] do_syscall_64+0x33/0x40 [ 1848.609720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.610723] RIP: 0033:0x7ff788849b19 [ 1848.611445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.615012] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1848.616479] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1848.617846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1848.619241] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.620616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.621988] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 [ 1848.623395] CPU: 0 PID: 24238 Comm: syz-executor.4 Not tainted 5.10.262 #1 [ 1848.625034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.626973] Call Trace: [ 1848.627590] dump_stack+0x107/0x167 [ 1848.628453] should_fail.cold+0x5/0xa [ 1848.629358] __alloc_pages_nodemask+0x182/0x600 [ 1848.630445] ? __lockdep_reset_lock+0x180/0x180 [ 1848.631543] ? __lockdep_reset_lock+0x180/0x180 [ 1848.632633] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1848.634061] alloc_pages_current+0x187/0x280 [ 1848.635110] pte_alloc_one+0x16/0x1a0 [ 1848.636001] __pte_alloc+0x1d/0x330 [ 1848.636847] copy_page_range+0x1b62/0x3800 [ 1848.637843] ? find_held_lock+0x2c/0x110 [ 1848.638829] ? up_write+0x191/0x550 [ 1848.639668] ? vm_iomap_memory+0x190/0x190 [ 1848.640647] ? downgrade_write+0x3a0/0x3a0 [ 1848.641627] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1848.642887] ? __vma_link_rb+0x540/0x700 [ 1848.643836] copy_process+0x7658/0x78b0 [ 1848.644801] ? __cleanup_sighand+0xb0/0xb0 [ 1848.645773] ? perf_trace_lock+0xac/0x490 [ 1848.646764] ? find_held_lock+0x2c/0x110 [ 1848.647711] kernel_clone+0xe7/0x980 [ 1848.648586] ? lock_downgrade+0x6d0/0x6d0 [ 1848.649539] ? find_held_lock+0x2c/0x110 [ 1848.650482] ? create_io_thread+0xf0/0xf0 [ 1848.651459] ? ksys_write+0x12d/0x260 [ 1848.652347] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1848.653471] __do_sys_fork+0x8a/0xc0 [ 1848.654329] ? kernel_thread+0xf0/0xf0 [ 1848.655262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.656466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.657638] ? trace_hardirqs_on+0x5b/0x180 [ 1848.658647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.659821] do_syscall_64+0x33/0x40 [ 1848.660672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.661840] RIP: 0033:0x7febfa601b19 [ 1848.662705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.666918] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1848.668654] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1848.670284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1848.671908] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.673524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.675156] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:09:08 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) [ 1848.694930] FAULT_INJECTION: forcing a failure. [ 1848.694930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1848.697142] CPU: 1 PID: 24248 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1848.698429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.699974] Call Trace: [ 1848.700470] dump_stack+0x107/0x167 [ 1848.701149] should_fail.cold+0x5/0xa [ 1848.701863] __alloc_pages_nodemask+0x182/0x600 [ 1848.702735] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1848.703846] ? walk_mem_res+0x170/0x170 [ 1848.704592] alloc_pages_current+0x187/0x280 [ 1848.705404] pte_alloc_one+0x16/0x1a0 [ 1848.706111] __pte_alloc+0x1d/0x330 [ 1848.706791] remap_pfn_range_internal+0x9a3/0xf60 [ 1848.707695] ? lookup_memtype+0x5b/0x200 [ 1848.708457] ? apply_to_existing_page_range+0x40/0x40 [ 1848.709417] remap_pfn_range+0xcd/0x160 [ 1848.710153] ? remap_pfn_range_notrack+0x70/0x70 [ 1848.711034] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1848.712005] io_uring_mmap+0x398/0x530 [ 1848.712730] mmap_file+0x5e/0xe0 [ 1848.713353] mmap_region+0xc4d/0x1500 [ 1848.714064] do_mmap+0x868/0x1370 [ 1848.714719] vm_mmap_pgoff+0x198/0x1f0 [ 1848.715441] ? randomize_page+0xb0/0xb0 [ 1848.716188] ksys_mmap_pgoff+0x41c/0x560 [ 1848.716933] ? find_mergeable_anon_vma+0x250/0x250 [ 1848.717837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.718812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.719755] do_syscall_64+0x33/0x40 [ 1848.720435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.721368] RIP: 0033:0x7feb2b3bab62 [ 1848.722044] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1848.725412] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1848.726816] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1848.728115] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1848.729399] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1848.730700] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1848.731977] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1848.775546] ------------[ cut here ]------------ [ 1848.776535] WARNING: CPU: 1 PID: 24248 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1848.778131] Modules linked in: [ 1848.778713] CPU: 1 PID: 24248 Comm: syz-executor.6 Not tainted 5.10.262 #1 [ 1848.779960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.781449] RIP: 0010:get_pat_info+0x216/0x270 [ 1848.782276] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8f 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8f 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 15 b2 5a 00 e9 [ 1848.785516] RSP: 0018:ffff88805925f890 EFLAGS: 00010212 [ 1848.786507] RAX: 0000000000013b65 RBX: ffff88805206ed00 RCX: ffffc90006214000 [ 1848.790509] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 1848.794082] RBP: ffff88805925f948 R08: 0000000000000000 R09: ffff88805925f818 [ 1848.795344] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1848.796619] R13: 1ffff1100b24bf12 R14: 0000000000000000 R15: ffff88805206ed50 [ 1848.797855] FS: 00007feb28930700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1848.799256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1848.800273] CR2: 00007f3592fb5018 CR3: 000000004f130000 CR4: 0000000000350ee0 [ 1848.801510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1848.802750] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1848.803977] Call Trace: [ 1848.804435] ? pgprot_writethrough+0xc0/0xc0 [ 1848.805208] ? finish_task_switch+0x126/0x5d0 [ 1848.805987] ? finish_task_switch+0xef/0x5d0 [ 1848.806783] untrack_pfn+0xdc/0x240 [ 1848.807406] ? track_pfn_insert+0x150/0x150 [ 1848.808158] ? lock_downgrade+0x6d0/0x6d0 [ 1848.808880] ? uprobe_munmap+0x1c/0x670 [ 1848.809563] unmap_single_vma+0x1bc/0x300 [ 1848.810304] zap_page_range_single+0x2ce/0x450 [ 1848.811113] ? unmap_single_vma+0x300/0x300 [ 1848.811869] ? remap_pfn_range_internal+0xc56/0xf60 [ 1848.812722] ? lookup_memtype+0x5b/0x200 [ 1848.813455] ? apply_to_existing_page_range+0x40/0x40 [ 1848.814353] remap_pfn_range+0x139/0x160 [ 1848.815075] ? remap_pfn_range_notrack+0x70/0x70 [ 1848.815908] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1848.816812] io_uring_mmap+0x398/0x530 [ 1848.817467] mmap_file+0x5e/0xe0 [ 1848.818052] mmap_region+0xc4d/0x1500 [ 1848.818743] do_mmap+0x868/0x1370 [ 1848.819333] vm_mmap_pgoff+0x198/0x1f0 [ 1848.820021] ? randomize_page+0xb0/0xb0 [ 1848.820696] ksys_mmap_pgoff+0x41c/0x560 [ 1848.821403] ? find_mergeable_anon_vma+0x250/0x250 [ 1848.822254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.823163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.824061] do_syscall_64+0x33/0x40 [ 1848.824698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.825576] RIP: 0033:0x7feb2b3bab62 [ 1848.826217] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1848.829310] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1848.830606] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1848.831808] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1848.833030] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1848.835201] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1848.836497] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 [ 1848.837730] irq event stamp: 1835 [ 1848.838316] hardirqs last enabled at (1843): [] console_unlock+0x92d/0xb40 [ 1848.839790] hardirqs last disabled at (1852): [] console_unlock+0x839/0xb40 [ 1848.841230] softirqs last enabled at (1820): [] asm_call_irq_on_stack+0x12/0x20 [ 1848.842754] softirqs last disabled at (1755): [] asm_call_irq_on_stack+0x12/0x20 [ 1848.844232] ---[ end trace 5da5cf13f48d50b5 ]--- 02:09:08 executing program 4: fork() (fail_nth: 84) 02:09:08 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x290, 0x0, 0x0, 0x0) 02:09:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x81, 0x0, 0x4, 0x52418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x320, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() (fail_nth: 19) [ 1848.935033] FAULT_INJECTION: forcing a failure. [ 1848.935033] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.938152] CPU: 1 PID: 24364 Comm: syz-executor.4 Tainted: G W 5.10.262 #1 [ 1848.939436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.940714] Call Trace: [ 1848.941125] dump_stack+0x107/0x167 [ 1848.941682] should_fail.cold+0x5/0xa [ 1848.942281] ? ptlock_alloc+0x1d/0x70 [ 1848.942873] should_failslab+0x5/0x20 [ 1848.943464] kmem_cache_alloc+0x5b/0x310 [ 1848.944102] ptlock_alloc+0x1d/0x70 [ 1848.944661] pte_alloc_one+0x68/0x1a0 [ 1848.945240] __pte_alloc+0x1d/0x330 [ 1848.945803] copy_page_range+0x1b62/0x3800 [ 1848.946460] ? find_held_lock+0x2c/0x110 [ 1848.947118] ? up_write+0x191/0x550 [ 1848.947676] ? vm_iomap_memory+0x190/0x190 [ 1848.948314] ? downgrade_write+0x3a0/0x3a0 [ 1848.948953] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1848.949778] ? __vma_link_rb+0x540/0x700 [ 1848.950414] copy_process+0x7658/0x78b0 [ 1848.951066] ? __cleanup_sighand+0xb0/0xb0 [ 1848.951703] ? perf_trace_lock+0xac/0x490 [ 1848.952351] ? find_held_lock+0x2c/0x110 [ 1848.952969] kernel_clone+0xe7/0x980 [ 1848.953548] ? lock_downgrade+0x6d0/0x6d0 [ 1848.954169] ? find_held_lock+0x2c/0x110 [ 1848.954794] ? create_io_thread+0xf0/0xf0 [ 1848.955421] ? ksys_write+0x12d/0x260 [ 1848.956014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1848.956749] __do_sys_fork+0x8a/0xc0 [ 1848.957310] ? kernel_thread+0xf0/0xf0 [ 1848.957913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1848.958724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.959500] ? trace_hardirqs_on+0x5b/0x180 [ 1848.960152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1848.960935] do_syscall_64+0x33/0x40 [ 1848.961493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1848.962258] RIP: 0033:0x7febfa601b19 [ 1848.962821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.965566] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1848.966710] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1848.967770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1848.968838] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.969911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.970987] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 02:09:09 executing program 6: syz_io_uring_setup(0x11d9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000000c0)) (fail_nth: 85) 02:09:09 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) [ 1849.059393] FAULT_INJECTION: forcing a failure. [ 1849.059393] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.061075] CPU: 1 PID: 24515 Comm: syz-executor.1 Tainted: G W 5.10.262 #1 [ 1849.062236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.063415] Call Trace: [ 1849.063794] dump_stack+0x107/0x167 [ 1849.064304] should_fail.cold+0x5/0xa [ 1849.064842] ? create_object.isra.0+0x3a/0xa30 [ 1849.065495] should_failslab+0x5/0x20 [ 1849.066026] kmem_cache_alloc+0x5b/0x310 [ 1849.066621] create_object.isra.0+0x3a/0xa30 [ 1849.067232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1849.067962] kmem_cache_alloc+0x159/0x310 [ 1849.068553] copy_fs_struct+0x45/0x340 [ 1849.069100] copy_process+0x34b5/0x78b0 [ 1849.069679] ? __lock_acquire+0xbb1/0x5b00 [ 1849.070291] ? __cleanup_sighand+0xb0/0xb0 [ 1849.070888] ? perf_trace_lock+0xac/0x490 [ 1849.071479] ? __lockdep_reset_lock+0x180/0x180 [ 1849.072132] ? find_held_lock+0x2c/0x110 [ 1849.072710] kernel_clone+0xe7/0x980 [ 1849.073242] ? lock_downgrade+0x6d0/0x6d0 [ 1849.073827] ? find_held_lock+0x2c/0x110 [ 1849.074406] ? create_io_thread+0xf0/0xf0 [ 1849.074995] ? ksys_write+0x12d/0x260 [ 1849.075531] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.076206] __do_sys_fork+0x8a/0xc0 [ 1849.076719] ? kernel_thread+0xf0/0xf0 [ 1849.077271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.078004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.078729] ? trace_hardirqs_on+0x5b/0x180 [ 1849.079339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.080063] do_syscall_64+0x33/0x40 [ 1849.080576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.081298] RIP: 0033:0x7f5b9eb75b19 [ 1849.081827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.084375] RSP: 002b:00007f5b9c0eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1849.085418] RAX: ffffffffffffffda RBX: 00007f5b9ec88f60 RCX: 00007f5b9eb75b19 [ 1849.086394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1849.087378] RBP: 00007f5b9c0eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.088365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1849.089338] R13: 00007ffc27c3793f R14: 00007f5b9c0eb300 R15: 0000000000022000 02:09:09 executing program 4: fork() (fail_nth: 85) 02:09:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x882c2, 0x43) openat(r0, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 20) 02:09:09 executing program 2: r0 = fork() clone3(&(0x7f0000000200)={0x10000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x2c}, &(0x7f00000000c0)=""/186, 0xba, &(0x7f0000000180)=""/19, &(0x7f00000001c0)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = fork() ptrace$setopts(0x4200, r1, 0x3, 0x60) tkill(r2, 0x12) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/167, 0xa7}], 0x1, &(0x7f0000000c00)=[{&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/128, 0x80}, {&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/87, 0x57}], 0xb, 0x0) tkill(r3, 0x2f) [ 1849.174173] FAULT_INJECTION: forcing a failure. [ 1849.174173] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.175756] CPU: 1 PID: 24576 Comm: syz-executor.6 Tainted: G W 5.10.262 #1 [ 1849.176828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.177908] Call Trace: [ 1849.178255] dump_stack+0x107/0x167 [ 1849.178741] should_fail.cold+0x5/0xa [ 1849.179238] ? ptlock_alloc+0x1d/0x70 [ 1849.179747] should_failslab+0x5/0x20 [ 1849.180241] kmem_cache_alloc+0x5b/0x310 [ 1849.180787] ptlock_alloc+0x1d/0x70 [ 1849.181273] pte_alloc_one+0x68/0x1a0 [ 1849.181775] __pte_alloc+0x1d/0x330 [ 1849.182260] remap_pfn_range_internal+0x9a3/0xf60 [ 1849.182895] ? lookup_memtype+0x5b/0x200 [ 1849.183440] ? apply_to_existing_page_range+0x40/0x40 [ 1849.184123] remap_pfn_range+0xcd/0x160 [ 1849.184636] ? remap_pfn_range_notrack+0x70/0x70 [ 1849.185258] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1849.185933] io_uring_mmap+0x398/0x530 [ 1849.186440] mmap_file+0x5e/0xe0 [ 1849.186883] mmap_region+0xc4d/0x1500 [ 1849.187380] do_mmap+0x868/0x1370 [ 1849.187840] vm_mmap_pgoff+0x198/0x1f0 [ 1849.188346] ? randomize_page+0xb0/0xb0 [ 1849.188872] ksys_mmap_pgoff+0x41c/0x560 [ 1849.189395] ? find_mergeable_anon_vma+0x250/0x250 [ 1849.190038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.190720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.191386] do_syscall_64+0x33/0x40 [ 1849.191864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.192528] RIP: 0033:0x7feb2b3bab62 [ 1849.192998] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1849.195342] RSP: 002b:00007feb289300f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1849.196322] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feb2b3bab62 [ 1849.197225] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020fff000 [ 1849.198153] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1849.199081] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 1849.199990] R13: 0000000020ffc000 R14: 0000000020000340 R15: 0000000020fff000 02:09:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x1, 0x36, 0x9, 0x0, 0x1, 0x22102, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x24000000000, 0x3}, 0x21, 0x15a8, 0x9, 0x7, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0xd, 0xffffffffffffffff, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = fork() r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x16) tkill(r2, 0x12) ptrace$setopts(0x4200, r2, 0x8, 0x100029) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) [ 1849.220492] FAULT_INJECTION: forcing a failure. [ 1849.220492] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.221948] CPU: 1 PID: 24580 Comm: syz-executor.5 Tainted: G W 5.10.262 #1 [ 1849.223004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.224044] Call Trace: [ 1849.224382] dump_stack+0x107/0x167 [ 1849.224846] should_fail.cold+0x5/0xa [ 1849.225331] ? copy_process+0x1ae7/0x78b0 [ 1849.225850] should_failslab+0x5/0x20 [ 1849.226326] kmem_cache_alloc+0x5b/0x310 [ 1849.226843] ? _raw_spin_unlock+0x1a/0x30 [ 1849.227367] copy_process+0x1ae7/0x78b0 [ 1849.227869] ? __lock_acquire+0xbb1/0x5b00 [ 1849.228419] ? __cleanup_sighand+0xb0/0xb0 [ 1849.228953] ? perf_trace_lock+0xac/0x490 [ 1849.229486] ? __lockdep_reset_lock+0x180/0x180 [ 1849.230077] ? find_held_lock+0x2c/0x110 [ 1849.230601] kernel_clone+0xe7/0x980 [ 1849.231070] ? lock_downgrade+0x6d0/0x6d0 [ 1849.231589] ? find_held_lock+0x2c/0x110 [ 1849.232096] ? create_io_thread+0xf0/0xf0 [ 1849.232620] ? ksys_write+0x12d/0x260 [ 1849.233104] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.233717] __do_sys_fork+0x8a/0xc0 [ 1849.234184] ? kernel_thread+0xf0/0xf0 [ 1849.234693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.235356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.236003] ? trace_hardirqs_on+0x5b/0x180 [ 1849.236547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.237191] do_syscall_64+0x33/0x40 [ 1849.237659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.238292] RIP: 0033:0x7ff788849b19 [ 1849.238764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.241046] RSP: 002b:00007ff785dbf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1849.241988] RAX: ffffffffffffffda RBX: 00007ff78895cf60 RCX: 00007ff788849b19 [ 1849.242885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1849.243773] RBP: 00007ff785dbf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.244661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1849.245552] R13: 00007ffd9c5dcbbf R14: 00007ff785dbf300 R15: 0000000000022000 02:09:09 executing program 7: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x361}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x8000, 0x9, 0x1, 0x80]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x40, 0xff, 0x1c, 0x7e7, 0x5, 0x8000, 0xe25, 0x401]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x81, 0x10001, 0x2, 0x7, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xed90}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x97, 0xffffffff, 0x1, 0xa573, 0x2, 0x6, 0xffffffff, 0x8, 0x7]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x4004020) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 1849.279665] FAULT_INJECTION: forcing a failure. [ 1849.279665] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.281075] CPU: 1 PID: 24578 Comm: syz-executor.4 Tainted: G W 5.10.262 #1 [ 1849.282074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.283090] Call Trace: [ 1849.283414] dump_stack+0x107/0x167 [ 1849.283858] should_fail.cold+0x5/0xa [ 1849.284320] ? create_object.isra.0+0x3a/0xa30 [ 1849.284872] should_failslab+0x5/0x20 [ 1849.285333] kmem_cache_alloc+0x5b/0x310 [ 1849.285822] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1849.286561] create_object.isra.0+0x3a/0xa30 [ 1849.287093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1849.287711] kmem_cache_alloc+0x159/0x310 [ 1849.288222] ptlock_alloc+0x1d/0x70 [ 1849.288667] pte_alloc_one+0x68/0x1a0 [ 1849.289132] __pte_alloc+0x1d/0x330 [ 1849.289575] copy_page_range+0x1b62/0x3800 [ 1849.290092] ? find_held_lock+0x2c/0x110 [ 1849.290614] ? up_write+0x191/0x550 [ 1849.291052] ? vm_iomap_memory+0x190/0x190 [ 1849.291559] ? downgrade_write+0x3a0/0x3a0 [ 1849.292070] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1849.292723] ? __vma_link_rb+0x540/0x700 [ 1849.293219] copy_process+0x7658/0x78b0 [ 1849.293722] ? __cleanup_sighand+0xb0/0xb0 [ 1849.294234] ? perf_trace_lock+0xac/0x490 [ 1849.294757] ? find_held_lock+0x2c/0x110 [ 1849.295253] kernel_clone+0xe7/0x980 [ 1849.295703] ? lock_downgrade+0x6d0/0x6d0 [ 1849.296203] ? find_held_lock+0x2c/0x110 [ 1849.296694] ? create_io_thread+0xf0/0xf0 [ 1849.297204] ? ksys_write+0x12d/0x260 [ 1849.297674] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.298257] __do_sys_fork+0x8a/0xc0 [ 1849.298716] ? kernel_thread+0xf0/0xf0 [ 1849.299196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.299824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.300442] ? trace_hardirqs_on+0x5b/0x180 [ 1849.300955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.301568] do_syscall_64+0x33/0x40 [ 1849.302011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.302632] RIP: 0033:0x7febfa601b19 [ 1849.303072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.305261] RSP: 002b:00007febf7b77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1849.306166] RAX: ffffffffffffffda RBX: 00007febfa714f60 RCX: 00007febfa601b19 [ 1849.307030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1849.307882] RBP: 00007febf7b771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.308728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1849.309573] R13: 00007ffca33f49ff R14: 00007febf7b77300 R15: 0000000000022000 VM DIAGNOSIS: 02:09:09 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff84ff9c60 RDI=ffff888057c8a388 RBP=ffffffff84ff9c60 RSP=ffff88804f1c7778 R8 =0000000000000001 R9 =ffff888046529963 R10=ffffed1008ca532c R11=0000000000000001 R12=ffff888057c89a40 R13=ffff888057c8a388 R14=00000000ffffffff R15=ffff888057c8a388 RIP=ffffffff83e936fb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff785dbf700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f567b056ac0 CR3=000000000d15a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ea771 RDI=ffffffff879fc240 RBP=ffffffff879fc200 RSP=ffff88805925f2a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000034 R13=0000000000000034 R14=ffffffff879fc200 R15=dffffc0000000000 RIP=ffffffff822ea7c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feb28930700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3592fb5018 CR3=000000004f130000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000