7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40004, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5, 0x47) 10:49:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40005, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:11 executing program 1: syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5, 0x47) 10:49:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:29 executing program 1: syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40006, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40007, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40008, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:29 executing program 1: syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {0xffffffffffffffff, 0x220}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:49:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40018, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4001c, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {0xffffffffffffffff, 0x220}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:49:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:49:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 10:49:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:49:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:49:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40069, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:49:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:49:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:49:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {0xffffffffffffffff, 0x220}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:50:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400f0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:50:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 10:50:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) 10:50:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:02 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40300, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5, 0x47) 10:50:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:03 executing program 7: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5, 0x47) 10:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40480, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:18 executing program 7: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) 10:50:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:18 executing program 7: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40500, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}], 0x5, 0x47) 10:50:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:18 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40600, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:50:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:37 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40700, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 10:50:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:37 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x9, 0xff, 0x2, 0x0, 0x1ff, 0x50400, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0x4}, 0x8004, 0xff, 0x3, 0x0, 0x3, 0x8, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0x8) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r1, 0x402, 0x80000022) 10:50:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41800, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:50:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:50:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:50:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x41c00, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:50:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:50:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:50:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x0) 10:51:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43f00, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6f1, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x0) 10:51:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x0) 10:51:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46900, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48004, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) (fail_nth: 1) 10:51:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 1908.864205] FAULT_INJECTION: forcing a failure. [ 1908.864205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1908.866837] CPU: 1 PID: 18585 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1908.868289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.870040] Call Trace: [ 1908.870596] dump_stack+0x107/0x167 [ 1908.871368] should_fail.cold+0x5/0xa [ 1908.872171] _copy_from_user+0x2e/0x1b0 [ 1908.873012] do_sys_poll+0x1f9/0xe50 [ 1908.873789] ? arch_stack_walk+0x99/0xf0 [ 1908.874647] ? lock_chain_count+0x20/0x20 [ 1908.875519] ? compat_core_sys_select+0x8b0/0x8b0 [ 1908.876526] ? __lock_acquire+0x1657/0x5b00 [ 1908.877440] ? mark_lock+0xf5/0x2df0 [ 1908.878235] ? mark_lock+0xf5/0x2df0 [ 1908.879012] ? lock_chain_count+0x20/0x20 [ 1908.879872] ? perf_trace_lock+0xac/0x490 [ 1908.880736] ? SOFTIRQ_verbose+0x10/0x10 [ 1908.881593] ? __lockdep_reset_lock+0x180/0x180 [ 1908.882582] ? __lock_acquire+0xbb1/0x5b00 [ 1908.883474] ? __lock_acquire+0x1657/0x5b00 [ 1908.884394] ? perf_trace_lock+0xac/0x490 [ 1908.885263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1908.886351] ? SOFTIRQ_verbose+0x10/0x10 [ 1908.887202] ? __lockdep_reset_lock+0x180/0x180 [ 1908.888189] ? find_held_lock+0x2c/0x110 [ 1908.889063] ? poll_select_set_timeout+0xd8/0x130 [ 1908.890096] ? lock_downgrade+0x6d0/0x6d0 [ 1908.890989] ? timespec64_add_safe+0x189/0x210 [ 1908.891964] ? nsec_to_clock_t+0x30/0x30 [ 1908.892814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.893956] ? trace_hardirqs_on+0x5b/0x180 [ 1908.894887] ? recalibrate_cpu_khz+0x10/0x10 [ 1908.895835] ? ktime_get_ts64+0x220/0x2f0 [ 1908.896744] __x64_sys_poll+0x190/0x490 [ 1908.897606] ? __ia32_sys_pselect6+0x240/0x240 [ 1908.898585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.899710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1908.900783] ? trace_hardirqs_on+0x5b/0x180 [ 1908.901719] do_syscall_64+0x33/0x40 [ 1908.902496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.903595] RIP: 0033:0x7f1dd3501b19 [ 1908.904362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.908324] RSP: 002b:00007f1dd0a77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1908.909980] RAX: ffffffffffffffda RBX: 00007f1dd3614f60 RCX: 00007f1dd3501b19 [ 1908.911510] RDX: 0000000000000047 RSI: 0000000000000006 RDI: 0000000020000040 [ 1908.913053] RBP: 00007f1dd0a771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1908.914594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.916125] R13: 00007ffced23f4ff R14: 00007f1dd0a77300 R15: 0000000000022000 10:51:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1929.006754] FAULT_INJECTION: forcing a failure. [ 1929.006754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1929.008445] CPU: 1 PID: 18610 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1929.009421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.010563] Call Trace: [ 1929.010942] dump_stack+0x107/0x167 [ 1929.011459] should_fail.cold+0x5/0xa [ 1929.012005] __alloc_pages_nodemask+0x182/0x600 [ 1929.012645] ? mark_held_locks+0x9e/0xe0 [ 1929.013228] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1929.014069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1929.014811] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1929.015586] alloc_pages_current+0x187/0x280 [ 1929.016219] __get_free_pages+0xc/0xa0 [ 1929.016766] __pollwait+0x276/0x430 [ 1929.017296] ? poll_initwait+0x180/0x180 [ 1929.017874] n_tty_poll+0xc0/0x900 [ 1929.018375] ? n_tty_ioctl+0x370/0x370 [ 1929.018935] tty_poll+0x144/0x1c0 [ 1929.019416] ? tty_release+0xe90/0xe90 [ 1929.019958] do_sys_poll+0x60d/0xe50 [ 1929.020499] ? compat_core_sys_select+0x8b0/0x8b0 [ 1929.021185] ? __lock_acquire+0x1657/0x5b00 [ 1929.021814] ? mark_lock+0xf5/0x2df0 [ 1929.022334] ? lock_chain_count+0x20/0x20 [ 1929.022904] ? perf_trace_lock+0xac/0x490 [ 1929.023465] ? SOFTIRQ_verbose+0x10/0x10 [ 1929.024036] ? __lockdep_reset_lock+0x180/0x180 [ 1929.024678] ? __lock_acquire+0xbb1/0x5b00 [ 1929.025297] ? poll_initwait+0x180/0x180 [ 1929.025863] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.026656] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.027456] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.028257] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.029044] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.029847] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.030632] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 10:51:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1929.031429] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 10:51:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) (fail_nth: 2) 10:51:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1929.032372] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 1929.033481] ? nsec_to_clock_t+0x30/0x30 [ 1929.034064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1929.034784] ? trace_hardirqs_on+0x5b/0x180 [ 1929.035401] ? recalibrate_cpu_khz+0x10/0x10 [ 1929.036017] ? ktime_get_ts64+0x220/0x2f0 [ 1929.036642] __x64_sys_poll+0x190/0x490 [ 1929.037252] ? __ia32_sys_pselect6+0x240/0x240 [ 1929.037887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1929.038637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1929.039358] ? trace_hardirqs_on+0x5b/0x180 [ 1929.039959] do_syscall_64+0x33/0x40 [ 1929.040461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1929.041152] RIP: 0033:0x7f1dd3501b19 [ 1929.041671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1929.044182] RSP: 002b:00007f1dd0a77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1929.045281] RAX: ffffffffffffffda RBX: 00007f1dd3614f60 RCX: 00007f1dd3501b19 [ 1929.046324] RDX: 0000000000000047 RSI: 0000000000000006 RDI: 0000000020000040 [ 1929.047316] RBP: 00007f1dd0a771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.048312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.049294] R13: 00007ffced23f4ff R14: 00007f1dd0a77300 R15: 0000000000022000 10:51:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8800000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) (fail_nth: 3) [ 1929.445046] FAULT_INJECTION: forcing a failure. [ 1929.445046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.446853] CPU: 1 PID: 18646 Comm: syz-executor.2 Not tainted 5.10.234 #1 [ 1929.447838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1929.449000] Call Trace: [ 1929.449408] dump_stack+0x107/0x167 [ 1929.449925] should_fail.cold+0x5/0xa [ 1929.450471] _copy_to_user+0x2e/0x180 [ 1929.451024] simple_read_from_buffer+0xcc/0x160 [ 1929.451711] proc_fail_nth_read+0x198/0x230 [ 1929.452322] ? proc_sessionid_read+0x230/0x230 [ 1929.452963] ? security_file_permission+0xb1/0xe0 [ 1929.453668] ? proc_sessionid_read+0x230/0x230 [ 1929.454314] vfs_read+0x228/0x620 [ 1929.454815] ksys_read+0x12d/0x260 [ 1929.455320] ? vfs_write+0xb10/0xb10 [ 1929.455858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1929.456593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1929.457332] do_syscall_64+0x33/0x40 [ 1929.457863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1929.458590] RIP: 0033:0x7f1dd34b469c [ 1929.459115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1929.461718] RSP: 002b:00007f1dd0a77170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1929.462791] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1dd34b469c [ 1929.463816] RDX: 000000000000000f RSI: 00007f1dd0a771e0 RDI: 0000000000000004 [ 1929.464837] RBP: 00007f1dd0a771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.465859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.466872] R13: 00007ffced23f4ff R14: 00007f1dd0a77300 R15: 0000000000022000 10:51:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 10:51:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:51:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 10:51:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:51:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:51:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 10:51:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:51:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:51:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:51:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:51:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10:52:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 10:52:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 10:52:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:52:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x8}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) 10:52:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x64}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) 10:52:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3a7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:52:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10:52:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="020000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x7a1}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x6400}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="030000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:52:30 executing program 5: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 10:52:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 10:52:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="040000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) 10:52:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0xa107}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:48 executing program 5: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="300000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0xff00}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:52:48 executing program 5: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:52:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:52:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007f00000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:52:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:06 executing program 6: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0x8}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 10:53:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200200008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0x64}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200300008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 6: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000000c0)) 10:53:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200400008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) 10:53:25 executing program 6: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:25 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0x7a1}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200500008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200600008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) 10:53:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:25 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200700008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0x6400}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:26 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) 10:53:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:53:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200800008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0xa107}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="201800008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:53:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:53:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:53:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:53:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x0, 0xff00}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:53:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:54:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:54:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="201c00008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:54:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="206900008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:54:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20f000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:54:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x8}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:19 executing program 4: r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x64}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) 10:54:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200003008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, 0x6, 0x1, 0x401}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x7a1}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 1) 10:54:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 1) [ 2096.270849] FAULT_INJECTION: forcing a failure. [ 2096.270849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.272305] CPU: 1 PID: 19410 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 2096.273088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.274021] Call Trace: [ 2096.274323] dump_stack+0x107/0x167 [ 2096.274734] should_fail.cold+0x5/0xa [ 2096.275187] _copy_from_user+0x2e/0x1b0 [ 2096.275638] io_uring_setup+0x9b/0x2980 [ 2096.276090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.276633] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2096.277210] ? wait_for_completion_io+0x270/0x270 [ 2096.277754] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.278281] ? vfs_write+0x354/0xb10 [ 2096.278704] ? fput_many+0x2f/0x1a0 [ 2096.279123] ? ksys_write+0x1a9/0x260 [ 2096.279554] ? __ia32_sys_read+0xb0/0xb0 [ 2096.280015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.280606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.281184] do_syscall_64+0x33/0x40 [ 2096.281602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.282180] RIP: 0033:0x7fd993a52b19 [ 2096.282598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.284670] RSP: 002b:00007fd990fc8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2096.285527] RAX: ffffffffffffffda RBX: 00007fd993b65f60 RCX: 00007fd993a52b19 [ 2096.286331] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2096.287136] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2096.287937] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2096.288742] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2096.314459] FAULT_INJECTION: forcing a failure. [ 2096.314459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.317167] CPU: 0 PID: 19414 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2096.318687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.320522] Call Trace: [ 2096.321110] dump_stack+0x107/0x167 [ 2096.321929] should_fail.cold+0x5/0xa [ 2096.322786] _copy_from_user+0x2e/0x1b0 [ 2096.323691] io_uring_setup+0x9b/0x2980 [ 2096.324596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.325686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2096.326836] ? wait_for_completion_io+0x270/0x270 [ 2096.327941] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.328991] ? vfs_write+0x354/0xb10 [ 2096.329837] ? fput_many+0x2f/0x1a0 [ 2096.330661] ? ksys_write+0x1a9/0x260 [ 2096.331531] ? __ia32_sys_read+0xb0/0xb0 [ 2096.332459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.333653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.334820] do_syscall_64+0x33/0x40 [ 2096.335666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.336814] RIP: 0033:0x7fb073b23b19 [ 2096.337637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.341730] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2096.343427] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2096.345016] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2096.346593] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2096.348194] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2096.349773] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:54:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:38 executing program 4: r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 2) 10:54:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 2) 10:54:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x6400}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="208004008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2114.569512] FAULT_INJECTION: forcing a failure. [ 2114.569512] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.571410] CPU: 0 PID: 19436 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 2114.572556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2114.573911] Call Trace: [ 2114.574350] dump_stack+0x107/0x167 [ 2114.574951] should_fail.cold+0x5/0xa [ 2114.575598] ? io_uring_setup+0x258/0x2980 [ 2114.576304] should_failslab+0x5/0x20 [ 2114.576928] kmem_cache_alloc_trace+0x55/0x320 [ 2114.577684] io_uring_setup+0x258/0x2980 [ 2114.578358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2114.579163] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2114.579994] ? wait_for_completion_io+0x270/0x270 [ 2114.580780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2114.581658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2114.582506] do_syscall_64+0x33/0x40 [ 2114.583114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2114.583951] RIP: 0033:0x7fd993a52b19 [ 2114.584544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2114.587575] RSP: 002b:00007fd990fc8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2114.588851] RAX: ffffffffffffffda RBX: 00007fd993b65f60 RCX: 00007fd993a52b19 [ 2114.590013] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2114.591179] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2114.592359] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2114.593521] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2114.599867] FAULT_INJECTION: forcing a failure. [ 2114.599867] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.602868] CPU: 1 PID: 19441 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2114.604723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2114.606923] Call Trace: [ 2114.607623] dump_stack+0x107/0x167 [ 2114.608447] should_fail.cold+0x5/0xa [ 2114.609308] ? io_uring_setup+0x258/0x2980 [ 2114.610264] should_failslab+0x5/0x20 [ 2114.611132] kmem_cache_alloc_trace+0x55/0x320 [ 2114.612209] io_uring_setup+0x258/0x2980 [ 2114.613131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2114.614227] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2114.615361] ? wait_for_completion_io+0x270/0x270 [ 2114.616480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2114.617644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2114.618796] do_syscall_64+0x33/0x40 [ 2114.619631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2114.620763] RIP: 0033:0x7fb073b23b19 [ 2114.621584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2114.625699] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2114.627415] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2114.628998] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2114.630576] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2114.632170] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2114.633760] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:54:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 3) 10:54:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200005008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2114.731316] FAULT_INJECTION: forcing a failure. [ 2114.731316] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.734003] CPU: 1 PID: 19444 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 2114.735715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2114.737751] Call Trace: [ 2114.738426] dump_stack+0x107/0x167 [ 2114.739350] should_fail.cold+0x5/0xa [ 2114.740263] ? create_object.isra.0+0x3a/0xa20 [ 2114.741359] should_failslab+0x5/0x20 [ 2114.742233] kmem_cache_alloc+0x5b/0x310 [ 2114.743305] create_object.isra.0+0x3a/0xa20 [ 2114.744381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2114.745645] kmem_cache_alloc_trace+0x151/0x320 [ 2114.746799] io_uring_setup+0x258/0x2980 [ 2114.747754] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2114.748980] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2114.750298] ? wait_for_completion_io+0x270/0x270 [ 2114.751435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2114.752876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2114.754144] do_syscall_64+0x33/0x40 [ 2114.755163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2114.756343] RIP: 0033:0x7fd993a52b19 [ 2114.757365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2114.762428] RSP: 002b:00007fd990fc8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2114.764535] RAX: ffffffffffffffda RBX: 00007fd993b65f60 RCX: 00007fd993a52b19 [ 2114.766540] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2114.768530] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2114.770512] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2114.772531] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:54:54 executing program 4: r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 4) 10:54:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0xa107}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 3) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200006008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200007008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200018008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2130.575607] FAULT_INJECTION: forcing a failure. [ 2130.575607] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.577103] CPU: 0 PID: 19530 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2130.577946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.578961] Call Trace: [ 2130.579280] dump_stack+0x107/0x167 [ 2130.579744] should_fail.cold+0x5/0xa [ 2130.580209] ? create_object.isra.0+0x3a/0xa20 [ 2130.580768] should_failslab+0x5/0x20 [ 2130.581237] kmem_cache_alloc+0x5b/0x310 [ 2130.581736] create_object.isra.0+0x3a/0xa20 [ 2130.582273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2130.582902] kmem_cache_alloc_trace+0x151/0x320 [ 2130.583485] io_uring_setup+0x258/0x2980 [ 2130.583993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2130.584585] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2130.585198] ? wait_for_completion_io+0x270/0x270 [ 2130.585798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2130.586439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.587088] do_syscall_64+0x33/0x40 [ 2130.587550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2130.588174] RIP: 0033:0x7fb073b23b19 [ 2130.588629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.590883] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2130.591831] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2130.592700] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2130.593570] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2130.594440] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2130.595325] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:54:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0xff00}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200020008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:54:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 4) 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20003f008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:54:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:54:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2202, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:54:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2130.816580] FAULT_INJECTION: forcing a failure. [ 2130.816580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2130.820386] CPU: 1 PID: 19604 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2130.821826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.823570] Call Trace: [ 2130.824124] dump_stack+0x107/0x167 [ 2130.824882] should_fail.cold+0x5/0xa 10:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200069008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2130.825681] __alloc_pages_nodemask+0x182/0x600 [ 2130.826723] ? lock_release+0x680/0x680 10:54:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2130.827564] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2130.828902] ? lock_downgrade+0x6d0/0x6d0 [ 2130.829772] alloc_pages_current+0x187/0x280 [ 2130.830693] kmalloc_order+0x35/0x160 [ 2130.831497] kmalloc_order_trace+0x14/0xa0 [ 2130.832377] io_uring_setup+0x33c/0x2980 [ 2130.833205] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2130.834191] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2130.835234] ? wait_for_completion_io+0x270/0x270 [ 2130.836258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2130.837323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.838375] do_syscall_64+0x33/0x40 [ 2130.839133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2130.840192] RIP: 0033:0x7fb073b23b19 [ 2130.840952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.844690] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2130.846241] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2130.847696] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2130.849147] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2130.850604] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2130.852073] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 5) 10:55:14 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0x8}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:55:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2204, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200480008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) [ 2150.286912] FAULT_INJECTION: forcing a failure. [ 2150.286912] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.289402] CPU: 1 PID: 19631 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2150.290854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.292584] Call Trace: [ 2150.293144] dump_stack+0x107/0x167 [ 2150.293906] should_fail.cold+0x5/0xa [ 2150.294705] ? create_object.isra.0+0x3a/0xa20 [ 2150.295670] should_failslab+0x5/0x20 [ 2150.296460] kmem_cache_alloc+0x5b/0x310 [ 2150.297313] create_object.isra.0+0x3a/0xa20 [ 2150.298224] ? kasan_unpoison_shadow+0x33/0x50 [ 2150.299178] kmalloc_order+0xfe/0x160 [ 2150.300008] kmalloc_order_trace+0x14/0xa0 [ 2150.301089] io_uring_setup+0x33c/0x2980 [ 2150.302170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.303335] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2150.304549] ? wait_for_completion_io+0x270/0x270 [ 2150.305713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.306941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.308195] do_syscall_64+0x33/0x40 [ 2150.309071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.310289] RIP: 0033:0x7fb073b23b19 [ 2150.311121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.314981] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2150.316576] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2150.318053] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2150.319530] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2150.321012] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2150.322486] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x220b, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 6) 10:55:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0x64}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2150.467217] FAULT_INJECTION: forcing a failure. [ 2150.467217] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.469839] CPU: 0 PID: 19646 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2150.471400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.473257] Call Trace: [ 2150.473856] dump_stack+0x107/0x167 [ 2150.474680] should_fail.cold+0x5/0xa [ 2150.475542] ? io_uring_setup+0x40b/0x2980 [ 2150.476511] should_failslab+0x5/0x20 [ 2150.477379] kmem_cache_alloc_trace+0x55/0x320 [ 2150.478419] io_uring_setup+0x40b/0x2980 [ 2150.479348] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2150.480458] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2150.481599] ? wait_for_completion_io+0x270/0x270 [ 2150.482720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.483917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.485070] do_syscall_64+0x33/0x40 [ 2150.485908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2150.487070] RIP: 0033:0x7fb073b23b19 [ 2150.487922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.492110] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2150.493832] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2150.495448] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2150.497074] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2150.498694] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2150.500312] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:32 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0x7a1}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:55:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200002008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:55:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2214, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 7) [ 2168.209071] FAULT_INJECTION: forcing a failure. [ 2168.209071] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.211805] CPU: 1 PID: 19667 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2168.213390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.215264] Call Trace: [ 2168.215877] dump_stack+0x107/0x167 [ 2168.216703] should_fail.cold+0x5/0xa [ 2168.217570] ? create_object.isra.0+0x3a/0xa20 [ 2168.218617] should_failslab+0x5/0x20 [ 2168.219477] kmem_cache_alloc+0x5b/0x310 [ 2168.220426] create_object.isra.0+0x3a/0xa20 [ 2168.221414] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2168.222578] kmem_cache_alloc_trace+0x151/0x320 [ 2168.223641] io_uring_setup+0x40b/0x2980 [ 2168.224578] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2168.225668] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2168.226812] ? wait_for_completion_io+0x270/0x270 [ 2168.227945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2168.229128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.230294] do_syscall_64+0x33/0x40 [ 2168.231136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2168.232309] RIP: 0033:0x7fb073b23b19 [ 2168.233152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.237332] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2168.239058] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2168.240687] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2168.242307] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2168.243936] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2168.245529] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200003008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0x6400}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:55:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2290, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 8) 10:55:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200004008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0xa107}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2168.531178] FAULT_INJECTION: forcing a failure. [ 2168.531178] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.533850] CPU: 1 PID: 19692 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2168.535275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.536987] Call Trace: [ 2168.537535] dump_stack+0x107/0x167 [ 2168.538288] should_fail.cold+0x5/0xa [ 2168.539071] ? create_object.isra.0+0x3a/0xa20 [ 2168.540019] should_failslab+0x5/0x20 [ 2168.540799] kmem_cache_alloc+0x5b/0x310 [ 2168.541637] create_object.isra.0+0x3a/0xa20 [ 2168.542547] kmemleak_alloc_percpu+0xa0/0x100 [ 2168.543474] pcpu_alloc+0x4e2/0x1240 [ 2168.544266] ? io_tctx_exit_cb+0xf0/0xf0 [ 2168.545100] percpu_ref_init+0x31/0x3d0 [ 2168.545917] io_uring_setup+0x47a/0x2980 [ 2168.546758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2168.547748] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2168.548804] ? wait_for_completion_io+0x270/0x270 [ 2168.549818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2168.550904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2168.551968] do_syscall_64+0x33/0x40 [ 2168.552736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2168.553796] RIP: 0033:0x7fb073b23b19 [ 2168.554564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.558371] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2168.559961] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2168.561396] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2168.562904] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2168.564363] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2168.565794] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:55:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200005008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 9) 10:55:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:55:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0, 0x0, 0xff00}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2184.151902] FAULT_INJECTION: forcing a failure. [ 2184.151902] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.153532] CPU: 1 PID: 19708 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2184.154509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.155638] Call Trace: [ 2184.156008] dump_stack+0x107/0x167 [ 2184.156535] should_fail.cold+0x5/0xa [ 2184.157087] ? create_object.isra.0+0x3a/0xa20 [ 2184.157721] should_failslab+0x5/0x20 [ 2184.158244] kmem_cache_alloc+0x5b/0x310 [ 2184.158808] create_object.isra.0+0x3a/0xa20 [ 2184.159444] kmemleak_alloc_percpu+0xa0/0x100 [ 2184.160099] pcpu_alloc+0x4e2/0x1240 [ 2184.160627] ? io_tctx_exit_cb+0xf0/0xf0 [ 2184.161198] percpu_ref_init+0x31/0x3d0 [ 2184.161767] io_uring_setup+0x47a/0x2980 [ 2184.162338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2184.163018] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2184.163735] ? wait_for_completion_io+0x270/0x270 [ 2184.164450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2184.165183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.165917] do_syscall_64+0x33/0x40 [ 2184.166441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2184.167146] RIP: 0033:0x7fb073b23b19 [ 2184.167670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.170259] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2184.171434] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2184.172460] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2184.173513] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2184.174505] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2184.175541] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:55:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200006008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:55:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 10) [ 2184.304487] FAULT_INJECTION: forcing a failure. [ 2184.304487] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.306242] CPU: 0 PID: 19726 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2184.307250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.308489] Call Trace: [ 2184.308870] dump_stack+0x107/0x167 [ 2184.309501] should_fail.cold+0x5/0xa [ 2184.310068] ? percpu_ref_init+0xd8/0x3d0 [ 2184.310680] should_failslab+0x5/0x20 [ 2184.311226] kmem_cache_alloc_trace+0x55/0x320 [ 2184.311936] ? io_tctx_exit_cb+0xf0/0xf0 [ 2184.312548] percpu_ref_init+0xd8/0x3d0 [ 2184.313112] io_uring_setup+0x47a/0x2980 [ 2184.313695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2184.314380] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2184.315101] ? wait_for_completion_io+0x270/0x270 [ 2184.315802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2184.316562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.317310] do_syscall_64+0x33/0x40 [ 2184.317835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2184.318563] RIP: 0033:0x7fb073b23b19 [ 2184.319083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.321644] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2184.322677] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2184.323644] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2184.324646] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2184.325625] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2184.326672] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:55:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:55:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200007008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:55:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:55:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:55:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x8}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:55:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 11) [ 2184.515507] FAULT_INJECTION: forcing a failure. [ 2184.515507] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.517338] CPU: 0 PID: 19743 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2184.518377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2184.519621] Call Trace: [ 2184.520047] dump_stack+0x107/0x167 [ 2184.520599] should_fail.cold+0x5/0xa [ 2184.521167] ? create_object.isra.0+0x3a/0xa20 [ 2184.521847] should_failslab+0x5/0x20 [ 2184.522389] kmem_cache_alloc+0x5b/0x310 [ 2184.523006] create_object.isra.0+0x3a/0xa20 [ 2184.523662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2184.524452] kmem_cache_alloc_trace+0x151/0x320 [ 2184.525131] ? io_tctx_exit_cb+0xf0/0xf0 [ 2184.525753] percpu_ref_init+0xd8/0x3d0 [ 2184.526367] io_uring_setup+0x47a/0x2980 [ 2184.526959] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2184.527651] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2184.528495] ? wait_for_completion_io+0x270/0x270 [ 2184.529243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2184.530009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2184.530723] do_syscall_64+0x33/0x40 [ 2184.531262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2184.532010] RIP: 0033:0x7fb073b23b19 [ 2184.532575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.535182] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2184.536285] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2184.537263] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2184.538291] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2184.539379] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2184.540483] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:56:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 12) 10:56:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200008008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:56:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:56:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x64}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2201.660050] FAULT_INJECTION: forcing a failure. [ 2201.660050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2201.664515] CPU: 1 PID: 19757 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2201.665489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.666606] Call Trace: [ 2201.666962] dump_stack+0x107/0x167 [ 2201.667429] should_fail.cold+0x5/0xa [ 2201.667921] __alloc_pages_nodemask+0x182/0x600 [ 2201.668545] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2201.669382] ? cap_capable+0x1cd/0x230 [ 2201.669937] alloc_pages_current+0x187/0x280 [ 2201.670555] __get_free_pages+0xc/0xa0 [ 2201.671066] io_uring_setup+0xe27/0x2980 [ 2201.671616] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2201.672329] ? wait_for_completion_io+0x270/0x270 [ 2201.673024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.673814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.674623] do_syscall_64+0x33/0x40 [ 2201.675143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2201.675864] RIP: 0033:0x7fb073b23b19 [ 2201.676376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.678932] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2201.680035] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2201.681050] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2201.682091] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2201.683084] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2201.684079] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:56:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x7a1}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200018008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 10:56:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 13) 10:56:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x6400}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2201.868450] FAULT_INJECTION: forcing a failure. [ 2201.868450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2201.870953] CPU: 0 PID: 19877 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2201.871901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.872978] Call Trace: [ 2201.873316] dump_stack+0x107/0x167 [ 2201.873765] should_fail.cold+0x5/0xa [ 2201.874339] __alloc_pages_nodemask+0x182/0x600 [ 2201.875067] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2201.875934] ? cap_capable+0x1cd/0x230 [ 2201.876464] alloc_pages_current+0x187/0x280 [ 2201.877095] __get_free_pages+0xc/0xa0 [ 2201.877617] io_uring_setup+0xf9a/0x2980 [ 2201.878179] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2201.878873] ? wait_for_completion_io+0x270/0x270 [ 2201.879573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.880337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.881054] do_syscall_64+0x33/0x40 [ 2201.881557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2201.882269] RIP: 0033:0x7fb073b23b19 [ 2201.882768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.885670] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2201.886802] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2201.887792] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2201.888793] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2201.889692] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2201.890635] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:56:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:56:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:56:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 14) [ 2218.247163] FAULT_INJECTION: forcing a failure. [ 2218.247163] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.248860] CPU: 1 PID: 19897 Comm: syz-executor.7 Not tainted 5.10.234 #1 10:56:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 1) [ 2218.249752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 10:56:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0xa107}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20001c008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2218.251110] Call Trace: [ 2218.251586] dump_stack+0x107/0x167 [ 2218.252097] should_fail.cold+0x5/0xa [ 2218.252633] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2218.253370] should_failslab+0x5/0x20 [ 2218.253916] kmem_cache_alloc_trace+0x55/0x320 [ 2218.254556] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2218.255304] io_uring_setup+0x14f6/0x2980 [ 2218.255870] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.256583] ? wait_for_completion_io+0x270/0x270 [ 2218.257248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.257958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.258673] do_syscall_64+0x33/0x40 [ 2218.259203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.259927] RIP: 0033:0x7fb073b23b19 [ 2218.260498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.263045] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.264049] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2218.264995] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2218.265940] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2218.266904] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2218.267909] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2218.283320] FAULT_INJECTION: forcing a failure. [ 2218.283320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2218.285154] CPU: 0 PID: 19904 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2218.286051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.287243] Call Trace: [ 2218.287614] dump_stack+0x107/0x167 [ 2218.288111] should_fail.cold+0x5/0xa [ 2218.288664] _copy_from_user+0x2e/0x1b0 [ 2218.289202] io_uring_setup+0x9b/0x2980 [ 2218.289749] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2218.290433] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.291208] ? wait_for_completion_io+0x270/0x270 [ 2218.291884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2218.292657] ? vfs_write+0x354/0xb10 [ 2218.293207] ? fput_many+0x2f/0x1a0 [ 2218.293723] ? ksys_write+0x1a9/0x260 [ 2218.294285] ? __ia32_sys_read+0xb0/0xb0 [ 2218.294852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.295648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.296410] do_syscall_64+0x33/0x40 [ 2218.296902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.297627] RIP: 0033:0x7f910a3bdb19 [ 2218.298150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.300826] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.301940] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2218.302949] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2218.303928] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2218.304922] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2218.305913] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:56:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200069008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) 10:56:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0xff00}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 15) 10:56:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 2) [ 2218.466122] FAULT_INJECTION: forcing a failure. [ 2218.466122] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.467862] CPU: 0 PID: 19917 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2218.468926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.470101] Call Trace: [ 2218.470484] dump_stack+0x107/0x167 [ 2218.470999] should_fail.cold+0x5/0xa [ 2218.471546] ? create_object.isra.0+0x3a/0xa20 [ 2218.472186] should_failslab+0x5/0x20 [ 2218.472748] kmem_cache_alloc+0x5b/0x310 [ 2218.473309] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2218.474165] create_object.isra.0+0x3a/0xa20 [ 2218.474778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2218.475482] kmem_cache_alloc_trace+0x151/0x320 [ 2218.476159] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2218.476915] io_uring_setup+0x14f6/0x2980 [ 2218.477531] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.478286] ? wait_for_completion_io+0x270/0x270 [ 2218.479034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.479831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.480615] do_syscall_64+0x33/0x40 [ 2218.481161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.481896] RIP: 0033:0x7fb073b23b19 [ 2218.482423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.485680] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.486756] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2218.487740] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2218.488739] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2218.489708] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2218.490720] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2218.491333] FAULT_INJECTION: forcing a failure. [ 2218.491333] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.493641] CPU: 1 PID: 19921 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2218.494551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.495640] Call Trace: [ 2218.495996] dump_stack+0x107/0x167 [ 2218.496530] should_fail.cold+0x5/0xa [ 2218.497045] ? io_uring_setup+0x258/0x2980 [ 2218.497594] should_failslab+0x5/0x20 [ 2218.498117] kmem_cache_alloc_trace+0x55/0x320 [ 2218.498737] io_uring_setup+0x258/0x2980 [ 2218.499270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2218.499926] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.500671] ? wait_for_completion_io+0x270/0x270 [ 2218.501320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.502036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.502730] do_syscall_64+0x33/0x40 [ 2218.503235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.503924] RIP: 0033:0x7f910a3bdb19 [ 2218.504427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.506786] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.507805] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2218.508759] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2218.509665] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2218.510564] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2218.511470] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:56:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2235.221111] FAULT_INJECTION: forcing a failure. [ 2235.221111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.222943] CPU: 0 PID: 19940 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2235.223974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.225166] Call Trace: [ 2235.225528] dump_stack+0x107/0x167 [ 2235.226046] should_fail.cold+0x5/0xa [ 2235.226596] _copy_from_user+0x2e/0x1b0 [ 2235.227139] io_uring_setup+0x9b/0x2980 [ 2235.227943] ? __mutex_unlock_slowpath+0xe1/0x600 10:56:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 1) 10:56:39 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 16) 10:56:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 3) [ 2235.229500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.231558] ? wait_for_completion_io+0x270/0x270 [ 2235.233233] ? rcu_read_lock_any_held+0x75/0xa0 [ 2235.234602] ? vfs_write+0x354/0xb10 [ 2235.235701] ? fput_many+0x2f/0x1a0 [ 2235.236841] ? ksys_write+0x1a9/0x260 [ 2235.237973] ? __ia32_sys_read+0xb0/0xb0 [ 2235.239155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.240747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.242456] do_syscall_64+0x33/0x40 [ 2235.243665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.244948] RIP: 0033:0x7fb3e1098b19 [ 2235.245465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.247944] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.249010] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2235.249552] FAULT_INJECTION: forcing a failure. [ 2235.249552] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.249925] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2235.249934] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2235.249943] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2235.249951] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2235.255131] CPU: 1 PID: 19945 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2235.255980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.257073] Call Trace: [ 2235.257420] dump_stack+0x107/0x167 [ 2235.257883] should_fail.cold+0x5/0xa [ 2235.258383] ? create_object.isra.0+0x3a/0xa20 [ 2235.258965] should_failslab+0x5/0x20 [ 2235.259459] kmem_cache_alloc+0x5b/0x310 [ 2235.259689] FAULT_INJECTION: forcing a failure. [ 2235.259689] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.259997] create_object.isra.0+0x3a/0xa20 [ 2235.262329] kmemleak_alloc_percpu+0xa0/0x100 [ 2235.262943] pcpu_alloc+0x4e2/0x1240 [ 2235.263438] ? io_async_queue_proc+0x80/0x80 [ 2235.263989] percpu_ref_init+0x31/0x3d0 [ 2235.264502] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2235.265217] io_uring_setup+0x14f6/0x2980 [ 2235.265763] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.266473] ? wait_for_completion_io+0x270/0x270 [ 2235.267135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.267832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.268539] do_syscall_64+0x33/0x40 [ 2235.269072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.269739] RIP: 0033:0x7fb073b23b19 [ 2235.270215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.272658] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.273693] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2235.274659] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2235.275634] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2235.276606] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2235.277556] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2235.278563] CPU: 0 PID: 19947 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2235.279653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.280904] Call Trace: [ 2235.281293] dump_stack+0x107/0x167 [ 2235.281804] should_fail.cold+0x5/0xa [ 2235.282338] ? create_object.isra.0+0x3a/0xa20 [ 2235.283000] should_failslab+0x5/0x20 [ 2235.283576] kmem_cache_alloc+0x5b/0x310 [ 2235.284153] create_object.isra.0+0x3a/0xa20 [ 2235.284769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2235.285491] kmem_cache_alloc_trace+0x151/0x320 [ 2235.286185] io_uring_setup+0x258/0x2980 [ 2235.286766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2235.287491] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.288251] ? wait_for_completion_io+0x270/0x270 [ 2235.289000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.289740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.290465] do_syscall_64+0x33/0x40 [ 2235.291001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.291797] RIP: 0033:0x7f910a3bdb19 [ 2235.292354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.295123] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.296262] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2235.297386] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2235.298419] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2235.299423] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2235.300468] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:56:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2250.582502] FAULT_INJECTION: forcing a failure. [ 2250.582502] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.584202] CPU: 1 PID: 19970 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2250.585189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.586348] Call Trace: [ 2250.586723] dump_stack+0x107/0x167 [ 2250.587248] should_fail.cold+0x5/0xa [ 2250.587785] ? io_uring_setup+0x258/0x2980 [ 2250.588379] should_failslab+0x5/0x20 [ 2250.588922] kmem_cache_alloc_trace+0x55/0x320 [ 2250.589567] io_uring_setup+0x258/0x2980 [ 2250.590145] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2250.590824] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.591534] ? wait_for_completion_io+0x270/0x270 [ 2250.592228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 10:56:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 17) 10:56:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0x8}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 2) 10:56:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000038000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 4) [ 2250.593288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.594203] do_syscall_64+0x33/0x40 [ 2250.594728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.595446] RIP: 0033:0x7fb3e1098b19 [ 2250.595971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.598556] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.599629] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2250.600694] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2250.601733] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.602735] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2250.603727] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2250.609642] FAULT_INJECTION: forcing a failure. [ 2250.609642] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.610215] FAULT_INJECTION: forcing a failure. [ 2250.610215] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.613131] CPU: 0 PID: 19967 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2250.616974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.619489] Call Trace: [ 2250.620302] dump_stack+0x107/0x167 [ 2250.621442] should_fail.cold+0x5/0xa [ 2250.622607] ? io_uring_setup+0x33c/0x2980 [ 2250.623904] should_failslab+0x5/0x20 [ 2250.625074] __kmalloc+0x72/0x390 [ 2250.626134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.627691] io_uring_setup+0x33c/0x2980 [ 2250.628971] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2250.630443] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.631951] ? wait_for_completion_io+0x270/0x270 [ 2250.633482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.635085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.636677] do_syscall_64+0x33/0x40 [ 2250.637833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.639382] RIP: 0033:0x7f910a3bdb19 [ 2250.640508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.646113] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.648441] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2250.650706] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2250.652969] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.655184] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2250.657410] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2250.659692] CPU: 1 PID: 19969 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2250.660737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.661951] Call Trace: [ 2250.662341] dump_stack+0x107/0x167 [ 2250.662875] should_fail.cold+0x5/0xa [ 2250.663427] ? create_object.isra.0+0x3a/0xa20 [ 2250.664065] should_failslab+0x5/0x20 [ 2250.664599] kmem_cache_alloc+0x5b/0x310 [ 2250.665176] create_object.isra.0+0x3a/0xa20 [ 2250.665790] kmemleak_alloc_percpu+0xa0/0x100 [ 2250.666409] pcpu_alloc+0x4e2/0x1240 [ 2250.666941] ? io_async_queue_proc+0x80/0x80 [ 2250.667541] percpu_ref_init+0x31/0x3d0 [ 2250.668087] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2250.668831] io_uring_setup+0x14f6/0x2980 [ 2250.669402] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.670088] ? wait_for_completion_io+0x270/0x270 [ 2250.670764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.671487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.672190] do_syscall_64+0x33/0x40 [ 2250.672698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.673402] RIP: 0033:0x7fb073b23b19 [ 2250.673910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.676399] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.677437] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2250.678401] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2250.679364] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2250.680326] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2250.681297] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:56:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200080048000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 18) 10:56:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0x64}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 3) 10:56:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:56:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2250.819548] FAULT_INJECTION: forcing a failure. [ 2250.819548] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.821258] CPU: 1 PID: 19978 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2250.822442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.823869] Call Trace: [ 2250.824328] dump_stack+0x107/0x167 [ 2250.824959] should_fail.cold+0x5/0xa [ 2250.825616] ? percpu_ref_init+0xd8/0x3d0 [ 2250.826334] should_failslab+0x5/0x20 [ 2250.826991] kmem_cache_alloc_trace+0x55/0x320 [ 2250.827757] ? io_async_queue_proc+0x80/0x80 [ 2250.828511] percpu_ref_init+0xd8/0x3d0 [ 2250.829215] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2250.830138] io_uring_setup+0x14f6/0x2980 [ 2250.830857] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.831733] ? wait_for_completion_io+0x270/0x270 [ 2250.832583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.832910] FAULT_INJECTION: forcing a failure. [ 2250.832910] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.833523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.833552] do_syscall_64+0x33/0x40 [ 2250.837759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.838632] RIP: 0033:0x7fb073b23b19 [ 2250.839276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.842440] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.843732] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2250.844958] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2250.846166] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2250.847365] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2250.848567] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2250.849819] CPU: 0 PID: 19981 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2250.851498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.853498] Call Trace: [ 2250.854135] dump_stack+0x107/0x167 [ 2250.855011] should_fail.cold+0x5/0xa [ 2250.855927] ? create_object.isra.0+0x3a/0xa20 [ 2250.857031] should_failslab+0x5/0x20 [ 2250.857914] kmem_cache_alloc+0x5b/0x310 [ 2250.858864] create_object.isra.0+0x3a/0xa20 [ 2250.859874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.861065] kmem_cache_alloc_trace+0x151/0x320 [ 2250.862148] io_uring_setup+0x258/0x2980 [ 2250.863088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2250.864197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.865371] ? wait_for_completion_io+0x270/0x270 [ 2250.866510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.867735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.868931] do_syscall_64+0x33/0x40 [ 2250.869790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.870971] RIP: 0033:0x7fb3e1098b19 [ 2250.871839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.876107] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.877873] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2250.879496] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2250.881256] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.883234] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2250.885252] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:56:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000058000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:56:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0x7a1}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:56:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000068000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:56:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:57:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 5) 10:57:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x18}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:57:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 4) 10:57:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:57:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:57:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000078000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:57:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0x6400}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:57:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 19) [ 2268.372905] FAULT_INJECTION: forcing a failure. [ 2268.372905] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.374620] CPU: 1 PID: 20015 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2268.375571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.376620] Call Trace: [ 2268.377010] dump_stack+0x107/0x167 [ 2268.377510] should_fail.cold+0x5/0xa [ 2268.378025] ? create_object.isra.0+0x3a/0xa20 [ 2268.378618] should_failslab+0x5/0x20 [ 2268.379153] kmem_cache_alloc+0x5b/0x310 [ 2268.379748] create_object.isra.0+0x3a/0xa20 [ 2268.380350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.381021] kmem_cache_alloc_trace+0x151/0x320 [ 2268.381692] ? io_async_queue_proc+0x80/0x80 [ 2268.382308] percpu_ref_init+0xd8/0x3d0 [ 2268.382855] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2268.383546] io_uring_setup+0x14f6/0x2980 [ 2268.384103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2268.384824] ? wait_for_completion_io+0x270/0x270 [ 2268.385580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.386299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.386965] do_syscall_64+0x33/0x40 [ 2268.387459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.388163] RIP: 0033:0x7fb073b23b19 [ 2268.388690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.391191] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2268.392240] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2268.393230] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2268.394220] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2268.395084] FAULT_INJECTION: forcing a failure. [ 2268.395084] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.395185] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2268.395199] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2268.398800] CPU: 0 PID: 20020 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2268.399674] FAULT_INJECTION: forcing a failure. [ 2268.399674] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.399826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.399831] Call Trace: [ 2268.399854] dump_stack+0x107/0x167 [ 2268.399869] should_fail.cold+0x5/0xa [ 2268.404036] ? create_object.isra.0+0x3a/0xa20 [ 2268.404659] should_failslab+0x5/0x20 [ 2268.405195] kmem_cache_alloc+0x5b/0x310 [ 2268.405752] create_object.isra.0+0x3a/0xa20 [ 2268.406351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.407034] __kmalloc+0x16e/0x390 [ 2268.407524] io_uring_setup+0x33c/0x2980 [ 2268.408086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2268.408757] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2268.409468] ? wait_for_completion_io+0x270/0x270 [ 2268.410167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.410982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.411767] do_syscall_64+0x33/0x40 [ 2268.412378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.413247] RIP: 0033:0x7f910a3bdb19 [ 2268.413830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.416783] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2268.417971] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2268.419087] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2268.420103] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2268.421226] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2268.422382] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2268.423411] CPU: 1 PID: 20018 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2268.424384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.425494] Call Trace: [ 2268.425870] dump_stack+0x107/0x167 [ 2268.426349] should_fail.cold+0x5/0xa [ 2268.426852] ? io_uring_setup+0x33c/0x2980 [ 2268.427407] should_failslab+0x5/0x20 [ 2268.427917] __kmalloc+0x72/0x390 [ 2268.428365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.429039] io_uring_setup+0x33c/0x2980 [ 2268.429582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2268.430239] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2268.430911] ? wait_for_completion_io+0x270/0x270 [ 2268.431560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.432253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.432986] do_syscall_64+0x33/0x40 [ 2268.433471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.434141] RIP: 0033:0x7fb3e1098b19 10:57:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2268.434631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.437319] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2268.438303] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2268.439357] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2268.440250] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2268.441184] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2268.442066] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0xa107}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:57:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x0, 0xff00}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:57:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:57:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 6) 10:57:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x24}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:57:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000188000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:57:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 20) 10:57:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 5) 10:57:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2284.650460] FAULT_INJECTION: forcing a failure. [ 2284.650460] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.652054] CPU: 1 PID: 20045 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2284.653027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.654205] Call Trace: [ 2284.654579] dump_stack+0x107/0x167 [ 2284.655099] should_fail.cold+0x5/0xa [ 2284.655636] ? io_uring_setup+0x40b/0x2980 [ 2284.656247] should_failslab+0x5/0x20 [ 2284.656797] kmem_cache_alloc_trace+0x55/0x320 [ 2284.657460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.658145] io_uring_setup+0x40b/0x2980 [ 2284.658688] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.659357] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2284.660053] ? wait_for_completion_io+0x270/0x270 [ 2284.660718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.661466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.662195] do_syscall_64+0x33/0x40 [ 2284.662729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.663446] RIP: 0033:0x7f910a3bdb19 [ 2284.663977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.666618] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2284.667700] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2284.668704] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2284.669714] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2284.670714] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2284.671720] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2284.676971] FAULT_INJECTION: forcing a failure. [ 2284.676971] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.678650] CPU: 1 PID: 20047 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2284.679651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.680791] Call Trace: [ 2284.681206] dump_stack+0x107/0x167 [ 2284.681753] should_fail.cold+0x5/0xa [ 2284.682299] ? create_object.isra.0+0x3a/0xa20 [ 2284.682962] should_failslab+0x5/0x20 [ 2284.683513] kmem_cache_alloc+0x5b/0x310 [ 2284.684036] create_object.isra.0+0x3a/0xa20 [ 2284.684659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.685370] __kmalloc+0x16e/0x390 [ 2284.685856] io_uring_setup+0x33c/0x2980 [ 2284.686401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.687033] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2284.687681] ? wait_for_completion_io+0x270/0x270 [ 2284.688348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.689033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.689729] do_syscall_64+0x33/0x40 [ 2284.690218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.690926] RIP: 0033:0x7fb3e1098b19 [ 2284.691535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.694129] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2284.695341] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2284.696343] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2284.697310] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2284.698233] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2284.699159] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2284.708208] FAULT_INJECTION: forcing a failure. [ 2284.708208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2284.709943] CPU: 0 PID: 20083 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2284.710959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.712140] Call Trace: [ 2284.712523] dump_stack+0x107/0x167 [ 2284.713067] should_fail.cold+0x5/0xa [ 2284.713649] _copy_to_user+0x2e/0x180 [ 2284.714177] io_uring_setup+0x11b5/0x2980 [ 2284.714809] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2284.715532] ? wait_for_completion_io+0x270/0x270 [ 2284.716291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.717030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.717814] do_syscall_64+0x33/0x40 [ 2284.718408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.719220] RIP: 0033:0x7fb073b23b19 [ 2284.719764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.722597] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 10:57:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2284.723707] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2284.725013] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2284.726055] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2284.727185] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2284.728338] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:57:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 7) 10:57:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:57:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 6) 10:57:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c8000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2284.826481] FAULT_INJECTION: forcing a failure. [ 2284.826481] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.828911] CPU: 0 PID: 20156 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2284.829990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.831267] Call Trace: [ 2284.831692] dump_stack+0x107/0x167 [ 2284.832262] should_fail.cold+0x5/0xa [ 2284.832857] ? create_object.isra.0+0x3a/0xa20 [ 2284.833591] should_failslab+0x5/0x20 [ 2284.834179] kmem_cache_alloc+0x5b/0x310 [ 2284.834815] create_object.isra.0+0x3a/0xa20 [ 2284.835473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.836279] kmem_cache_alloc_trace+0x151/0x320 [ 2284.836978] io_uring_setup+0x40b/0x2980 [ 2284.837637] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.838399] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2284.839164] ? wait_for_completion_io+0x270/0x270 [ 2284.839922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.840752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.841565] do_syscall_64+0x33/0x40 [ 2284.842111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.842868] RIP: 0033:0x7f910a3bdb19 [ 2284.843403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.846279] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2284.847517] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2284.848585] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2284.849705] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2284.850724] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2284.851754] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2284.866662] FAULT_INJECTION: forcing a failure. [ 2284.866662] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.868434] CPU: 0 PID: 20160 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2284.869487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.870668] Call Trace: [ 2284.871046] dump_stack+0x107/0x167 [ 2284.871555] should_fail.cold+0x5/0xa [ 2284.872085] ? io_uring_setup+0x40b/0x2980 [ 2284.872714] should_failslab+0x5/0x20 [ 2284.873292] kmem_cache_alloc_trace+0x55/0x320 [ 2284.873948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.874691] io_uring_setup+0x40b/0x2980 [ 2284.875357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.876063] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2284.876839] ? wait_for_completion_io+0x270/0x270 [ 2284.877618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.878462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.879230] do_syscall_64+0x33/0x40 [ 2284.879778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.880507] RIP: 0033:0x7fb3e1098b19 [ 2284.881037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.883783] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2284.884882] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2284.885940] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2284.886986] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2284.887995] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2284.889041] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:57:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 8) 10:57:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 21) 10:57:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2a}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:57:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000208000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:57:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 7) 10:57:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x8}, {r0}, {r0}], 0x6, 0x47) [ 2301.668790] FAULT_INJECTION: forcing a failure. [ 2301.668790] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.670516] CPU: 1 PID: 20177 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2301.671498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.672666] Call Trace: [ 2301.673037] dump_stack+0x107/0x167 [ 2301.673561] should_fail.cold+0x5/0xa [ 2301.674069] ? create_object.isra.0+0x3a/0xa20 [ 2301.674745] should_failslab+0x5/0x20 [ 2301.675275] kmem_cache_alloc+0x5b/0x310 [ 2301.675841] create_object.isra.0+0x3a/0xa20 [ 2301.676435] kmemleak_alloc_percpu+0xa0/0x100 [ 2301.677102] pcpu_alloc+0x4e2/0x1240 [ 2301.677691] ? io_tctx_exit_cb+0xf0/0xf0 [ 2301.678226] percpu_ref_init+0x31/0x3d0 [ 2301.678772] io_uring_setup+0x47a/0x2980 [ 2301.679354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2301.680013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.680739] ? wait_for_completion_io+0x270/0x270 [ 2301.681459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.682275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.682925] do_syscall_64+0x33/0x40 [ 2301.683433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.684129] RIP: 0033:0x7f910a3bdb19 [ 2301.684654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.687242] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.688248] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2301.689211] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2301.690156] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2301.691075] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2301.692061] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2301.702372] FAULT_INJECTION: forcing a failure. [ 2301.702372] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.703984] CPU: 1 PID: 20171 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2301.704961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.706039] Call Trace: [ 2301.706397] dump_stack+0x107/0x167 [ 2301.706867] should_fail.cold+0x5/0xa [ 2301.707392] ? __d_alloc+0x2a/0x990 [ 2301.707893] should_failslab+0x5/0x20 [ 2301.708441] kmem_cache_alloc+0x5b/0x310 [ 2301.709035] __d_alloc+0x2a/0x990 [ 2301.709542] ? find_held_lock+0x2c/0x110 [ 2301.710068] d_alloc_pseudo+0x19/0x70 [ 2301.710561] alloc_file_pseudo+0xce/0x250 [ 2301.711135] ? trace_hardirqs_on+0x5b/0x180 [ 2301.711705] ? alloc_file+0x5a0/0x5a0 [ 2301.712239] anon_inode_getfile+0xc8/0x1f0 [ 2301.712820] io_uring_setup+0x138b/0x2980 [ 2301.713427] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.714158] ? wait_for_completion_io+0x270/0x270 [ 2301.714880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.715622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.716350] do_syscall_64+0x33/0x40 [ 2301.716886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.717675] RIP: 0033:0x7fb073b23b19 [ 2301.718208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.720831] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.721929] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2301.722923] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2301.723940] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2301.724981] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2301.726004] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:57:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x64}, {r0}, {r0}], 0x6, 0x47) 10:57:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000003f8000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:57:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x30}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2301.764696] FAULT_INJECTION: forcing a failure. [ 2301.764696] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.766781] CPU: 1 PID: 20174 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2301.767786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.770375] Call Trace: [ 2301.770760] dump_stack+0x107/0x167 [ 2301.771273] should_fail.cold+0x5/0xa [ 2301.771823] ? create_object.isra.0+0x3a/0xa20 [ 2301.772480] should_failslab+0x5/0x20 [ 2301.773024] kmem_cache_alloc+0x5b/0x310 [ 2301.773626] create_object.isra.0+0x3a/0xa20 [ 2301.774240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2301.774990] kmem_cache_alloc_trace+0x151/0x320 [ 2301.775744] io_uring_setup+0x40b/0x2980 [ 2301.776362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2301.777052] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.777780] ? wait_for_completion_io+0x270/0x270 [ 2301.778435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.779139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.779871] do_syscall_64+0x33/0x40 [ 2301.780411] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.781196] RIP: 0033:0x7fb3e1098b19 [ 2301.781747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.784322] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.785473] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2301.786495] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2301.787487] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2301.788517] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2301.789474] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 10:57:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 9) 10:57:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 22) 10:57:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x7a1}, {r0}, {r0}], 0x6, 0x47) [ 2301.858212] FAULT_INJECTION: forcing a failure. [ 2301.858212] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.859915] CPU: 1 PID: 20193 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2301.860941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.862193] Call Trace: [ 2301.862567] dump_stack+0x107/0x167 [ 2301.863089] should_fail.cold+0x5/0xa [ 2301.863651] ? create_object.isra.0+0x3a/0xa20 [ 2301.864300] should_failslab+0x5/0x20 [ 2301.864846] kmem_cache_alloc+0x5b/0x310 [ 2301.865469] create_object.isra.0+0x3a/0xa20 [ 2301.866134] kmemleak_alloc_percpu+0xa0/0x100 [ 2301.866748] pcpu_alloc+0x4e2/0x1240 [ 2301.867297] ? io_tctx_exit_cb+0xf0/0xf0 [ 2301.867881] percpu_ref_init+0x31/0x3d0 [ 2301.868480] io_uring_setup+0x47a/0x2980 [ 2301.869088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2301.869784] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.870470] ? wait_for_completion_io+0x270/0x270 [ 2301.871208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.871944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.872668] do_syscall_64+0x33/0x40 [ 2301.873171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.873886] RIP: 0033:0x7f910a3bdb19 [ 2301.874439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.877770] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.878811] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2301.879722] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2301.880650] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2301.881609] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2301.882569] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:57:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000698000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2301.927540] FAULT_INJECTION: forcing a failure. [ 2301.927540] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.929974] CPU: 0 PID: 20197 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2301.931010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.932269] Call Trace: [ 2301.932695] dump_stack+0x107/0x167 [ 2301.933261] should_fail.cold+0x5/0xa [ 2301.933859] ? create_object.isra.0+0x3a/0xa20 [ 2301.934568] should_failslab+0x5/0x20 [ 2301.935140] kmem_cache_alloc+0x5b/0x310 [ 2301.935768] create_object.isra.0+0x3a/0xa20 [ 2301.936432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2301.937232] kmem_cache_alloc+0x159/0x310 [ 2301.937891] __d_alloc+0x2a/0x990 [ 2301.938407] ? find_held_lock+0x2c/0x110 [ 2301.938959] d_alloc_pseudo+0x19/0x70 [ 2301.939486] alloc_file_pseudo+0xce/0x250 [ 2301.940110] ? trace_hardirqs_on+0x5b/0x180 [ 2301.940736] ? alloc_file+0x5a0/0x5a0 [ 2301.941292] anon_inode_getfile+0xc8/0x1f0 [ 2301.941947] io_uring_setup+0x138b/0x2980 [ 2301.942531] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.943235] ? wait_for_completion_io+0x270/0x270 [ 2301.943909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.944612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.945325] do_syscall_64+0x33/0x40 [ 2301.945839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.946526] RIP: 0033:0x7fb073b23b19 [ 2301.947070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.949710] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.950758] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2301.951791] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2301.952925] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2301.954015] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2301.955135] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:58:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 10) 10:58:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 8) 10:58:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x36}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x6400}, {r0}, {r0}], 0x6, 0x47) 10:58:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 23) 10:58:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200004808000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2318.166869] FAULT_INJECTION: forcing a failure. [ 2318.166869] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.169612] CPU: 0 PID: 20219 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2318.171260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.173294] Call Trace: [ 2318.173943] dump_stack+0x107/0x167 [ 2318.174826] should_fail.cold+0x5/0xa [ 2318.175744] ? create_object.isra.0+0x3a/0xa20 [ 2318.176842] should_failslab+0x5/0x20 [ 2318.176922] FAULT_INJECTION: forcing a failure. [ 2318.176922] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.177759] kmem_cache_alloc+0x5b/0x310 [ 2318.177789] create_object.isra.0+0x3a/0xa20 [ 2318.177821] kmemleak_alloc_percpu+0xa0/0x100 [ 2318.183225] pcpu_alloc+0x4e2/0x1240 [ 2318.184145] ? io_tctx_exit_cb+0xf0/0xf0 [ 2318.185110] percpu_ref_init+0x31/0x3d0 [ 2318.186102] io_uring_setup+0x47a/0x2980 [ 2318.187088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.188273] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.189499] ? wait_for_completion_io+0x270/0x270 [ 2318.190712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.191974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.193239] do_syscall_64+0x33/0x40 [ 2318.194157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.195409] RIP: 0033:0x7fb3e1098b19 [ 2318.196312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.200855] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.202745] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2318.204502] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2318.206265] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2318.208023] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2318.209789] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2318.211604] CPU: 1 PID: 20220 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2318.213086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.214867] Call Trace: [ 2318.215423] dump_stack+0x107/0x167 [ 2318.216195] should_fail.cold+0x5/0xa [ 2318.217015] ? __alloc_file+0x21/0x320 [ 2318.217867] should_failslab+0x5/0x20 [ 2318.218664] kmem_cache_alloc+0x5b/0x310 [ 2318.219528] __alloc_file+0x21/0x320 [ 2318.220318] alloc_empty_file+0x6d/0x170 [ 2318.221177] alloc_file+0x5e/0x5a0 [ 2318.221962] alloc_file_pseudo+0x16a/0x250 [ 2318.222861] ? alloc_file+0x5a0/0x5a0 [ 2318.223669] anon_inode_getfile+0xc8/0x1f0 [ 2318.224576] io_uring_setup+0x138b/0x2980 [ 2318.225460] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.226564] ? wait_for_completion_io+0x270/0x270 [ 2318.227620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.228714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.229835] do_syscall_64+0x33/0x40 [ 2318.230639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.231715] RIP: 0033:0x7fb073b23b19 [ 2318.232502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.236405] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.238036] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2318.239534] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2318.241049] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2318.242611] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2318.244121] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2318.252199] FAULT_INJECTION: forcing a failure. [ 2318.252199] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.254799] CPU: 1 PID: 20225 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2318.256271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.258051] Call Trace: [ 2318.258607] dump_stack+0x107/0x167 [ 2318.259384] should_fail.cold+0x5/0xa [ 2318.260195] ? percpu_ref_init+0xd8/0x3d0 [ 2318.261075] should_failslab+0x5/0x20 [ 2318.261908] kmem_cache_alloc_trace+0x55/0x320 [ 2318.262878] ? io_tctx_exit_cb+0xf0/0xf0 [ 2318.263722] percpu_ref_init+0xd8/0x3d0 [ 2318.264569] io_uring_setup+0x47a/0x2980 [ 2318.265438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.266489] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.267562] ? wait_for_completion_io+0x270/0x270 [ 2318.268603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.269720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.270831] do_syscall_64+0x33/0x40 [ 2318.271608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.272687] RIP: 0033:0x7f910a3bdb19 [ 2318.273473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.277387] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.279023] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2318.280521] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2318.282053] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2318.283555] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2318.285070] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000f08000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 24) 10:58:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0xa107}, {r0}, {r0}], 0x6, 0x47) 10:58:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 11) 10:58:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) [ 2318.504630] FAULT_INJECTION: forcing a failure. [ 2318.504630] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.505917] FAULT_INJECTION: forcing a failure. [ 2318.505917] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.507143] CPU: 1 PID: 20340 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2318.511118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.512868] Call Trace: [ 2318.513428] dump_stack+0x107/0x167 [ 2318.514211] should_fail.cold+0x5/0xa [ 2318.515022] ? create_object.isra.0+0x3a/0xa20 [ 2318.515992] should_failslab+0x5/0x20 [ 2318.516799] kmem_cache_alloc+0x5b/0x310 [ 2318.517672] create_object.isra.0+0x3a/0xa20 [ 2318.518602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.519679] kmem_cache_alloc_trace+0x151/0x320 [ 2318.520663] ? io_tctx_exit_cb+0xf0/0xf0 [ 2318.521528] percpu_ref_init+0xd8/0x3d0 [ 2318.522371] io_uring_setup+0x47a/0x2980 [ 2318.523231] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.524250] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.525318] ? wait_for_completion_io+0x270/0x270 [ 2318.526374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.527479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.528569] do_syscall_64+0x33/0x40 [ 2318.529351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.530445] RIP: 0033:0x7f910a3bdb19 [ 2318.531228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.535115] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.536721] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2318.538234] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2318.539738] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2318.541240] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2318.542753] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2318.544298] CPU: 0 PID: 20339 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2318.545972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.547911] Call Trace: [ 2318.548537] dump_stack+0x107/0x167 [ 2318.549397] should_fail.cold+0x5/0xa [ 2318.550302] ? create_object.isra.0+0x3a/0xa20 [ 2318.551373] should_failslab+0x5/0x20 [ 2318.552268] kmem_cache_alloc+0x5b/0x310 [ 2318.553227] create_object.isra.0+0x3a/0xa20 [ 2318.554267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.555463] kmem_cache_alloc+0x159/0x310 [ 2318.556444] __alloc_file+0x21/0x320 [ 2318.557316] alloc_empty_file+0x6d/0x170 [ 2318.558283] alloc_file+0x5e/0x5a0 [ 2318.559122] alloc_file_pseudo+0x16a/0x250 [ 2318.560115] ? alloc_file+0x5a0/0x5a0 [ 2318.561029] anon_inode_getfile+0xc8/0x1f0 [ 2318.562039] io_uring_setup+0x138b/0x2980 [ 2318.563023] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.564217] ? wait_for_completion_io+0x270/0x270 [ 2318.565380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.566618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.567835] do_syscall_64+0x33/0x40 [ 2318.568710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.569923] RIP: 0033:0x7fb073b23b19 [ 2318.570798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.575119] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.576891] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2318.578573] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2318.580251] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2318.581939] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2318.583617] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:58:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 9) 10:58:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007f00000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2318.637206] FAULT_INJECTION: forcing a failure. [ 2318.637206] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.639874] CPU: 1 PID: 20343 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2318.641435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.643410] Call Trace: [ 2318.644025] dump_stack+0x107/0x167 [ 2318.644853] should_fail.cold+0x5/0xa [ 2318.645787] ? create_object.isra.0+0x3a/0xa20 [ 2318.646903] should_failslab+0x5/0x20 [ 2318.647818] kmem_cache_alloc+0x5b/0x310 [ 2318.648800] create_object.isra.0+0x3a/0xa20 [ 2318.649842] kmemleak_alloc_percpu+0xa0/0x100 [ 2318.650833] pcpu_alloc+0x4e2/0x1240 [ 2318.651578] ? io_tctx_exit_cb+0xf0/0xf0 [ 2318.652471] percpu_ref_init+0x31/0x3d0 [ 2318.653430] io_uring_setup+0x47a/0x2980 [ 2318.654425] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.655572] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2318.656685] ? wait_for_completion_io+0x270/0x270 [ 2318.657678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.658699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.659723] do_syscall_64+0x33/0x40 [ 2318.660464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.661466] RIP: 0033:0x7fb3e1098b19 [ 2318.662203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.665956] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2318.667442] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2318.668863] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2318.670262] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2318.671660] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2318.673077] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0xff00}, {r0}, {r0}], 0x6, 0x47) 10:58:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) 10:58:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 10) [ 2334.008417] FAULT_INJECTION: forcing a failure. [ 2334.008417] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.010029] CPU: 1 PID: 20366 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2334.010894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.011935] Call Trace: [ 2334.012280] dump_stack+0x107/0x167 [ 2334.012750] should_fail.cold+0x5/0xa [ 2334.013237] ? percpu_ref_init+0xd8/0x3d0 [ 2334.013788] should_failslab+0x5/0x20 [ 2334.014276] kmem_cache_alloc_trace+0x55/0x320 [ 2334.014861] ? io_tctx_exit_cb+0xf0/0xf0 [ 2334.015378] percpu_ref_init+0xd8/0x3d0 [ 2334.015932] io_uring_setup+0x47a/0x2980 [ 2334.016456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2334.017127] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.017779] ? wait_for_completion_io+0x270/0x270 [ 2334.018475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.019139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.019856] do_syscall_64+0x33/0x40 [ 2334.020334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.021043] RIP: 0033:0x7fb3e1098b19 [ 2334.021557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.024086] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.025067] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2334.026059] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2334.027024] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.028018] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2334.029013] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2334.034502] FAULT_INJECTION: forcing a failure. [ 2334.034502] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.036031] CPU: 1 PID: 20369 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2334.036999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.038145] Call Trace: [ 2334.038519] dump_stack+0x107/0x167 [ 2334.039022] should_fail.cold+0x5/0xa 10:58:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000028000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 12) 10:58:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 25) 10:58:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x42}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2334.039549] ? security_file_alloc+0x34/0x170 [ 2334.040424] should_failslab+0x5/0x20 [ 2334.040986] kmem_cache_alloc+0x5b/0x310 [ 2334.041543] security_file_alloc+0x34/0x170 [ 2334.042159] __alloc_file+0xb7/0x320 [ 2334.042684] alloc_empty_file+0x6d/0x170 [ 2334.043252] alloc_file+0x5e/0x5a0 [ 2334.043744] alloc_file_pseudo+0x16a/0x250 [ 2334.044329] ? alloc_file+0x5a0/0x5a0 [ 2334.044886] anon_inode_getfile+0xc8/0x1f0 [ 2334.045469] io_uring_setup+0x138b/0x2980 [ 2334.046056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.046757] ? wait_for_completion_io+0x270/0x270 [ 2334.047401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.048128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.048826] do_syscall_64+0x33/0x40 [ 2334.049299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.049934] RIP: 0033:0x7fb073b23b19 [ 2334.050427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.053235] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.055031] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2334.056692] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2334.058488] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2334.060333] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2334.062187] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:58:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000038000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:58:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x60}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 11) 10:58:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 26) 10:58:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) [ 2334.218441] FAULT_INJECTION: forcing a failure. [ 2334.218441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2334.218682] FAULT_INJECTION: forcing a failure. [ 2334.218682] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.220573] CPU: 1 PID: 20373 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2334.224110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.225626] Call Trace: [ 2334.226147] dump_stack+0x107/0x167 [ 2334.226826] should_fail.cold+0x5/0xa [ 2334.227543] __alloc_pages_nodemask+0x182/0x600 [ 2334.228407] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2334.229562] ? cap_capable+0x1cd/0x230 [ 2334.230336] alloc_pages_current+0x187/0x280 [ 2334.231150] __get_free_pages+0xc/0xa0 [ 2334.231808] io_uring_setup+0xe27/0x2980 [ 2334.232502] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.233382] ? wait_for_completion_io+0x270/0x270 [ 2334.234253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.235069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.235890] do_syscall_64+0x33/0x40 [ 2334.236477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.237297] RIP: 0033:0x7f910a3bdb19 [ 2334.237887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.240709] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.241917] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2334.243043] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2334.244164] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.245292] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2334.246420] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2334.247586] CPU: 0 PID: 20389 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2334.249210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.251016] FAULT_INJECTION: forcing a failure. [ 2334.251016] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.251126] Call Trace: [ 2334.253474] dump_stack+0x107/0x167 [ 2334.254327] should_fail.cold+0x5/0xa [ 2334.255197] ? create_object.isra.0+0x3a/0xa20 [ 2334.256240] should_failslab+0x5/0x20 [ 2334.257108] kmem_cache_alloc+0x5b/0x310 [ 2334.258059] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2334.259313] create_object.isra.0+0x3a/0xa20 [ 2334.260310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.261474] kmem_cache_alloc+0x159/0x310 [ 2334.262450] security_file_alloc+0x34/0x170 [ 2334.263430] __alloc_file+0xb7/0x320 [ 2334.264275] alloc_empty_file+0x6d/0x170 [ 2334.265197] alloc_file+0x5e/0x5a0 [ 2334.266027] alloc_file_pseudo+0x16a/0x250 [ 2334.266986] ? alloc_file+0x5a0/0x5a0 [ 2334.267873] anon_inode_getfile+0xc8/0x1f0 [ 2334.268842] io_uring_setup+0x138b/0x2980 [ 2334.269813] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.270971] ? wait_for_completion_io+0x270/0x270 [ 2334.272099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.273287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.274479] do_syscall_64+0x33/0x40 [ 2334.275325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.276489] RIP: 0033:0x7fb073b23b19 [ 2334.277332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.281522] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.283269] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2334.284887] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2334.286522] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2334.288136] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2334.289770] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2334.291427] CPU: 1 PID: 20390 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2334.292540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.293863] Call Trace: [ 2334.294287] dump_stack+0x107/0x167 [ 2334.294871] should_fail.cold+0x5/0xa [ 2334.295479] ? percpu_ref_init+0xd8/0x3d0 [ 2334.296139] should_failslab+0x5/0x20 [ 2334.296747] kmem_cache_alloc_trace+0x55/0x320 [ 2334.297470] ? io_tctx_exit_cb+0xf0/0xf0 [ 2334.298123] percpu_ref_init+0xd8/0x3d0 [ 2334.298761] io_uring_setup+0x47a/0x2980 [ 2334.299417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2334.300376] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.301385] ? wait_for_completion_io+0x270/0x270 [ 2334.302385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.303421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.304453] do_syscall_64+0x33/0x40 [ 2334.305196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.306220] RIP: 0033:0x7fb3e1098b19 [ 2334.306963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.310625] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.312147] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2334.313567] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2334.314984] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.316398] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2334.317820] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000048000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0x8}, {r0}, {r0}], 0x6, 0x47) 10:58:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x91}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0x64}, {r0}, {r0}], 0x6, 0x47) 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000058000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2351.683973] FAULT_INJECTION: forcing a failure. [ 2351.683973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2351.687054] CPU: 0 PID: 20413 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2351.687078] FAULT_INJECTION: forcing a failure. [ 2351.687078] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.689619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.689626] Call Trace: [ 2351.689653] dump_stack+0x107/0x167 [ 2351.689667] should_fail.cold+0x5/0xa [ 2351.689686] __alloc_pages_nodemask+0x182/0x600 [ 2351.689711] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2351.702777] ? cap_capable+0x1cd/0x230 [ 2351.704194] alloc_pages_current+0x187/0x280 [ 2351.705787] __get_free_pages+0xc/0xa0 [ 2351.707205] io_uring_setup+0xe27/0x2980 [ 2351.708770] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.710633] ? wait_for_completion_io+0x270/0x270 [ 2351.712430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.714337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.716208] do_syscall_64+0x33/0x40 [ 2351.717532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.719444] RIP: 0033:0x7fb3e1098b19 [ 2351.720787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.727635] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.730458] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2351.733133] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2351.735746] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2351.738442] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2351.741047] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2351.742248] CPU: 1 PID: 20418 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2351.744808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.747715] Call Trace: [ 2351.748646] dump_stack+0x107/0x167 [ 2351.749967] should_fail.cold+0x5/0xa [ 2351.751340] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2351.753088] should_failslab+0x5/0x20 10:58:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 13) 10:58:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 12) 10:58:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 27) 10:58:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) [ 2351.754399] kmem_cache_alloc_trace+0x55/0x320 [ 2351.756169] io_uring_alloc_task_context+0x99/0x6a0 [ 2351.758030] ? io_import_iovec+0x1120/0x1120 [ 2351.759512] ? lock_downgrade+0x6d0/0x6d0 [ 2351.760988] ? do_raw_spin_lock+0x121/0x260 [ 2351.762585] ? rwlock_bug.part.0+0x90/0x90 [ 2351.764120] __io_uring_add_tctx_node+0x2c6/0x520 [ 2351.765927] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2351.767798] ? alloc_fd+0x2e7/0x670 [ 2351.769353] io_uring_setup+0x1fbb/0x2980 [ 2351.770968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.772803] ? wait_for_completion_io+0x270/0x270 [ 2351.774459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.776287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.778155] do_syscall_64+0x33/0x40 [ 2351.779548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.781411] RIP: 0033:0x7fb073b23b19 [ 2351.782190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.784467] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.785442] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2351.786379] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2351.788470] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2351.789525] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2351.790537] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2351.806590] FAULT_INJECTION: forcing a failure. [ 2351.806590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2351.808337] CPU: 0 PID: 20423 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2351.809290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.810545] Call Trace: [ 2351.810915] dump_stack+0x107/0x167 [ 2351.811445] should_fail.cold+0x5/0xa [ 2351.812008] __alloc_pages_nodemask+0x182/0x600 [ 2351.812646] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2351.813606] ? cap_capable+0x1cd/0x230 [ 2351.814205] alloc_pages_current+0x187/0x280 [ 2351.814848] __get_free_pages+0xc/0xa0 [ 2351.815446] io_uring_setup+0xf9a/0x2980 [ 2351.816111] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.816909] ? wait_for_completion_io+0x270/0x270 [ 2351.817774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.818687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.819461] do_syscall_64+0x33/0x40 [ 2351.820012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.820798] RIP: 0033:0x7f910a3bdb19 [ 2351.821345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.824340] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.825531] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2351.826573] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2351.827644] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2351.828734] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2351.829734] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0x7a1}, {r0}, {r0}], 0x6, 0x47) 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000068000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 10:58:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x300}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 28) 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000078000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 14) [ 2351.972128] FAULT_INJECTION: forcing a failure. [ 2351.972128] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.973852] CPU: 0 PID: 20437 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2351.974786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.975896] Call Trace: [ 2351.976260] dump_stack+0x107/0x167 [ 2351.976739] should_fail.cold+0x5/0xa [ 2351.977304] ? create_object.isra.0+0x3a/0xa20 [ 2351.977931] should_failslab+0x5/0x20 [ 2351.978441] kmem_cache_alloc+0x5b/0x310 [ 2351.979020] create_object.isra.0+0x3a/0xa20 [ 2351.979693] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2351.980453] kmem_cache_alloc_trace+0x151/0x320 [ 2351.981167] io_uring_alloc_task_context+0x99/0x6a0 [ 2351.981954] ? io_import_iovec+0x1120/0x1120 [ 2351.982588] ? lock_downgrade+0x6d0/0x6d0 [ 2351.983178] ? do_raw_spin_lock+0x121/0x260 [ 2351.983780] ? rwlock_bug.part.0+0x90/0x90 [ 2351.984379] __io_uring_add_tctx_node+0x2c6/0x520 [ 2351.985063] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2351.985792] ? alloc_fd+0x2e7/0x670 [ 2351.986329] io_uring_setup+0x1fbb/0x2980 [ 2351.986908] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.987622] ? wait_for_completion_io+0x270/0x270 [ 2351.988322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.989082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.989816] do_syscall_64+0x33/0x40 [ 2351.990367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.991096] RIP: 0033:0x7fb073b23b19 [ 2351.991627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.994309] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.995412] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2351.996379] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2351.997365] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2351.998406] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2351.999433] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2352.014576] FAULT_INJECTION: forcing a failure. [ 2352.014576] name failslab, interval 1, probability 0, space 0, times 0 [ 2352.016197] CPU: 1 PID: 20439 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2352.017094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2352.018253] Call Trace: [ 2352.018635] dump_stack+0x107/0x167 [ 2352.019184] should_fail.cold+0x5/0xa [ 2352.019736] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2352.020525] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2352.021376] should_failslab+0x5/0x20 [ 2352.021946] kmem_cache_alloc_trace+0x55/0x320 [ 2352.022610] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2352.023405] io_uring_setup+0x14f6/0x2980 [ 2352.023998] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2352.024699] ? wait_for_completion_io+0x270/0x270 [ 2352.025395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2352.026131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2352.026849] do_syscall_64+0x33/0x40 [ 2352.027343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2352.028042] RIP: 0033:0x7f910a3bdb19 [ 2352.028583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2352.031190] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2352.032246] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2352.033346] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2352.034398] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2352.035376] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2352.036474] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 15) 10:58:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 10:58:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 29) 10:58:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0x6400}, {r0}, {r0}], 0x6, 0x47) [ 2367.876446] FAULT_INJECTION: forcing a failure. [ 2367.876446] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.878116] CPU: 1 PID: 20450 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2367.879046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.880167] Call Trace: [ 2367.880522] dump_stack+0x107/0x167 [ 2367.881012] should_fail.cold+0x5/0xa [ 2367.881509] ? create_object.isra.0+0x3a/0xa20 [ 2367.882151] should_failslab+0x5/0x20 [ 2367.882663] kmem_cache_alloc+0x5b/0x310 [ 2367.883203] create_object.isra.0+0x3a/0xa20 [ 2367.883801] kmemleak_alloc_percpu+0xa0/0x100 [ 2367.884411] pcpu_alloc+0x4e2/0x1240 [ 2367.884929] __percpu_counter_init+0x10d/0x2d0 [ 2367.885499] io_uring_alloc_task_context+0xcc/0x6a0 [ 2367.886172] ? io_import_iovec+0x1120/0x1120 [ 2367.886741] ? lock_downgrade+0x6d0/0x6d0 [ 2367.887333] ? do_raw_spin_lock+0x121/0x260 [ 2367.887889] ? rwlock_bug.part.0+0x90/0x90 [ 2367.888480] __io_uring_add_tctx_node+0x2c6/0x520 10:58:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 13) 10:58:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x398}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000088000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2367.889163] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2367.890224] ? alloc_fd+0x2e7/0x670 [ 2367.890753] io_uring_setup+0x1fbb/0x2980 [ 2367.891346] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2367.892041] ? wait_for_completion_io+0x270/0x270 [ 2367.892793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2367.893575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2367.894361] do_syscall_64+0x33/0x40 [ 2367.894912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.895641] RIP: 0033:0x7fb073b23b19 [ 2367.896163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.897073] FAULT_INJECTION: forcing a failure. [ 2367.897073] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.898846] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2367.898863] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2367.898872] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2367.898888] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2367.904881] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2367.905888] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2367.906993] CPU: 0 PID: 20455 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2367.908058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.909306] Call Trace: [ 2367.909736] dump_stack+0x107/0x167 [ 2367.910298] should_fail.cold+0x5/0xa [ 2367.910907] ? create_object.isra.0+0x3a/0xa20 [ 2367.911603] should_failslab+0x5/0x20 [ 2367.912167] kmem_cache_alloc+0x5b/0x310 [ 2367.912825] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2367.913761] create_object.isra.0+0x3a/0xa20 [ 2367.914476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2367.915275] kmem_cache_alloc_trace+0x151/0x320 [ 2367.915970] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2367.916639] FAULT_INJECTION: forcing a failure. [ 2367.916639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2367.916766] io_uring_setup+0x14f6/0x2980 [ 2367.916786] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2367.916802] ? wait_for_completion_io+0x270/0x270 [ 2367.916836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2367.921373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2367.922231] do_syscall_64+0x33/0x40 [ 2367.922829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.923587] RIP: 0033:0x7f910a3bdb19 [ 2367.924148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.927136] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2367.928268] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2367.929295] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2367.930387] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2367.931719] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2367.932802] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2367.933814] CPU: 1 PID: 20460 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2367.934796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.935904] Call Trace: [ 2367.936257] dump_stack+0x107/0x167 [ 2367.936738] should_fail.cold+0x5/0xa [ 2367.937252] __alloc_pages_nodemask+0x182/0x600 [ 2367.937902] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2367.938761] ? cap_capable+0x1cd/0x230 [ 2367.939319] alloc_pages_current+0x187/0x280 [ 2367.939972] __get_free_pages+0xc/0xa0 [ 2367.940518] io_uring_setup+0xf9a/0x2980 [ 2367.941139] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2367.941884] ? wait_for_completion_io+0x270/0x270 [ 2367.942616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2367.943339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2367.944038] do_syscall_64+0x33/0x40 [ 2367.944541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.945255] RIP: 0033:0x7fb3e1098b19 [ 2367.945827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.948323] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2367.949384] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2367.950396] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2367.951386] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2367.952357] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2367.953371] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3bf}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 14) 10:58:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 30) 10:58:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000188000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) [ 2368.053401] FAULT_INJECTION: forcing a failure. [ 2368.053401] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.055001] CPU: 1 PID: 20465 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2368.056023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.057178] Call Trace: [ 2368.057559] dump_stack+0x107/0x167 [ 2368.058152] should_fail.cold+0x5/0xa [ 2368.058696] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2368.059467] should_failslab+0x5/0x20 [ 2368.059969] kmem_cache_alloc_trace+0x55/0x320 [ 2368.060609] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2368.061393] io_uring_setup+0x14f6/0x2980 [ 2368.061984] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2368.062765] ? wait_for_completion_io+0x270/0x270 [ 2368.064086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.064873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.065664] do_syscall_64+0x33/0x40 [ 2368.066197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.066942] RIP: 0033:0x7fb3e1098b19 [ 2368.067459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.069998] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2368.071064] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2368.072067] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2368.073003] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2368.074252] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2368.075333] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2368.092929] FAULT_INJECTION: forcing a failure. [ 2368.092929] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.094768] CPU: 0 PID: 20468 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2368.095789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.097016] Call Trace: [ 2368.097441] dump_stack+0x107/0x167 [ 2368.098016] should_fail.cold+0x5/0xa [ 2368.098601] ? create_object.isra.0+0x3a/0xa20 [ 2368.099311] should_failslab+0x5/0x20 [ 2368.099886] kmem_cache_alloc+0x5b/0x310 [ 2368.100501] create_object.isra.0+0x3a/0xa20 [ 2368.101142] kmemleak_alloc_percpu+0xa0/0x100 [ 2368.101785] pcpu_alloc+0x4e2/0x1240 [ 2368.102381] __percpu_counter_init+0x10d/0x2d0 [ 2368.103054] io_uring_alloc_task_context+0xcc/0x6a0 [ 2368.103792] ? io_import_iovec+0x1120/0x1120 [ 2368.104403] ? lock_downgrade+0x6d0/0x6d0 [ 2368.105011] ? do_raw_spin_lock+0x121/0x260 [ 2368.105655] ? rwlock_bug.part.0+0x90/0x90 [ 2368.106305] __io_uring_add_tctx_node+0x2c6/0x520 [ 2368.107111] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2368.107842] ? alloc_fd+0x2e7/0x670 [ 2368.108402] io_uring_setup+0x1fbb/0x2980 [ 2368.108988] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2368.109740] ? wait_for_completion_io+0x270/0x270 [ 2368.110487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.111222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.111965] do_syscall_64+0x33/0x40 [ 2368.112501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.113230] RIP: 0033:0x7fb073b23b19 [ 2368.113787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.116400] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2368.117554] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2368.118642] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2368.119638] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2368.120567] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2368.121485] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0xa107}, {r0}, {r0}], 0x6, 0x47) 10:58:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 16) 10:58:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2368.168215] FAULT_INJECTION: forcing a failure. [ 2368.168215] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.169788] CPU: 1 PID: 20481 Comm: syz-executor.5 Not tainted 5.10.234 #1 10:58:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000001c8000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2368.170733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.172200] Call Trace: [ 2368.172613] dump_stack+0x107/0x167 [ 2368.173088] should_fail.cold+0x5/0xa [ 2368.173589] ? create_object.isra.0+0x3a/0xa20 [ 2368.174206] should_failslab+0x5/0x20 [ 2368.174706] kmem_cache_alloc+0x5b/0x310 [ 2368.175261] create_object.isra.0+0x3a/0xa20 [ 2368.175829] kmemleak_alloc_percpu+0xa0/0x100 [ 2368.176436] pcpu_alloc+0x4e2/0x1240 [ 2368.176949] ? io_async_queue_proc+0x80/0x80 [ 2368.177539] percpu_ref_init+0x31/0x3d0 [ 2368.178086] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2368.178789] io_uring_setup+0x14f6/0x2980 [ 2368.179320] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2368.179977] ? wait_for_completion_io+0x270/0x270 [ 2368.180618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.181299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.181957] do_syscall_64+0x33/0x40 [ 2368.182448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.183095] RIP: 0033:0x7f910a3bdb19 [ 2368.183586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.185994] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2368.187029] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2368.187906] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2368.188798] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2368.189686] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2368.190687] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:58:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x500}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:58:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 15) 10:58:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 10:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0, 0x0, 0xff00}, {r0}, {r0}], 0x6, 0x47) 10:58:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000698000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:58:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:58:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x600}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2368.298592] FAULT_INJECTION: forcing a failure. [ 2368.298592] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.300180] CPU: 1 PID: 20493 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2368.301043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.302092] Call Trace: [ 2368.302444] dump_stack+0x107/0x167 [ 2368.302933] should_fail.cold+0x5/0xa [ 2368.303485] ? create_object.isra.0+0x3a/0xa20 [ 2368.304110] should_failslab+0x5/0x20 [ 2368.304601] kmem_cache_alloc+0x5b/0x310 [ 2368.305091] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2368.306063] create_object.isra.0+0x3a/0xa20 [ 2368.306747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.307581] kmem_cache_alloc_trace+0x151/0x320 [ 2368.308174] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2368.308849] io_uring_setup+0x14f6/0x2980 [ 2368.309406] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2368.310219] ? wait_for_completion_io+0x270/0x270 [ 2368.310877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.311647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.312396] do_syscall_64+0x33/0x40 [ 2368.312963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2368.313701] RIP: 0033:0x7fb3e1098b19 [ 2368.314259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.316806] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2368.317843] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2368.318811] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2368.319759] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2368.320685] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2368.321639] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2384.451870] FAULT_INJECTION: forcing a failure. [ 2384.451870] name failslab, interval 1, probability 0, space 0, times 0 10:59:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 31) 10:59:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 16) 10:59:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000002000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 17) 10:59:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 10:59:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 10:59:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x700}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2384.453832] CPU: 1 PID: 20523 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2384.454895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.455965] Call Trace: [ 2384.456323] dump_stack+0x107/0x167 [ 2384.456811] should_fail.cold+0x5/0xa [ 2384.457317] ? create_object.isra.0+0x3a/0xa20 [ 2384.457904] should_failslab+0x5/0x20 [ 2384.458426] kmem_cache_alloc+0x5b/0x310 [ 2384.458963] create_object.isra.0+0x3a/0xa20 [ 2384.459547] kmemleak_alloc_percpu+0xa0/0x100 [ 2384.460133] pcpu_alloc+0x4e2/0x1240 [ 2384.460632] ? io_async_queue_proc+0x80/0x80 [ 2384.461180] percpu_ref_init+0x31/0x3d0 [ 2384.461696] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2384.462395] io_uring_setup+0x14f6/0x2980 [ 2384.462934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2384.463599] ? wait_for_completion_io+0x270/0x270 [ 2384.464328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2384.465196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.465962] do_syscall_64+0x33/0x40 [ 2384.466496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2384.467206] RIP: 0033:0x7f910a3bdb19 [ 2384.467759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.470366] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2384.471452] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2384.472411] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 10:59:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008002000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2384.473426] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2384.474748] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2384.475678] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2384.482150] FAULT_INJECTION: forcing a failure. [ 2384.482150] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.483930] CPU: 1 PID: 20522 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2384.484874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.485916] Call Trace: [ 2384.486304] dump_stack+0x107/0x167 [ 2384.486770] should_fail.cold+0x5/0xa [ 2384.487264] ? create_object.isra.0+0x3a/0xa20 [ 2384.487864] should_failslab+0x5/0x20 [ 2384.488368] kmem_cache_alloc+0x5b/0x310 [ 2384.488667] FAULT_INJECTION: forcing a failure. [ 2384.488667] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.488895] create_object.isra.0+0x3a/0xa20 [ 2384.488915] kmemleak_alloc_percpu+0xa0/0x100 [ 2384.488934] pcpu_alloc+0x4e2/0x1240 [ 2384.488958] ? io_async_queue_proc+0x80/0x80 [ 2384.493755] percpu_ref_init+0x31/0x3d0 [ 2384.494375] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2384.495119] io_uring_setup+0x14f6/0x2980 [ 2384.495692] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2384.496426] ? wait_for_completion_io+0x270/0x270 [ 2384.497135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2384.497886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.498624] do_syscall_64+0x33/0x40 [ 2384.499160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2384.499887] RIP: 0033:0x7fb3e1098b19 [ 2384.500432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.503061] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2384.504167] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2384.505193] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2384.506196] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2384.507260] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2384.508243] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2384.509235] CPU: 0 PID: 20526 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2384.510367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.511736] Call Trace: [ 2384.512152] dump_stack+0x107/0x167 [ 2384.512711] should_fail.cold+0x5/0xa [ 2384.513265] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2384.514024] should_failslab+0x5/0x20 [ 2384.514661] kmem_cache_alloc_trace+0x55/0x320 [ 2384.515366] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2384.516148] ? io_import_iovec+0x1120/0x1120 [ 2384.516821] ? lock_downgrade+0x6d0/0x6d0 [ 2384.517415] ? do_raw_spin_lock+0x121/0x260 [ 2384.517993] ? rwlock_bug.part.0+0x90/0x90 [ 2384.518588] __io_uring_add_tctx_node+0x2c6/0x520 [ 2384.519279] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2384.519996] ? alloc_fd+0x2e7/0x670 [ 2384.520513] io_uring_setup+0x1fbb/0x2980 [ 2384.521082] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2384.521713] ? wait_for_completion_io+0x270/0x270 [ 2384.522408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2384.523173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.523940] do_syscall_64+0x33/0x40 [ 2384.524497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2384.525241] RIP: 0033:0x7fb073b23b19 [ 2384.525783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.528494] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2384.529595] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2384.531408] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2384.532431] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2384.533958] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2384.535027] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:59:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 18) 10:59:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x8}, {r0}], 0x6, 0x47) [ 2384.585594] FAULT_INJECTION: forcing a failure. [ 2384.585594] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.587141] CPU: 1 PID: 20566 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2384.588038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.589363] Call Trace: [ 2384.589725] dump_stack+0x107/0x167 [ 2384.590247] should_fail.cold+0x5/0xa [ 2384.590780] ? percpu_ref_init+0xd8/0x3d0 [ 2384.591337] should_failslab+0x5/0x20 [ 2384.591929] kmem_cache_alloc_trace+0x55/0x320 [ 2384.592620] ? io_async_queue_proc+0x80/0x80 [ 2384.593242] percpu_ref_init+0xd8/0x3d0 [ 2384.593838] io_rsrc_node_switch_start.part.0+0x6a/0x250 10:59:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 17) [ 2384.594649] io_uring_setup+0x14f6/0x2980 [ 2384.595579] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2384.596299] ? wait_for_completion_io+0x270/0x270 [ 2384.597006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2384.597755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.598529] do_syscall_64+0x33/0x40 [ 2384.599064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2384.599778] RIP: 0033:0x7f910a3bdb19 [ 2384.600293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.602930] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2384.603990] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2384.604978] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2384.605957] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2384.606965] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2384.607973] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2384.656263] FAULT_INJECTION: forcing a failure. [ 2384.656263] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.657876] CPU: 1 PID: 20630 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2384.658785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.659876] Call Trace: [ 2384.660267] dump_stack+0x107/0x167 [ 2384.660750] should_fail.cold+0x5/0xa [ 2384.661248] ? create_object.isra.0+0x3a/0xa20 [ 2384.661831] ? create_object.isra.0+0x3a/0xa20 [ 2384.662449] should_failslab+0x5/0x20 [ 2384.662934] kmem_cache_alloc+0x5b/0x310 [ 2384.663453] create_object.isra.0+0x3a/0xa20 [ 2384.664060] kmemleak_alloc_percpu+0xa0/0x100 [ 2384.664653] pcpu_alloc+0x4e2/0x1240 [ 2384.665153] ? io_async_queue_proc+0x80/0x80 [ 2384.665857] percpu_ref_init+0x31/0x3d0 [ 2384.666430] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2384.667341] io_uring_setup+0x14f6/0x2980 [ 2384.667939] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2384.668676] ? wait_for_completion_io+0x270/0x270 [ 2384.669390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2384.670135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2384.670935] do_syscall_64+0x33/0x40 [ 2384.671469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2384.672205] RIP: 0033:0x7fb3e1098b19 [ 2384.672732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.675289] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2384.676384] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2384.677387] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2384.678354] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2384.679308] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2384.680323] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:59:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 18) 10:59:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 32) 10:59:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:59:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008003000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 10:59:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 19) 10:59:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x64}, {r0}], 0x6, 0x47) [ 2400.817941] FAULT_INJECTION: forcing a failure. [ 2400.817941] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.820491] CPU: 1 PID: 20649 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2400.826834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2400.831020] Call Trace: [ 2400.832126] dump_stack+0x107/0x167 [ 2400.832810] should_fail.cold+0x5/0xa [ 2400.834199] ? percpu_ref_init+0xd8/0x3d0 [ 2400.836835] should_failslab+0x5/0x20 [ 2400.837380] kmem_cache_alloc_trace+0x55/0x320 [ 2400.838029] ? io_async_queue_proc+0x80/0x80 [ 2400.838642] percpu_ref_init+0xd8/0x3d0 [ 2400.839166] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2400.839859] io_uring_setup+0x14f6/0x2980 [ 2400.840412] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2400.841066] ? wait_for_completion_io+0x270/0x270 [ 2400.841705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2400.842370] FAULT_INJECTION: forcing a failure. [ 2400.842370] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.843782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.844451] do_syscall_64+0x33/0x40 [ 2400.844934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2400.845602] RIP: 0033:0x7fb3e1098b19 [ 2400.846080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.848931] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2400.849955] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2400.850940] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2400.851840] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2400.852999] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2400.854131] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2400.856732] CPU: 0 PID: 20662 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2400.858082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2400.861496] Call Trace: [ 2400.862561] dump_stack+0x107/0x167 [ 2400.863782] should_fail.cold+0x5/0xa [ 2400.865539] ? create_object.isra.0+0x3a/0xa20 [ 2400.867251] should_failslab+0x5/0x20 [ 2400.868631] kmem_cache_alloc+0x5b/0x310 [ 2400.870050] create_object.isra.0+0x3a/0xa20 [ 2400.871796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2400.872878] kmem_cache_alloc_trace+0x151/0x320 [ 2400.873739] ? io_async_queue_proc+0x80/0x80 [ 2400.874524] percpu_ref_init+0xd8/0x3d0 [ 2400.875231] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2400.876167] io_uring_setup+0x14f6/0x2980 [ 2400.876807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2400.877627] ? wait_for_completion_io+0x270/0x270 [ 2400.878467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2400.879330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.880168] do_syscall_64+0x33/0x40 [ 2400.880742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2400.881744] RIP: 0033:0x7f910a3bdb19 [ 2400.882353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.885074] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2400.886241] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2400.887298] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2400.888434] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2400.889387] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2400.890311] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2400.901317] FAULT_INJECTION: forcing a failure. [ 2400.901317] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.903108] CPU: 0 PID: 20650 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2400.904030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2400.905179] Call Trace: [ 2400.905541] dump_stack+0x107/0x167 [ 2400.906010] should_fail.cold+0x5/0xa [ 2400.906601] ? create_object.isra.0+0x3a/0xa20 [ 2400.907239] should_failslab+0x5/0x20 [ 2400.907758] kmem_cache_alloc+0x5b/0x310 [ 2400.908309] create_object.isra.0+0x3a/0xa20 [ 2400.908906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2400.909613] kmem_cache_alloc_trace+0x151/0x320 [ 2400.910263] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2400.911010] ? io_import_iovec+0x1120/0x1120 [ 2400.911620] ? lock_downgrade+0x6d0/0x6d0 [ 2400.912190] ? do_raw_spin_lock+0x121/0x260 [ 2400.912788] ? rwlock_bug.part.0+0x90/0x90 [ 2400.913385] __io_uring_add_tctx_node+0x2c6/0x520 [ 2400.914048] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2400.915317] ? alloc_fd+0x2e7/0x670 [ 2400.915830] io_uring_setup+0x1fbb/0x2980 [ 2400.916401] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2400.917081] ? wait_for_completion_io+0x270/0x270 [ 2400.917771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2400.918515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.920427] do_syscall_64+0x33/0x40 [ 2400.921777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2400.923697] RIP: 0033:0x7fb073b23b19 [ 2400.925005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.931761] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2400.934531] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2400.937069] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2400.940647] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2400.943123] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2400.945590] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:59:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008004000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 10:59:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 19) 10:59:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008005000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1200}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2401.050072] FAULT_INJECTION: forcing a failure. [ 2401.050072] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.054660] CPU: 1 PID: 20769 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2401.057218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.060131] Call Trace: [ 2401.061021] dump_stack+0x107/0x167 [ 2401.062241] should_fail.cold+0x5/0xa [ 2401.063615] ? create_object.isra.0+0x3a/0xa20 [ 2401.065451] should_failslab+0x5/0x20 [ 2401.066785] kmem_cache_alloc+0x5b/0x310 [ 2401.068170] create_object.isra.0+0x3a/0xa20 [ 2401.069712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2401.071607] kmem_cache_alloc_trace+0x151/0x320 [ 2401.073464] ? io_async_queue_proc+0x80/0x80 [ 2401.075100] percpu_ref_init+0xd8/0x3d0 [ 2401.076457] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2401.078531] io_uring_setup+0x14f6/0x2980 [ 2401.080119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2401.081965] ? wait_for_completion_io+0x270/0x270 [ 2401.083643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.085462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.087274] do_syscall_64+0x33/0x40 [ 2401.088608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.090429] RIP: 0033:0x7fb3e1098b19 [ 2401.091670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.098127] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2401.100984] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2401.103825] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2401.106623] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2401.109402] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2401.112062] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:59:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x7a1}, {r0}], 0x6, 0x47) 10:59:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 20) 10:59:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 10:59:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008006000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:40 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 33) 10:59:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1800}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:59:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x6400}, {r0}], 0x6, 0x47) [ 2417.077744] FAULT_INJECTION: forcing a failure. [ 2417.077744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2417.082121] CPU: 1 PID: 20793 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2417.083371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.086834] Call Trace: [ 2417.087909] dump_stack+0x107/0x167 [ 2417.088626] should_fail.cold+0x5/0xa [ 2417.089348] _copy_to_user+0x2e/0x180 [ 2417.090099] io_uring_setup+0x11b5/0x2980 [ 2417.090922] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.091897] ? wait_for_completion_io+0x270/0x270 [ 2417.092856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.093823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.094836] do_syscall_64+0x33/0x40 [ 2417.095525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.096514] RIP: 0033:0x7f910a3bdb19 [ 2417.097230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.100086] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.101113] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2417.102086] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2417.103072] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2417.103982] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2417.104868] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2417.111157] FAULT_INJECTION: forcing a failure. [ 2417.111157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2417.112760] CPU: 1 PID: 20796 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2417.113627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.114732] Call Trace: [ 2417.115092] dump_stack+0x107/0x167 [ 2417.115571] should_fail.cold+0x5/0xa [ 2417.116070] _copy_to_user+0x2e/0x180 [ 2417.116561] io_uring_setup+0x11b5/0x2980 [ 2417.117124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.117801] ? wait_for_completion_io+0x270/0x270 [ 2417.118421] FAULT_INJECTION: forcing a failure. [ 2417.118421] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.118466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.120678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.121327] do_syscall_64+0x33/0x40 [ 2417.121809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.122470] RIP: 0033:0x7fb3e1098b19 [ 2417.122975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.125323] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.126316] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2417.127273] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2417.128216] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2417.129252] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2417.130139] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2417.131094] CPU: 0 PID: 20798 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2417.132218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.133431] Call Trace: [ 2417.133842] dump_stack+0x107/0x167 [ 2417.134378] should_fail.cold+0x5/0xa [ 2417.135221] ? io_wq_create+0xeb/0xc00 [ 2417.135873] should_failslab+0x5/0x20 [ 2417.136491] __kmalloc+0x72/0x390 [ 2417.137013] io_wq_create+0xeb/0xc00 [ 2417.137595] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2417.138362] ? io_import_iovec+0x1120/0x1120 [ 2417.139054] ? io_apoll_task_func+0x2d0/0x2d0 [ 2417.139718] ? __io_req_find_next+0x300/0x300 [ 2417.140432] ? do_raw_spin_lock+0x121/0x260 [ 2417.141084] ? rwlock_bug.part.0+0x90/0x90 10:59:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 20) 10:59:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1e00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2417.141743] __io_uring_add_tctx_node+0x2c6/0x520 [ 2417.142991] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2417.143799] ? alloc_fd+0x2e7/0x670 [ 2417.144451] io_uring_setup+0x1fbb/0x2980 [ 2417.145085] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.145763] ? wait_for_completion_io+0x270/0x270 [ 2417.146445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.147196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.147899] do_syscall_64+0x33/0x40 [ 2417.148410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.149136] RIP: 0033:0x7fb073b23b19 [ 2417.149673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.152457] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.153623] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2417.154620] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2417.155668] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2417.156738] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2417.157706] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 10:59:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008007000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 21) 10:59:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 21) 10:59:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:59:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) [ 2417.294455] FAULT_INJECTION: forcing a failure. [ 2417.294455] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.296384] CPU: 0 PID: 20809 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2417.297388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.298655] Call Trace: [ 2417.299065] dump_stack+0x107/0x167 [ 2417.299610] should_fail.cold+0x5/0xa [ 2417.300193] ? __d_alloc+0x2a/0x990 [ 2417.300765] should_failslab+0x5/0x20 [ 2417.301343] kmem_cache_alloc+0x5b/0x310 [ 2417.301966] __d_alloc+0x2a/0x990 [ 2417.302476] ? find_held_lock+0x2c/0x110 [ 2417.303089] d_alloc_pseudo+0x19/0x70 [ 2417.303703] alloc_file_pseudo+0xce/0x250 [ 2417.304394] ? trace_hardirqs_on+0x5b/0x180 [ 2417.305043] ? alloc_file+0x5a0/0x5a0 [ 2417.305636] anon_inode_getfile+0xc8/0x1f0 [ 2417.306247] io_uring_setup+0x138b/0x2980 [ 2417.306877] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.307648] ? wait_for_completion_io+0x270/0x270 [ 2417.308408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.309135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.309871] do_syscall_64+0x33/0x40 [ 2417.310446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.311217] RIP: 0033:0x7f910a3bdb19 [ 2417.311750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.314415] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.315532] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2417.316556] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2417.317583] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2417.318618] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2417.319644] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2417.323035] FAULT_INJECTION: forcing a failure. [ 2417.323035] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.324716] CPU: 0 PID: 20810 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2417.325699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.326896] Call Trace: [ 2417.327279] dump_stack+0x107/0x167 [ 2417.327812] should_fail.cold+0x5/0xa [ 2417.328359] ? __d_alloc+0x2a/0x990 [ 2417.328898] should_failslab+0x5/0x20 [ 2417.329424] kmem_cache_alloc+0x5b/0x310 [ 2417.330035] __d_alloc+0x2a/0x990 [ 2417.330609] ? find_held_lock+0x2c/0x110 [ 2417.331236] d_alloc_pseudo+0x19/0x70 [ 2417.331828] alloc_file_pseudo+0xce/0x250 [ 2417.332542] ? trace_hardirqs_on+0x5b/0x180 [ 2417.333260] ? alloc_file+0x5a0/0x5a0 [ 2417.333811] anon_inode_getfile+0xc8/0x1f0 [ 2417.334473] io_uring_setup+0x138b/0x2980 [ 2417.335074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.335746] ? wait_for_completion_io+0x270/0x270 [ 2417.336435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.337194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.338109] do_syscall_64+0x33/0x40 [ 2417.338700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.339468] RIP: 0033:0x7fb3e1098b19 [ 2417.340065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.343245] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.344370] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2417.345434] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2417.346489] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2417.347629] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2417.348725] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:59:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0xa107}, {r0}], 0x6, 0x47) 10:59:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 10:59:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2400}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:59:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008008000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 34) 10:59:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 22) 10:59:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 22) [ 2433.234577] FAULT_INJECTION: forcing a failure. [ 2433.234577] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.237476] CPU: 0 PID: 20841 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2433.239210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.240757] FAULT_INJECTION: forcing a failure. [ 2433.240757] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.241740] Call Trace: [ 2433.241780] dump_stack+0x107/0x167 [ 2433.241825] should_fail.cold+0x5/0xa [ 2433.247679] ? create_object.isra.0+0x3a/0xa20 [ 2433.249115] should_failslab+0x5/0x20 [ 2433.250045] kmem_cache_alloc+0x5b/0x310 [ 2433.251071] create_object.isra.0+0x3a/0xa20 [ 2433.252169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.253432] kmem_cache_alloc+0x159/0x310 [ 2433.254473] __d_alloc+0x2a/0x990 [ 2433.255368] ? find_held_lock+0x2c/0x110 [ 2433.256394] d_alloc_pseudo+0x19/0x70 [ 2433.257347] alloc_file_pseudo+0xce/0x250 [ 2433.258417] ? trace_hardirqs_on+0x5b/0x180 [ 2433.259616] ? alloc_file+0x5a0/0x5a0 [ 2433.260806] anon_inode_getfile+0xc8/0x1f0 [ 2433.262096] io_uring_setup+0x138b/0x2980 [ 2433.263391] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2433.264974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.266559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.268141] do_syscall_64+0x33/0x40 [ 2433.269272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.270834] RIP: 0033:0x7fb3e1098b19 [ 2433.271972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.277529] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2433.279838] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2433.281996] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2433.284170] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2433.286332] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2433.288494] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2433.290760] CPU: 1 PID: 20842 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2433.292733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.295052] Call Trace: [ 2433.295802] dump_stack+0x107/0x167 [ 2433.296830] should_fail.cold+0x5/0xa [ 2433.297906] ? create_object.isra.0+0x3a/0xa20 [ 2433.299188] should_failslab+0x5/0x20 [ 2433.300245] kmem_cache_alloc+0x5b/0x310 [ 2433.301382] create_object.isra.0+0x3a/0xa20 [ 2433.302602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.304038] __kmalloc+0x16e/0x390 [ 2433.305046] io_wq_create+0xeb/0xc00 [ 2433.306104] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2433.307464] ? io_import_iovec+0x1120/0x1120 [ 2433.308462] ? io_apoll_task_func+0x2d0/0x2d0 [ 2433.309472] ? __io_req_find_next+0x300/0x300 [ 2433.310476] ? do_raw_spin_lock+0x121/0x260 [ 2433.311468] ? rwlock_bug.part.0+0x90/0x90 [ 2433.312431] __io_uring_add_tctx_node+0x2c6/0x520 [ 2433.313591] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2433.314817] ? alloc_fd+0x2e7/0x670 [ 2433.315649] io_uring_setup+0x1fbb/0x2980 [ 2433.316745] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2433.318199] ? wait_for_completion_io+0x270/0x270 [ 2433.319439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.320619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.321766] do_syscall_64+0x33/0x40 [ 2433.322653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.323818] RIP: 0033:0x7fb073b23b19 [ 2433.324651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.328681] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2433.330430] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2433.332058] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2433.333642] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2433.335292] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2433.336892] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2433.337855] FAULT_INJECTION: forcing a failure. [ 2433.337855] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.341394] CPU: 0 PID: 20844 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2433.343115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.345179] Call Trace: [ 2433.345840] dump_stack+0x107/0x167 [ 2433.346760] should_fail.cold+0x5/0xa [ 2433.347711] ? create_object.isra.0+0x3a/0xa20 [ 2433.348977] should_failslab+0x5/0x20 [ 2433.349937] kmem_cache_alloc+0x5b/0x310 [ 2433.350987] create_object.isra.0+0x3a/0xa20 [ 2433.352096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.353395] kmem_cache_alloc+0x159/0x310 [ 2433.354450] __d_alloc+0x2a/0x990 [ 2433.355339] ? find_held_lock+0x2c/0x110 [ 2433.356374] d_alloc_pseudo+0x19/0x70 [ 2433.357337] alloc_file_pseudo+0xce/0x250 [ 2433.358382] ? trace_hardirqs_on+0x5b/0x180 [ 2433.359512] ? alloc_file+0x5a0/0x5a0 [ 2433.360501] anon_inode_getfile+0xc8/0x1f0 [ 2433.361572] io_uring_setup+0x138b/0x2980 [ 2433.362644] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2433.363943] ? wait_for_completion_io+0x270/0x270 [ 2433.365199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.366584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.367904] do_syscall_64+0x33/0x40 [ 2433.368846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.370147] RIP: 0033:0x7f910a3bdb19 [ 2433.371096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.375776] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2433.377917] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2433.379992] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2433.382060] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2433.384012] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2433.385911] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 10:59:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008018000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 10:59:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0xff00}, {r0}], 0x6, 0x47) 10:59:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2a00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 10:59:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:59:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 23) 10:59:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) [ 2433.563373] FAULT_INJECTION: forcing a failure. [ 2433.563373] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.565962] CPU: 0 PID: 20854 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2433.567557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.569418] Call Trace: [ 2433.570011] dump_stack+0x107/0x167 [ 2433.570913] should_fail.cold+0x5/0xa [ 2433.571761] ? __alloc_file+0x21/0x320 [ 2433.572627] should_failslab+0x5/0x20 [ 2433.573478] kmem_cache_alloc+0x5b/0x310 [ 2433.574385] __alloc_file+0x21/0x320 [ 2433.575229] alloc_empty_file+0x6d/0x170 [ 2433.576133] alloc_file+0x5e/0x5a0 [ 2433.576926] alloc_file_pseudo+0x16a/0x250 [ 2433.577865] ? alloc_file+0x5a0/0x5a0 [ 2433.578738] anon_inode_getfile+0xc8/0x1f0 [ 2433.579706] io_uring_setup+0x138b/0x2980 [ 2433.580739] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2433.581940] ? wait_for_completion_io+0x270/0x270 [ 2433.583069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.584357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.585508] do_syscall_64+0x33/0x40 [ 2433.586410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.587594] RIP: 0033:0x7fb3e1098b19 [ 2433.588537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.592841] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2433.594603] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2433.596299] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2433.597935] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2433.599607] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2433.601318] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000801c000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 35) 11:00:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:00:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 11:00:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 24) 11:00:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 23) 11:00:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2448.809490] FAULT_INJECTION: forcing a failure. [ 2448.809490] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.811184] CPU: 1 PID: 20875 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2448.812159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.813238] Call Trace: [ 2448.813594] dump_stack+0x107/0x167 [ 2448.814097] should_fail.cold+0x5/0xa [ 2448.814639] ? __alloc_file+0x21/0x320 [ 2448.815211] should_failslab+0x5/0x20 [ 2448.815740] kmem_cache_alloc+0x5b/0x310 [ 2448.816292] __alloc_file+0x21/0x320 [ 2448.816775] alloc_empty_file+0x6d/0x170 [ 2448.817319] alloc_file+0x5e/0x5a0 [ 2448.817822] alloc_file_pseudo+0x16a/0x250 [ 2448.818391] ? alloc_file+0x5a0/0x5a0 [ 2448.818900] anon_inode_getfile+0xc8/0x1f0 [ 2448.819469] io_uring_setup+0x138b/0x2980 [ 2448.820038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2448.820741] ? wait_for_completion_io+0x270/0x270 [ 2448.821412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.821443] FAULT_INJECTION: forcing a failure. [ 2448.821443] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.822132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.822150] do_syscall_64+0x33/0x40 [ 2448.822164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.822180] RIP: 0033:0x7f910a3bdb19 [ 2448.826300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.828919] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2448.830020] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2448.831095] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2448.832073] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2448.833132] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2448.834132] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2448.835134] CPU: 0 PID: 20878 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2448.836314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.837560] Call Trace: [ 2448.837979] dump_stack+0x107/0x167 [ 2448.838517] should_fail.cold+0x5/0xa [ 2448.839156] ? io_wq_create+0x6ef/0xc00 [ 2448.839723] should_failslab+0x5/0x20 [ 2448.840279] kmem_cache_alloc_node_trace+0x59/0x340 [ 2448.841126] io_wq_create+0x6ef/0xc00 [ 2448.841764] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2448.842490] ? io_import_iovec+0x1120/0x1120 [ 2448.843140] ? io_apoll_task_func+0x2d0/0x2d0 [ 2448.843836] ? __io_req_find_next+0x300/0x300 [ 2448.844481] ? do_raw_spin_lock+0x121/0x260 [ 2448.845157] ? rwlock_bug.part.0+0x90/0x90 [ 2448.845811] __io_uring_add_tctx_node+0x2c6/0x520 [ 2448.846539] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2448.847330] ? alloc_fd+0x2e7/0x670 [ 2448.847894] io_uring_setup+0x1fbb/0x2980 [ 2448.848542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2448.849339] ? wait_for_completion_io+0x270/0x270 [ 2448.850080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.850885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.851679] do_syscall_64+0x33/0x40 [ 2448.852209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.852954] RIP: 0033:0x7fb073b23b19 11:00:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x8}, {r0}], 0x6, 0x47) [ 2448.853510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.856527] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2448.857672] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2448.858743] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2448.859803] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2448.860814] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2448.861851] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:00:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008069000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3600}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:00:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:00:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 36) 11:00:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x42, 0x0, 0x0, 0x0) 11:00:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 24) 11:00:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080f0000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x64}, {r0}], 0x6, 0x47) 11:00:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3c00}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2449.031646] FAULT_INJECTION: forcing a failure. [ 2449.031646] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.033455] CPU: 0 PID: 20895 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2449.034420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.035640] Call Trace: [ 2449.036019] dump_stack+0x107/0x167 [ 2449.036540] should_fail.cold+0x5/0xa [ 2449.037086] ? create_object.isra.0+0x3a/0xa20 [ 2449.037747] should_failslab+0x5/0x20 [ 2449.038279] kmem_cache_alloc+0x5b/0x310 [ 2449.038869] create_object.isra.0+0x3a/0xa20 [ 2449.039553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2449.040329] kmem_cache_alloc+0x159/0x310 [ 2449.041009] __alloc_file+0x21/0x320 [ 2449.041587] alloc_empty_file+0x6d/0x170 [ 2449.042216] alloc_file+0x5e/0x5a0 [ 2449.042729] alloc_file_pseudo+0x16a/0x250 [ 2449.043364] ? alloc_file+0x5a0/0x5a0 [ 2449.043952] anon_inode_getfile+0xc8/0x1f0 [ 2449.044548] io_uring_setup+0x138b/0x2980 [ 2449.045192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.046005] ? wait_for_completion_io+0x270/0x270 [ 2449.046675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.047479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.048237] do_syscall_64+0x33/0x40 [ 2449.048794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.049621] RIP: 0033:0x7fb3e1098b19 [ 2449.050249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.053079] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.054139] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2449.055174] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2449.056270] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2449.057283] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2449.058297] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2449.074030] FAULT_INJECTION: forcing a failure. [ 2449.074030] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.075684] CPU: 1 PID: 20902 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2449.076609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.077728] Call Trace: [ 2449.078076] dump_stack+0x107/0x167 [ 2449.078587] should_fail.cold+0x5/0xa [ 2449.079133] ? create_object.isra.0+0x3a/0xa20 [ 2449.079729] should_failslab+0x5/0x20 [ 2449.080253] kmem_cache_alloc+0x5b/0x310 [ 2449.080810] ? io_wq_create+0x114/0xc00 [ 2449.081364] create_object.isra.0+0x3a/0xa20 [ 2449.081954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2449.082644] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2449.083354] io_wq_create+0x6ef/0xc00 [ 2449.083880] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2449.084549] ? io_import_iovec+0x1120/0x1120 [ 2449.085142] ? io_apoll_task_func+0x2d0/0x2d0 [ 2449.085741] ? __io_req_find_next+0x300/0x300 [ 2449.086342] ? do_raw_spin_lock+0x121/0x260 [ 2449.086910] ? rwlock_bug.part.0+0x90/0x90 [ 2449.087039] FAULT_INJECTION: forcing a failure. [ 2449.087039] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.087490] __io_uring_add_tctx_node+0x2c6/0x520 [ 2449.089664] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.090363] ? alloc_fd+0x2e7/0x670 [ 2449.090859] io_uring_setup+0x1fbb/0x2980 [ 2449.091429] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.092078] ? wait_for_completion_io+0x270/0x270 [ 2449.092740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.093443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.094156] do_syscall_64+0x33/0x40 [ 2449.094662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.095394] RIP: 0033:0x7fb073b23b19 [ 2449.095950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.098623] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.099815] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2449.100806] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2449.101835] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2449.102855] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2449.103928] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2449.104940] CPU: 0 PID: 20905 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2449.106050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.107320] Call Trace: [ 2449.107735] dump_stack+0x107/0x167 [ 2449.108275] should_fail.cold+0x5/0xa [ 2449.108841] ? create_object.isra.0+0x3a/0xa20 [ 2449.109518] should_failslab+0x5/0x20 [ 2449.110080] kmem_cache_alloc+0x5b/0x310 [ 2449.110672] create_object.isra.0+0x3a/0xa20 [ 2449.111338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2449.112068] kmem_cache_alloc+0x159/0x310 [ 2449.112698] __alloc_file+0x21/0x320 [ 2449.113218] alloc_empty_file+0x6d/0x170 [ 2449.113764] alloc_file+0x5e/0x5a0 [ 2449.114313] alloc_file_pseudo+0x16a/0x250 [ 2449.114968] ? alloc_file+0x5a0/0x5a0 [ 2449.115552] anon_inode_getfile+0xc8/0x1f0 [ 2449.116138] io_uring_setup+0x138b/0x2980 [ 2449.116755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.117487] ? wait_for_completion_io+0x270/0x270 [ 2449.118214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.119037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.119748] do_syscall_64+0x33/0x40 [ 2449.120250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.120951] RIP: 0033:0x7f910a3bdb19 [ 2449.121462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.124058] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.125151] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2449.126118] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2449.127129] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2449.128130] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2449.129122] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:00:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 37) 11:00:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 25) 11:00:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:00:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x7a1}, {r0}], 0x6, 0x47) 11:00:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000030006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 25) 11:00:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2e3, 0x0, 0x0, 0x0) [ 2465.388793] FAULT_INJECTION: forcing a failure. [ 2465.388793] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.390628] CPU: 0 PID: 20920 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2465.391701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2465.392968] Call Trace: [ 2465.393398] dump_stack+0x107/0x167 [ 2465.393949] should_fail.cold+0x5/0xa [ 2465.394535] ? security_file_alloc+0x34/0x170 [ 2465.395232] should_failslab+0x5/0x20 [ 2465.395812] kmem_cache_alloc+0x5b/0x310 [ 2465.396425] security_file_alloc+0x34/0x170 [ 2465.397033] __alloc_file+0xb7/0x320 [ 2465.397547] alloc_empty_file+0x6d/0x170 [ 2465.398121] alloc_file+0x5e/0x5a0 [ 2465.398667] alloc_file_pseudo+0x16a/0x250 [ 2465.399350] ? alloc_file+0x5a0/0x5a0 [ 2465.399951] anon_inode_getfile+0xc8/0x1f0 [ 2465.400619] io_uring_setup+0x138b/0x2980 [ 2465.401237] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2465.402010] ? wait_for_completion_io+0x270/0x270 [ 2465.402791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2465.403617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2465.404409] do_syscall_64+0x33/0x40 [ 2465.404945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2465.405686] RIP: 0033:0x7f910a3bdb19 [ 2465.406215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.408994] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2465.410186] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2465.411271] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2465.412363] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2465.413449] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2465.414455] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2465.421452] FAULT_INJECTION: forcing a failure. [ 2465.421452] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.425807] CPU: 1 PID: 20928 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2465.428396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2465.429595] Call Trace: [ 2465.430559] dump_stack+0x107/0x167 [ 2465.431096] should_fail.cold+0x5/0xa [ 2465.431630] ? create_object.isra.0+0x3a/0xa20 [ 2465.432256] should_failslab+0x5/0x20 [ 2465.432781] kmem_cache_alloc+0x5b/0x310 [ 2465.433340] create_object.isra.0+0x3a/0xa20 [ 2465.434932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2465.436820] kmem_cache_alloc+0x159/0x310 [ 2465.438370] __alloc_file+0x21/0x320 [ 2465.439718] alloc_empty_file+0x6d/0x170 [ 2465.441150] alloc_file+0x5e/0x5a0 [ 2465.441671] alloc_file_pseudo+0x16a/0x250 [ 2465.443232] ? alloc_file+0x5a0/0x5a0 [ 2465.444593] anon_inode_getfile+0xc8/0x1f0 [ 2465.445192] io_uring_setup+0x138b/0x2980 [ 2465.445792] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2465.446511] ? wait_for_completion_io+0x270/0x270 [ 2465.447229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2465.447981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2465.448713] do_syscall_64+0x33/0x40 [ 2465.449236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2465.449933] RIP: 0033:0x7fb3e1098b19 [ 2465.450395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.452685] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2465.453657] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2465.454576] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2465.455525] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2465.456482] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2465.457456] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008080040006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4200}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:00:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x6400}, {r0}], 0x6, 0x47) 11:00:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 26) 11:00:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000050006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2465.548950] FAULT_INJECTION: forcing a failure. [ 2465.548950] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.550616] CPU: 0 PID: 20934 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2465.551596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2465.552704] Call Trace: [ 2465.553129] dump_stack+0x107/0x167 [ 2465.553690] should_fail.cold+0x5/0xa [ 2465.554228] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2465.554985] should_failslab+0x5/0x20 [ 2465.555557] kmem_cache_alloc_trace+0x55/0x320 [ 2465.556222] __io_uring_add_tctx_node+0x15c/0x520 [ 2465.556940] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2465.557734] ? alloc_fd+0x2e7/0x670 [ 2465.558398] io_uring_setup+0x1fbb/0x2980 [ 2465.559014] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2465.559827] ? wait_for_completion_io+0x270/0x270 [ 2465.560615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2465.561408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2465.562202] do_syscall_64+0x33/0x40 [ 2465.562791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2465.563606] RIP: 0033:0x7fb073b23b19 [ 2465.564169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.567039] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2465.568257] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2465.569311] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2465.570400] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2465.571507] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2465.572569] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:00:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x321, 0x0, 0x0, 0x0) [ 2465.682690] FAULT_INJECTION: forcing a failure. [ 2465.682690] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.684366] CPU: 1 PID: 20947 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2465.685341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2465.686481] Call Trace: [ 2465.686845] dump_stack+0x107/0x167 [ 2465.687358] should_fail.cold+0x5/0xa [ 2465.687871] ? create_object.isra.0+0x3a/0xa20 [ 2465.688497] should_failslab+0x5/0x20 [ 2465.689030] kmem_cache_alloc+0x5b/0x310 [ 2465.689600] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2465.690378] create_object.isra.0+0x3a/0xa20 [ 2465.690996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2465.691720] kmem_cache_alloc+0x159/0x310 [ 2465.692296] security_file_alloc+0x34/0x170 [ 2465.692909] __alloc_file+0xb7/0x320 [ 2465.693438] alloc_empty_file+0x6d/0x170 [ 2465.694010] alloc_file+0x5e/0x5a0 [ 2465.694521] alloc_file_pseudo+0x16a/0x250 [ 2465.695126] ? alloc_file+0x5a0/0x5a0 [ 2465.695671] anon_inode_getfile+0xc8/0x1f0 [ 2465.696240] io_uring_setup+0x138b/0x2980 [ 2465.696834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2465.697505] ? wait_for_completion_io+0x270/0x270 [ 2465.698180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2465.698924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2465.699683] do_syscall_64+0x33/0x40 [ 2465.700215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2465.700939] RIP: 0033:0x7f910a3bdb19 [ 2465.701474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.704060] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2465.705153] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2465.706099] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2465.707047] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2465.707997] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2465.708989] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 27) 11:00:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x6000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:00:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 38) 11:00:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0xa107}, {r0}], 0x6, 0x47) 11:00:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000060006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 26) 11:00:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:00:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) 11:00:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000070006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2481.970509] FAULT_INJECTION: forcing a failure. [ 2481.970509] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.972712] CPU: 1 PID: 20964 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2481.973622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.974858] Call Trace: [ 2481.975269] dump_stack+0x107/0x167 [ 2481.975774] should_fail.cold+0x5/0xa [ 2481.976332] ? security_file_alloc+0x34/0x170 [ 2481.977009] should_failslab+0x5/0x20 [ 2481.977582] kmem_cache_alloc+0x5b/0x310 [ 2481.978275] security_file_alloc+0x34/0x170 [ 2481.978875] __alloc_file+0xb7/0x320 [ 2481.979440] alloc_empty_file+0x6d/0x170 [ 2481.979996] alloc_file+0x5e/0x5a0 [ 2481.980458] alloc_file_pseudo+0x16a/0x250 [ 2481.981012] ? alloc_file+0x5a0/0x5a0 [ 2481.981545] anon_inode_getfile+0xc8/0x1f0 [ 2481.982115] io_uring_setup+0x138b/0x2980 [ 2481.982661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2481.983346] ? wait_for_completion_io+0x270/0x270 [ 2481.984040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.984774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.985449] do_syscall_64+0x33/0x40 [ 2481.985943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.986631] RIP: 0033:0x7fb3e1098b19 [ 2481.987138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.989676] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2481.990705] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2481.991707] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2481.992634] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2481.993581] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2481.994509] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2481.994840] FAULT_INJECTION: forcing a failure. [ 2481.994840] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.997240] CPU: 0 PID: 20974 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2481.998261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.999518] Call Trace: [ 2481.999929] dump_stack+0x107/0x167 [ 2482.000477] should_fail.cold+0x5/0xa [ 2482.001036] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2482.001838] should_failslab+0x5/0x20 [ 2482.002387] kmem_cache_alloc_trace+0x55/0x320 [ 2482.003091] io_uring_alloc_task_context+0x99/0x6a0 [ 2482.003873] ? io_import_iovec+0x1120/0x1120 [ 2482.004547] ? lock_downgrade+0x6d0/0x6d0 [ 2482.005194] ? do_raw_spin_lock+0x121/0x260 [ 2482.005822] ? rwlock_bug.part.0+0x90/0x90 [ 2482.006458] __io_uring_add_tctx_node+0x2c6/0x520 [ 2482.007193] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.008001] ? alloc_fd+0x2e7/0x670 [ 2482.008558] io_uring_setup+0x1fbb/0x2980 [ 2482.009209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.009986] ? wait_for_completion_io+0x270/0x270 [ 2482.010727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.011537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.012344] do_syscall_64+0x33/0x40 [ 2482.012915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.013701] RIP: 0033:0x7f910a3bdb19 [ 2482.014251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.017118] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.018298] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2482.019399] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2482.020471] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2482.021542] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2482.022516] FAULT_INJECTION: forcing a failure. [ 2482.022516] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.022655] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2482.025475] CPU: 1 PID: 20966 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2482.026420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.027553] Call Trace: [ 2482.027934] dump_stack+0x107/0x167 [ 2482.028452] should_fail.cold+0x5/0xa [ 2482.028996] ? create_object.isra.0+0x3a/0xa20 [ 2482.029643] should_failslab+0x5/0x20 [ 2482.030197] kmem_cache_alloc+0x5b/0x310 [ 2482.030771] create_object.isra.0+0x3a/0xa20 [ 2482.031417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2482.032097] kmem_cache_alloc_trace+0x151/0x320 [ 2482.032738] __io_uring_add_tctx_node+0x15c/0x520 [ 2482.033424] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.034128] ? alloc_fd+0x2e7/0x670 [ 2482.034638] io_uring_setup+0x1fbb/0x2980 [ 2482.035213] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.035995] ? wait_for_completion_io+0x270/0x270 [ 2482.036677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.037382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.038106] do_syscall_64+0x33/0x40 [ 2482.038630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.039365] RIP: 0033:0x7fb073b23b19 [ 2482.039915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.042482] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.043582] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2482.044634] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2482.045634] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2482.046584] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2482.047615] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:00:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 27) 11:00:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 28) 11:00:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000180006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2482.145051] FAULT_INJECTION: forcing a failure. [ 2482.145051] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.146959] CPU: 0 PID: 20980 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2482.148200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.149345] Call Trace: [ 2482.149730] dump_stack+0x107/0x167 [ 2482.150245] should_fail.cold+0x5/0xa [ 2482.150795] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2482.151615] should_failslab+0x5/0x20 [ 2482.152175] kmem_cache_alloc_trace+0x55/0x320 [ 2482.152833] io_uring_alloc_task_context+0x99/0x6a0 [ 2482.153539] ? io_import_iovec+0x1120/0x1120 [ 2482.154155] ? lock_downgrade+0x6d0/0x6d0 [ 2482.154746] ? do_raw_spin_lock+0x121/0x260 [ 2482.155382] ? rwlock_bug.part.0+0x90/0x90 [ 2482.156021] __io_uring_add_tctx_node+0x2c6/0x520 11:00:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0xff00}, {r0}], 0x6, 0x47) 11:00:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x9100}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2482.157073] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.157842] ? alloc_fd+0x2e7/0x670 [ 2482.158378] io_uring_setup+0x1fbb/0x2980 [ 2482.158995] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.159772] ? wait_for_completion_io+0x270/0x270 [ 2482.160522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.161302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.162054] do_syscall_64+0x33/0x40 [ 2482.162647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.163478] RIP: 0033:0x7fb3e1098b19 11:00:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2482.164058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.167100] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.168203] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2482.169234] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2482.170245] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2482.171225] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2482.172262] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2482.179375] FAULT_INJECTION: forcing a failure. [ 2482.179375] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.181117] CPU: 1 PID: 20983 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2482.182053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.183425] Call Trace: [ 2482.183902] dump_stack+0x107/0x167 [ 2482.184396] should_fail.cold+0x5/0xa [ 2482.184929] ? create_object.isra.0+0x3a/0xa20 [ 2482.185547] should_failslab+0x5/0x20 [ 2482.186109] kmem_cache_alloc+0x5b/0x310 [ 2482.186705] create_object.isra.0+0x3a/0xa20 [ 2482.187359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2482.188170] kmem_cache_alloc_trace+0x151/0x320 [ 2482.188901] io_uring_alloc_task_context+0x99/0x6a0 [ 2482.189606] ? io_import_iovec+0x1120/0x1120 [ 2482.190215] ? lock_downgrade+0x6d0/0x6d0 [ 2482.190795] ? do_raw_spin_lock+0x121/0x260 [ 2482.191407] ? rwlock_bug.part.0+0x90/0x90 [ 2482.192054] __io_uring_add_tctx_node+0x2c6/0x520 [ 2482.192752] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.193634] ? alloc_fd+0x2e7/0x670 [ 2482.194151] io_uring_setup+0x1fbb/0x2980 [ 2482.194745] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.195570] ? wait_for_completion_io+0x270/0x270 [ 2482.196221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.196950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.197743] do_syscall_64+0x33/0x40 [ 2482.198279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.199028] RIP: 0033:0x7f910a3bdb19 [ 2482.199605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.202108] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.203208] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2482.204225] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2482.205206] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2482.206271] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2482.207195] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 28) 11:00:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 11:00:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080001c0006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:00:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 39) [ 2482.285105] FAULT_INJECTION: forcing a failure. [ 2482.285105] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.287059] CPU: 0 PID: 20994 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2482.288122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.289296] Call Trace: [ 2482.289673] dump_stack+0x107/0x167 [ 2482.290224] should_fail.cold+0x5/0xa [ 2482.290812] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2482.291578] should_failslab+0x5/0x20 [ 2482.292181] kmem_cache_alloc_trace+0x55/0x320 [ 2482.292855] io_uring_alloc_task_context+0x99/0x6a0 [ 2482.293547] ? io_import_iovec+0x1120/0x1120 11:00:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x9803}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2482.294186] ? lock_downgrade+0x6d0/0x6d0 [ 2482.295002] ? do_raw_spin_lock+0x121/0x260 [ 2482.295671] ? rwlock_bug.part.0+0x90/0x90 [ 2482.296356] __io_uring_add_tctx_node+0x2c6/0x520 [ 2482.297098] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.297863] ? alloc_fd+0x2e7/0x670 [ 2482.298424] io_uring_setup+0x1fbb/0x2980 [ 2482.299091] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.299861] ? wait_for_completion_io+0x270/0x270 [ 2482.300585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.301424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.302210] do_syscall_64+0x33/0x40 [ 2482.302763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.303587] RIP: 0033:0x7fb3e1098b19 [ 2482.304152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.306928] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.308135] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2482.309275] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2482.310398] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2482.311511] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2482.312641] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:00:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2482.339049] FAULT_INJECTION: forcing a failure. [ 2482.339049] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.341271] CPU: 1 PID: 21000 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2482.342261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.343492] Call Trace: [ 2482.343881] dump_stack+0x107/0x167 [ 2482.344384] should_fail.cold+0x5/0xa [ 2482.344960] ? xas_alloc+0x336/0x440 [ 2482.345588] should_failslab+0x5/0x20 [ 2482.346110] kmem_cache_alloc+0x5b/0x310 [ 2482.346672] ? stack_trace_consume_entry+0x160/0x160 [ 2482.347556] xas_alloc+0x336/0x440 [ 2482.348143] xas_create+0x34a/0x10d0 [ 2482.348673] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2482.349423] xas_store+0x8c/0x1c40 [ 2482.349954] __xa_store+0x164/0x2d0 [ 2482.350484] ? xa_delete_node+0x280/0x280 [ 2482.351085] ? trace_hardirqs_on+0x5b/0x180 [ 2482.351743] xa_store+0x31/0x50 [ 2482.352221] __io_uring_add_tctx_node+0x1cf/0x520 [ 2482.352916] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2482.353710] ? alloc_fd+0x2e7/0x670 [ 2482.354258] io_uring_setup+0x1fbb/0x2980 [ 2482.354892] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.355704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.356482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.357220] do_syscall_64+0x33/0x40 [ 2482.357765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.358579] RIP: 0033:0x7fb073b23b19 [ 2482.359110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.361799] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.362911] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2482.363934] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2482.364953] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2482.365958] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2482.367043] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:00:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 11:00:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:00:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000200006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 29) 11:01:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 40) 11:01:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2498.058989] FAULT_INJECTION: forcing a failure. [ 2498.058989] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.060758] CPU: 1 PID: 21020 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2498.061776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.062963] Call Trace: [ 2498.063341] dump_stack+0x107/0x167 [ 2498.063912] should_fail.cold+0x5/0xa [ 2498.064463] ? create_object.isra.0+0x3a/0xa20 [ 2498.065140] should_failslab+0x5/0x20 [ 2498.065699] kmem_cache_alloc+0x5b/0x310 [ 2498.066279] create_object.isra.0+0x3a/0xa20 [ 2498.066926] kmemleak_alloc_percpu+0xa0/0x100 [ 2498.067592] pcpu_alloc+0x4e2/0x1240 [ 2498.068143] __percpu_counter_init+0x10d/0x2d0 11:01:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x8}], 0x6, 0x47) 11:01:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xbf03}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 29) [ 2498.068801] io_uring_alloc_task_context+0xcc/0x6a0 [ 2498.069759] ? io_import_iovec+0x1120/0x1120 [ 2498.070404] ? lock_downgrade+0x6d0/0x6d0 [ 2498.070984] ? do_raw_spin_lock+0x121/0x260 [ 2498.071631] ? rwlock_bug.part.0+0x90/0x90 [ 2498.072249] __io_uring_add_tctx_node+0x2c6/0x520 [ 2498.072948] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2498.073687] ? alloc_fd+0x2e7/0x670 [ 2498.074208] io_uring_setup+0x1fbb/0x2980 [ 2498.074809] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2498.075555] ? wait_for_completion_io+0x270/0x270 [ 2498.076264] FAULT_INJECTION: forcing a failure. [ 2498.076264] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.076282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2498.077794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.077810] do_syscall_64+0x33/0x40 [ 2498.077825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.077836] RIP: 0033:0x7f910a3bdb19 [ 2498.077855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.083682] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2498.084717] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2498.085677] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2498.086604] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2498.087605] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2498.088552] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2498.089504] CPU: 0 PID: 21022 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2498.090643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.091900] Call Trace: [ 2498.092336] dump_stack+0x107/0x167 [ 2498.093012] should_fail.cold+0x5/0xa [ 2498.093587] ? ___slab_alloc+0x360/0x700 [ 2498.094212] ? create_object.isra.0+0x3a/0xa20 [ 2498.094891] should_failslab+0x5/0x20 [ 2498.095445] kmem_cache_alloc+0x5b/0x310 [ 2498.096101] create_object.isra.0+0x3a/0xa20 [ 2498.096770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2498.097557] kmem_cache_alloc+0x159/0x310 [ 2498.098201] xas_alloc+0x336/0x440 [ 2498.098744] xas_create+0x34a/0x10d0 [ 2498.099297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.100104] xas_store+0x8c/0x1c40 [ 2498.100667] __xa_store+0x164/0x2d0 [ 2498.101240] ? xa_delete_node+0x280/0x280 [ 2498.101872] ? trace_hardirqs_on+0x5b/0x180 [ 2498.102532] xa_store+0x31/0x50 [ 2498.103056] __io_uring_add_tctx_node+0x1cf/0x520 [ 2498.103804] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2498.104622] ? alloc_fd+0x2e7/0x670 [ 2498.105240] io_uring_setup+0x1fbb/0x2980 [ 2498.105888] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2498.106675] ? wait_for_completion_io+0x270/0x270 [ 2498.107428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2498.108243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.109027] do_syscall_64+0x33/0x40 [ 2498.109583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.110343] RIP: 0033:0x7fb073b23b19 [ 2498.110896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.113729] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2498.114898] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2498.115950] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2498.116995] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2498.118118] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2498.119213] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:01:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 11:01:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080003f0006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2498.138520] FAULT_INJECTION: forcing a failure. [ 2498.138520] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.140331] CPU: 0 PID: 21028 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2498.141300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.142468] Call Trace: [ 2498.142855] dump_stack+0x107/0x167 [ 2498.143363] should_fail.cold+0x5/0xa [ 2498.144033] ? create_object.isra.0+0x3a/0xa20 [ 2498.144927] should_failslab+0x5/0x20 [ 2498.145596] kmem_cache_alloc+0x5b/0x310 [ 2498.146214] create_object.isra.0+0x3a/0xa20 [ 2498.146836] kmemleak_alloc_percpu+0xa0/0x100 [ 2498.147493] pcpu_alloc+0x4e2/0x1240 [ 2498.148031] __percpu_counter_init+0x10d/0x2d0 [ 2498.148673] io_uring_alloc_task_context+0xcc/0x6a0 [ 2498.149384] ? io_import_iovec+0x1120/0x1120 [ 2498.150030] ? lock_downgrade+0x6d0/0x6d0 [ 2498.150627] ? do_raw_spin_lock+0x121/0x260 [ 2498.151234] ? rwlock_bug.part.0+0x90/0x90 [ 2498.151881] __io_uring_add_tctx_node+0x2c6/0x520 [ 2498.152584] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2498.153330] ? alloc_fd+0x2e7/0x670 [ 2498.153873] io_uring_setup+0x1fbb/0x2980 [ 2498.154466] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2498.155210] ? wait_for_completion_io+0x270/0x270 [ 2498.155936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2498.156666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.157397] do_syscall_64+0x33/0x40 [ 2498.157919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.158638] RIP: 0033:0x7fb3e1098b19 [ 2498.159157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.161833] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2498.162988] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2498.164071] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2498.165148] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2498.166245] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2498.167263] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000690006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x80000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2498.299478] FAULT_INJECTION: forcing a failure. [ 2498.299478] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.301266] CPU: 1 PID: 21046 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2498.302241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.303523] Call Trace: [ 2498.303912] dump_stack+0x107/0x167 [ 2498.304419] should_fail.cold+0x5/0xa [ 2498.305009] ? create_object.isra.0+0x3a/0xa20 [ 2498.305702] should_failslab+0x5/0x20 [ 2498.306256] kmem_cache_alloc+0x5b/0x310 [ 2498.306819] create_object.isra.0+0x3a/0xa20 [ 2498.307593] kmemleak_alloc_percpu+0xa0/0x100 [ 2498.308226] pcpu_alloc+0x4e2/0x1240 [ 2498.308750] __percpu_counter_init+0x10d/0x2d0 [ 2498.309428] io_uring_alloc_task_context+0xcc/0x6a0 [ 2498.310169] ? io_import_iovec+0x1120/0x1120 [ 2498.310787] ? lock_downgrade+0x6d0/0x6d0 [ 2498.311363] ? do_raw_spin_lock+0x121/0x260 [ 2498.312006] ? rwlock_bug.part.0+0x90/0x90 [ 2498.312631] __io_uring_add_tctx_node+0x2c6/0x520 [ 2498.313310] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2498.314017] ? alloc_fd+0x2e7/0x670 [ 2498.314521] io_uring_setup+0x1fbb/0x2980 [ 2498.315142] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2498.315871] ? wait_for_completion_io+0x270/0x270 [ 2498.316609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2498.317348] ? syscall_enter_from_user_mode+0x1d/0x50 11:01:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x64}], 0x6, 0x47) 11:01:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 30) [ 2498.318346] do_syscall_64+0x33/0x40 [ 2498.318894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.319620] RIP: 0033:0x7fb3e1098b19 [ 2498.320136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.322824] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2498.323994] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2498.325042] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2498.326050] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2498.327102] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2498.328120] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 11:01:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 30) [ 2498.372407] FAULT_INJECTION: forcing a failure. [ 2498.372407] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.374263] CPU: 0 PID: 21051 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2498.375311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.376562] Call Trace: [ 2498.376956] dump_stack+0x107/0x167 [ 2498.377507] should_fail.cold+0x5/0xa [ 2498.378092] ? create_object.isra.0+0x3a/0xa20 [ 2498.378829] should_failslab+0x5/0x20 [ 2498.379400] kmem_cache_alloc+0x5b/0x310 [ 2498.380053] create_object.isra.0+0x3a/0xa20 [ 2498.380722] kmemleak_alloc_percpu+0xa0/0x100 [ 2498.381417] pcpu_alloc+0x4e2/0x1240 [ 2498.381998] __percpu_counter_init+0x10d/0x2d0 [ 2498.382675] io_uring_alloc_task_context+0xcc/0x6a0 [ 2498.383436] ? io_import_iovec+0x1120/0x1120 [ 2498.384076] ? lock_downgrade+0x6d0/0x6d0 [ 2498.384687] ? do_raw_spin_lock+0x121/0x260 [ 2498.385354] ? rwlock_bug.part.0+0x90/0x90 [ 2498.385996] __io_uring_add_tctx_node+0x2c6/0x520 [ 2498.386708] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2498.387524] ? alloc_fd+0x2e7/0x670 [ 2498.388079] io_uring_setup+0x1fbb/0x2980 [ 2498.388702] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2498.389454] ? wait_for_completion_io+0x270/0x270 [ 2498.390262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2498.391048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2498.391896] do_syscall_64+0x33/0x40 [ 2498.392466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.393230] RIP: 0033:0x7f910a3bdb19 [ 2498.393774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.396469] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2498.397583] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2498.398576] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2498.399576] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2498.400589] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2498.401614] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 41) 11:01:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 31) 11:01:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 11:01:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x7a1}], 0x6, 0x47) 11:01:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x400000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:01:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008004800006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 31) [ 2514.756926] FAULT_INJECTION: forcing a failure. [ 2514.756926] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.758595] CPU: 1 PID: 21070 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2514.759584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.760733] Call Trace: [ 2514.761095] dump_stack+0x107/0x167 [ 2514.761578] should_fail.cold+0x5/0xa [ 2514.762182] ? xas_alloc+0x336/0x440 [ 2514.762731] should_failslab+0x5/0x20 [ 2514.763261] kmem_cache_alloc+0x5b/0x310 [ 2514.763853] xas_alloc+0x336/0x440 [ 2514.764334] xas_create+0x34a/0x10d0 [ 2514.764873] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2514.765674] xas_store+0x8c/0x1c40 [ 2514.766184] __xa_store+0x164/0x2d0 [ 2514.766710] ? xa_delete_node+0x280/0x280 [ 2514.767301] ? trace_hardirqs_on+0x5b/0x180 [ 2514.767950] xa_store+0x31/0x50 [ 2514.768387] __io_uring_add_tctx_node+0x1cf/0x520 [ 2514.769018] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2514.769777] ? alloc_fd+0x2e7/0x670 [ 2514.770452] io_uring_setup+0x1fbb/0x2980 [ 2514.771192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2514.771904] ? wait_for_completion_io+0x270/0x270 [ 2514.772581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2514.773291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2514.773983] do_syscall_64+0x33/0x40 [ 2514.774493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2514.775225] RIP: 0033:0x7fb073b23b19 [ 2514.775851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.778443] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2514.779469] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2514.780479] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2514.781418] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2514.782391] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2514.783371] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2514.821374] FAULT_INJECTION: forcing a failure. [ 2514.821374] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.823369] CPU: 0 PID: 21079 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2514.824408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.825599] Call Trace: [ 2514.825989] dump_stack+0x107/0x167 [ 2514.826493] should_fail.cold+0x5/0xa [ 2514.827102] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2514.827879] should_failslab+0x5/0x20 [ 2514.828422] kmem_cache_alloc_trace+0x55/0x320 [ 2514.829084] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2514.829834] ? io_import_iovec+0x1120/0x1120 [ 2514.830497] ? lock_downgrade+0x6d0/0x6d0 [ 2514.831093] ? do_raw_spin_lock+0x121/0x260 [ 2514.831832] ? rwlock_bug.part.0+0x90/0x90 [ 2514.832457] __io_uring_add_tctx_node+0x2c6/0x520 [ 2514.833151] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2514.833923] ? alloc_fd+0x2e7/0x670 [ 2514.834476] io_uring_setup+0x1fbb/0x2980 [ 2514.835097] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2514.836072] ? wait_for_completion_io+0x270/0x270 [ 2514.836393] FAULT_INJECTION: forcing a failure. [ 2514.836393] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.836805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2514.836824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2514.840431] do_syscall_64+0x33/0x40 [ 2514.841042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2514.842018] RIP: 0033:0x7fb3e1098b19 [ 2514.842657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.845593] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2514.846819] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2514.847872] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2514.848964] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2514.850026] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2514.851213] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2514.852306] CPU: 1 PID: 21080 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2514.853355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2514.854499] Call Trace: [ 2514.854878] dump_stack+0x107/0x167 [ 2514.855392] should_fail.cold+0x5/0xa [ 2514.855964] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2514.856699] should_failslab+0x5/0x20 [ 2514.857221] kmem_cache_alloc_trace+0x55/0x320 [ 2514.857842] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2514.858549] ? io_import_iovec+0x1120/0x1120 [ 2514.859161] ? lock_downgrade+0x6d0/0x6d0 [ 2514.859772] ? do_raw_spin_lock+0x121/0x260 [ 2514.860340] ? rwlock_bug.part.0+0x90/0x90 [ 2514.860932] __io_uring_add_tctx_node+0x2c6/0x520 [ 2514.861581] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2514.862310] ? alloc_fd+0x2e7/0x670 [ 2514.862823] io_uring_setup+0x1fbb/0x2980 [ 2514.863408] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2514.864179] ? wait_for_completion_io+0x270/0x270 [ 2514.864855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2514.865577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2514.866345] do_syscall_64+0x33/0x40 [ 2514.866872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2514.867576] RIP: 0033:0x7f910a3bdb19 [ 2514.868132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.870695] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2514.871766] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2514.872750] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2514.873721] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2514.874723] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2514.875759] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x6400}], 0x6, 0x47) 11:01:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 32) 11:01:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 32) 11:01:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:01:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x600000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000f00006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 11:01:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 42) 11:01:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2531.170372] FAULT_INJECTION: forcing a failure. [ 2531.170372] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.172078] CPU: 1 PID: 21098 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2531.172186] FAULT_INJECTION: forcing a failure. [ 2531.172186] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.173008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2531.173013] Call Trace: [ 2531.173035] dump_stack+0x107/0x167 [ 2531.173053] should_fail.cold+0x5/0xa [ 2531.177381] ? create_object.isra.0+0x3a/0xa20 [ 2531.178014] should_failslab+0x5/0x20 [ 2531.178509] kmem_cache_alloc+0x5b/0x310 [ 2531.179085] ? mark_held_locks+0x9e/0xe0 [ 2531.179627] create_object.isra.0+0x3a/0xa20 [ 2531.180316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2531.181129] kmem_cache_alloc+0x159/0x310 [ 2531.181719] xas_alloc+0x336/0x440 [ 2531.182276] xas_create+0x34a/0x10d0 [ 2531.182876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2531.183574] xas_store+0x8c/0x1c40 [ 2531.184117] __xa_store+0x164/0x2d0 [ 2531.184586] ? xa_delete_node+0x280/0x280 [ 2531.185158] ? trace_hardirqs_on+0x5b/0x180 [ 2531.185815] xa_store+0x31/0x50 [ 2531.186317] __io_uring_add_tctx_node+0x1cf/0x520 [ 2531.186985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2531.187717] ? alloc_fd+0x2e7/0x670 [ 2531.188253] io_uring_setup+0x1fbb/0x2980 [ 2531.188842] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2531.189571] ? wait_for_completion_io+0x270/0x270 [ 2531.190296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2531.190983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2531.191675] do_syscall_64+0x33/0x40 [ 2531.192204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2531.192900] RIP: 0033:0x7fb073b23b19 [ 2531.193410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.195986] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2531.197055] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2531.198042] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2531.199014] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2531.199988] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2531.200914] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2531.201901] CPU: 0 PID: 21100 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2531.203089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2531.204318] Call Trace: [ 2531.204739] dump_stack+0x107/0x167 [ 2531.205273] should_fail.cold+0x5/0xa [ 2531.205839] ? create_object.isra.0+0x3a/0xa20 [ 2531.206547] should_failslab+0x5/0x20 [ 2531.207123] kmem_cache_alloc+0x5b/0x310 [ 2531.207677] create_object.isra.0+0x3a/0xa20 [ 2531.208438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2531.209215] kmem_cache_alloc_trace+0x151/0x320 [ 2531.209903] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2531.210655] ? io_import_iovec+0x1120/0x1120 [ 2531.211303] ? lock_downgrade+0x6d0/0x6d0 [ 2531.211961] ? do_raw_spin_lock+0x121/0x260 [ 2531.212619] ? rwlock_bug.part.0+0x90/0x90 [ 2531.213257] __io_uring_add_tctx_node+0x2c6/0x520 [ 2531.213953] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2531.214743] ? alloc_fd+0x2e7/0x670 [ 2531.215299] io_uring_setup+0x1fbb/0x2980 [ 2531.215942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2531.216679] ? wait_for_completion_io+0x270/0x270 [ 2531.217404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2531.218186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2531.218929] do_syscall_64+0x33/0x40 [ 2531.219456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2531.220225] RIP: 0033:0x7fb3e1098b19 [ 2531.220777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.223504] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2531.224638] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2531.225637] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2531.226611] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2531.227591] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2531.228633] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x80ffff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0xa107}], 0x6, 0x47) 11:01:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000003f000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2531.336607] FAULT_INJECTION: forcing a failure. [ 2531.336607] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.338568] CPU: 0 PID: 21113 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2531.339580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2531.340872] Call Trace: [ 2531.341276] dump_stack+0x107/0x167 [ 2531.341819] should_fail.cold+0x5/0xa [ 2531.342548] ? create_object.isra.0+0x3a/0xa20 [ 2531.343318] should_failslab+0x5/0x20 [ 2531.343883] kmem_cache_alloc+0x5b/0x310 [ 2531.344562] create_object.isra.0+0x3a/0xa20 [ 2531.345277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2531.346023] kmem_cache_alloc_trace+0x151/0x320 [ 2531.346774] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2531.347584] ? io_import_iovec+0x1120/0x1120 [ 2531.348279] ? lock_downgrade+0x6d0/0x6d0 [ 2531.348871] ? do_raw_spin_lock+0x121/0x260 [ 2531.349548] ? rwlock_bug.part.0+0x90/0x90 [ 2531.350227] __io_uring_add_tctx_node+0x2c6/0x520 [ 2531.350971] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2531.351783] ? alloc_fd+0x2e7/0x670 [ 2531.352351] io_uring_setup+0x1fbb/0x2980 [ 2531.352975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2531.353736] ? wait_for_completion_io+0x270/0x270 [ 2531.354507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2531.355264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2531.356030] do_syscall_64+0x33/0x40 [ 2531.356577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2531.357360] RIP: 0033:0x7f910a3bdb19 [ 2531.357931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2531.360592] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2531.361680] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2531.362703] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2531.363670] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2531.364717] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2531.365745] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:01:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0xff00}], 0x6, 0x47) 11:01:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 33) [ 2547.756023] FAULT_INJECTION: forcing a failure. [ 2547.756023] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.757657] CPU: 1 PID: 21127 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2547.758616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.759765] Call Trace: [ 2547.760186] dump_stack+0x107/0x167 [ 2547.760714] should_fail.cold+0x5/0xa [ 2547.761242] ? io_wq_create+0xeb/0xc00 [ 2547.761757] should_failslab+0x5/0x20 [ 2547.762268] __kmalloc+0x72/0x390 [ 2547.762735] io_wq_create+0xeb/0xc00 [ 2547.763263] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2547.763969] ? io_import_iovec+0x1120/0x1120 [ 2547.764592] ? io_apoll_task_func+0x2d0/0x2d0 [ 2547.765208] ? __io_req_find_next+0x300/0x300 [ 2547.765836] ? do_raw_spin_lock+0x121/0x260 [ 2547.766099] FAULT_INJECTION: forcing a failure. [ 2547.766099] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.766414] ? rwlock_bug.part.0+0x90/0x90 [ 2547.766434] __io_uring_add_tctx_node+0x2c6/0x520 [ 2547.766453] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2547.770255] ? alloc_fd+0x2e7/0x670 [ 2547.770766] io_uring_setup+0x1fbb/0x2980 [ 2547.771348] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2547.772074] ? wait_for_completion_io+0x270/0x270 [ 2547.772808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.773523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.774281] do_syscall_64+0x33/0x40 [ 2547.774814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.775568] RIP: 0033:0x7f910a3bdb19 [ 2547.776096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.778677] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2547.779792] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2547.780765] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2547.781728] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2547.782702] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2547.783646] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2547.784636] CPU: 0 PID: 21136 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2547.785815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.787061] Call Trace: [ 2547.787470] dump_stack+0x107/0x167 [ 2547.788040] should_fail.cold+0x5/0xa [ 2547.788631] ? xas_alloc+0x336/0x440 [ 2547.789214] should_failslab+0x5/0x20 [ 2547.789799] kmem_cache_alloc+0x5b/0x310 [ 2547.790402] xas_alloc+0x336/0x440 [ 2547.790953] xas_create+0x34a/0x10d0 [ 2547.791526] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2547.792364] xas_store+0x8c/0x1c40 [ 2547.792914] __xa_store+0x164/0x2d0 [ 2547.793457] ? xa_delete_node+0x280/0x280 [ 2547.794081] ? trace_hardirqs_on+0x5b/0x180 [ 2547.794725] xa_store+0x31/0x50 [ 2547.795247] __io_uring_add_tctx_node+0x1cf/0x520 [ 2547.796000] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2547.796825] ? alloc_fd+0x2e7/0x670 [ 2547.797404] io_uring_setup+0x1fbb/0x2980 [ 2547.798023] ? __do_sys_io_uring_enter+0x1890/0x1890 11:01:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 33) 11:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2103, 0x0, 0x0, 0x0) 11:01:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc0ff20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 43) [ 2547.798778] ? wait_for_completion_io+0x270/0x270 [ 2547.799955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.800767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.801527] do_syscall_64+0x33/0x40 [ 2547.802075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.802864] RIP: 0033:0x7fb073b23b19 [ 2547.803441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.806204] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2547.807343] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2547.808410] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2547.809473] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2547.810492] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2547.811516] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000020006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 11:01:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000030006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:01:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 34) [ 2547.909005] FAULT_INJECTION: forcing a failure. [ 2547.909005] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.910716] CPU: 0 PID: 21162 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2547.911799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.913354] Call Trace: [ 2547.913764] dump_stack+0x107/0x167 [ 2547.914349] should_fail.cold+0x5/0xa [ 2547.914933] ? io_wq_create+0xeb/0xc00 [ 2547.915531] should_failslab+0x5/0x20 [ 2547.916173] __kmalloc+0x72/0x390 [ 2547.916721] io_wq_create+0xeb/0xc00 [ 2547.917299] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2547.918061] ? io_import_iovec+0x1120/0x1120 [ 2547.918746] ? io_apoll_task_func+0x2d0/0x2d0 [ 2547.919376] ? __io_req_find_next+0x300/0x300 [ 2547.920059] ? do_raw_spin_lock+0x121/0x260 [ 2547.920701] ? rwlock_bug.part.0+0x90/0x90 [ 2547.921330] __io_uring_add_tctx_node+0x2c6/0x520 [ 2547.922025] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2547.922754] ? alloc_fd+0x2e7/0x670 [ 2547.923286] io_uring_setup+0x1fbb/0x2980 [ 2547.923904] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2547.924673] ? wait_for_completion_io+0x270/0x270 [ 2547.925380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.926070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.926774] do_syscall_64+0x33/0x40 [ 2547.927335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.928117] RIP: 0033:0x7fb3e1098b19 [ 2547.928671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.931321] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2547.932471] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2547.933488] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2547.934519] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2547.935532] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2547.936572] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2547.985818] FAULT_INJECTION: forcing a failure. [ 2547.985818] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.987744] CPU: 0 PID: 21255 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2547.988797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.989985] Call Trace: [ 2547.990364] dump_stack+0x107/0x167 [ 2547.990881] should_fail.cold+0x5/0xa [ 2547.991443] ? create_object.isra.0+0x3a/0xa20 11:01:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2547.992172] should_failslab+0x5/0x20 [ 2547.992947] kmem_cache_alloc+0x5b/0x310 [ 2547.993561] create_object.isra.0+0x3a/0xa20 [ 2547.994225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2547.995031] __kmalloc+0x16e/0x390 [ 2547.995594] io_wq_create+0xeb/0xc00 [ 2547.996171] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2547.996957] ? io_import_iovec+0x1120/0x1120 [ 2547.997614] ? io_apoll_task_func+0x2d0/0x2d0 [ 2547.998278] ? __io_req_find_next+0x300/0x300 [ 2547.998930] ? do_raw_spin_lock+0x121/0x260 [ 2547.999545] ? rwlock_bug.part.0+0x90/0x90 11:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 11:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000040006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2548.000210] __io_uring_add_tctx_node+0x2c6/0x520 [ 2548.001144] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2548.001965] ? alloc_fd+0x2e7/0x670 [ 2548.002541] io_uring_setup+0x1fbb/0x2980 [ 2548.003152] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2548.003917] ? wait_for_completion_io+0x270/0x270 [ 2548.004702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2548.005460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2548.006239] do_syscall_64+0x33/0x40 [ 2548.006850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.007594] RIP: 0033:0x7f910a3bdb19 [ 2548.008191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.010904] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2548.012109] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2548.013158] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2548.014293] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2548.015342] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2548.016422] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x8}], 0x6, 0x47) 11:01:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:01:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 34) 11:01:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 44) 11:01:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000050006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) [ 2548.155116] FAULT_INJECTION: forcing a failure. [ 2548.155116] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.156803] CPU: 0 PID: 21270 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2548.157804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.159066] Call Trace: [ 2548.159439] dump_stack+0x107/0x167 [ 2548.159951] should_fail.cold+0x5/0xa [ 2548.160513] ? create_object.isra.0+0x3a/0xa20 [ 2548.161188] should_failslab+0x5/0x20 [ 2548.161751] kmem_cache_alloc+0x5b/0x310 [ 2548.162346] ? mark_held_locks+0x9e/0xe0 [ 2548.162920] create_object.isra.0+0x3a/0xa20 [ 2548.163576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2548.164382] kmem_cache_alloc+0x159/0x310 [ 2548.165021] xas_alloc+0x336/0x440 [ 2548.165564] xas_create+0x34a/0x10d0 [ 2548.166159] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2548.166946] xas_store+0x8c/0x1c40 [ 2548.167494] __xa_store+0x164/0x2d0 [ 2548.168068] ? xa_delete_node+0x280/0x280 [ 2548.168722] ? trace_hardirqs_on+0x5b/0x180 [ 2548.169395] xa_store+0x31/0x50 [ 2548.169897] __io_uring_add_tctx_node+0x1cf/0x520 [ 2548.170625] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2548.171482] ? alloc_fd+0x2e7/0x670 [ 2548.172076] io_uring_setup+0x1fbb/0x2980 [ 2548.172703] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2548.173506] ? wait_for_completion_io+0x270/0x270 [ 2548.174248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2548.175100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2548.175904] do_syscall_64+0x33/0x40 [ 2548.176491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.177259] RIP: 0033:0x7fb073b23b19 [ 2548.177827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.178312] FAULT_INJECTION: forcing a failure. [ 2548.178312] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.180591] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2548.180609] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 11:01:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2548.180617] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2548.180626] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2548.180635] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2548.180644] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2548.188426] CPU: 1 PID: 21273 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2548.189332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.190467] Call Trace: [ 2548.190848] dump_stack+0x107/0x167 [ 2548.191364] should_fail.cold+0x5/0xa [ 2548.191944] ? io_wq_create+0xeb/0xc00 [ 2548.192530] should_failslab+0x5/0x20 [ 2548.193056] __kmalloc+0x72/0x390 [ 2548.193564] io_wq_create+0xeb/0xc00 [ 2548.194122] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2548.194877] ? io_import_iovec+0x1120/0x1120 [ 2548.195474] ? io_apoll_task_func+0x2d0/0x2d0 [ 2548.196117] ? __io_req_find_next+0x300/0x300 [ 2548.196827] ? do_raw_spin_lock+0x121/0x260 [ 2548.197477] ? rwlock_bug.part.0+0x90/0x90 [ 2548.198072] __io_uring_add_tctx_node+0x2c6/0x520 [ 2548.198717] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2548.199478] ? alloc_fd+0x2e7/0x670 [ 2548.199997] io_uring_setup+0x1fbb/0x2980 [ 2548.200615] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2548.201327] ? wait_for_completion_io+0x270/0x270 [ 2548.202031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2548.202765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2548.203497] do_syscall_64+0x33/0x40 [ 2548.204032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.204742] RIP: 0033:0x7fb3e1098b19 [ 2548.205253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.207826] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2548.208898] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2548.209860] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2548.210883] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2548.211900] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2548.212965] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:01:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x64}], 0x6, 0x47) 11:01:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:01:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 11:01:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000060006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:01:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2572.366644] FAULT_INJECTION: forcing a failure. [ 2572.366644] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.369340] CPU: 1 PID: 21309 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2572.370306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.371411] Call Trace: [ 2572.371771] dump_stack+0x107/0x167 [ 2572.372258] should_fail.cold+0x5/0xa [ 2572.372796] ? io_wq_create+0x6ef/0xc00 [ 2572.373330] should_failslab+0x5/0x20 [ 2572.373861] kmem_cache_alloc_node_trace+0x59/0x340 [ 2572.374535] io_wq_create+0x6ef/0xc00 [ 2572.375062] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2572.375732] ? io_import_iovec+0x1120/0x1120 [ 2572.376337] ? io_apoll_task_func+0x2d0/0x2d0 [ 2572.376899] ? __io_req_find_next+0x300/0x300 [ 2572.377518] ? do_raw_spin_lock+0x121/0x260 [ 2572.378109] ? rwlock_bug.part.0+0x90/0x90 [ 2572.378707] __io_uring_add_tctx_node+0x2c6/0x520 [ 2572.379387] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2572.380095] ? alloc_fd+0x2e7/0x670 [ 2572.380570] io_uring_setup+0x1fbb/0x2980 [ 2572.381133] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2572.381819] ? wait_for_completion_io+0x270/0x270 [ 2572.382482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:02:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 35) 11:02:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:02:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:02:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000070006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:02:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 35) 11:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x7a1}], 0x6, 0x47) 11:02:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 45) 11:02:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) [ 2572.383495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2572.384433] do_syscall_64+0x33/0x40 [ 2572.384958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.385742] RIP: 0033:0x7fb3e1098b19 [ 2572.386321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.388679] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2572.389668] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2572.390583] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2572.391513] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2572.392414] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2572.393348] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2572.399312] FAULT_INJECTION: forcing a failure. [ 2572.399312] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.400999] CPU: 0 PID: 21308 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2572.401962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.403186] Call Trace: [ 2572.403571] dump_stack+0x107/0x167 [ 2572.404118] should_fail.cold+0x5/0xa [ 2572.404711] ? xas_alloc+0x336/0x440 [ 2572.405230] should_failslab+0x5/0x20 [ 2572.405770] kmem_cache_alloc+0x5b/0x310 [ 2572.406333] xas_alloc+0x336/0x440 [ 2572.406830] xas_create+0x34a/0x10d0 [ 2572.407352] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2572.408067] xas_store+0x8c/0x1c40 [ 2572.408593] __xa_store+0x164/0x2d0 [ 2572.409154] ? xa_delete_node+0x280/0x280 [ 2572.409802] ? trace_hardirqs_on+0x5b/0x180 [ 2572.410461] xa_store+0x31/0x50 [ 2572.410954] __io_uring_add_tctx_node+0x1cf/0x520 [ 2572.411699] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2572.412474] ? alloc_fd+0x2e7/0x670 [ 2572.413005] io_uring_setup+0x1fbb/0x2980 [ 2572.413623] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2572.414333] ? wait_for_completion_io+0x270/0x270 [ 2572.415029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.415848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2572.416614] do_syscall_64+0x33/0x40 [ 2572.417170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.417947] RIP: 0033:0x7fb073b23b19 [ 2572.418480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.421112] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2572.422255] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2572.423436] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2572.424540] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2572.425800] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2572.426900] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2572.462299] FAULT_INJECTION: forcing a failure. [ 2572.462299] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.464076] CPU: 1 PID: 21319 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2572.465021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.466105] Call Trace: [ 2572.466483] dump_stack+0x107/0x167 [ 2572.466992] should_fail.cold+0x5/0xa [ 2572.467515] ? io_wq_create+0x6ef/0xc00 [ 2572.468006] should_failslab+0x5/0x20 [ 2572.468489] kmem_cache_alloc_node_trace+0x59/0x340 [ 2572.469125] io_wq_create+0x6ef/0xc00 [ 2572.469668] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2572.470289] ? io_import_iovec+0x1120/0x1120 [ 2572.470823] ? io_apoll_task_func+0x2d0/0x2d0 [ 2572.471368] ? __io_req_find_next+0x300/0x300 [ 2572.471924] ? do_raw_spin_lock+0x121/0x260 [ 2572.472466] ? rwlock_bug.part.0+0x90/0x90 [ 2572.473000] __io_uring_add_tctx_node+0x2c6/0x520 [ 2572.473647] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2572.474356] ? alloc_fd+0x2e7/0x670 11:02:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2572.474812] io_uring_setup+0x1fbb/0x2980 [ 2572.475706] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2572.476362] ? wait_for_completion_io+0x270/0x270 [ 2572.477002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.477726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2572.478401] do_syscall_64+0x33/0x40 [ 2572.478855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 11:02:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) [ 2572.479465] RIP: 0033:0x7f910a3bdb19 [ 2572.480318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.482759] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2572.483719] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2572.484620] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2572.485505] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2572.486385] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2572.487289] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:02:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:02:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000080006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0x6400}], 0x6, 0x47) 11:02:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 36) 11:02:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000180006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2572.607136] FAULT_INJECTION: forcing a failure. [ 2572.607136] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.608642] CPU: 1 PID: 21335 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2572.609540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.610606] Call Trace: [ 2572.610956] dump_stack+0x107/0x167 [ 2572.611403] should_fail.cold+0x5/0xa [ 2572.611889] ? create_object.isra.0+0x3a/0xa20 [ 2572.612468] should_failslab+0x5/0x20 [ 2572.612940] kmem_cache_alloc+0x5b/0x310 [ 2572.613464] ? io_wq_create+0x114/0xc00 11:02:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x5000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2572.613963] create_object.isra.0+0x3a/0xa20 [ 2572.614919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2572.615586] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2572.616229] io_wq_create+0x6ef/0xc00 [ 2572.616744] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2572.617359] ? io_import_iovec+0x1120/0x1120 [ 2572.617925] ? io_apoll_task_func+0x2d0/0x2d0 [ 2572.618466] ? __io_req_find_next+0x300/0x300 [ 2572.619008] ? do_raw_spin_lock+0x121/0x260 [ 2572.619537] ? rwlock_bug.part.0+0x90/0x90 [ 2572.620089] __io_uring_add_tctx_node+0x2c6/0x520 [ 2572.620714] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2572.621389] ? alloc_fd+0x2e7/0x670 [ 2572.621837] io_uring_setup+0x1fbb/0x2980 [ 2572.622375] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2572.622992] ? wait_for_completion_io+0x270/0x270 [ 2572.623638] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2572.624342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2572.625017] do_syscall_64+0x33/0x40 [ 2572.625502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2572.626126] RIP: 0033:0x7fb3e1098b19 [ 2572.626607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.628995] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2572.629975] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2572.630893] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2572.631816] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2572.632747] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2572.633656] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2588.433546] FAULT_INJECTION: forcing a failure. [ 2588.433546] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.435411] CPU: 0 PID: 21352 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2588.436439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.437627] Call Trace: [ 2588.438022] dump_stack+0x107/0x167 [ 2588.438537] should_fail.cold+0x5/0xa [ 2588.439093] ? create_object.isra.0+0x3a/0xa20 [ 2588.439753] should_failslab+0x5/0x20 [ 2588.440300] kmem_cache_alloc+0x5b/0x310 [ 2588.448232] ? mark_held_locks+0x9e/0xe0 [ 2588.448866] create_object.isra.0+0x3a/0xa20 [ 2588.449703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.450539] kmem_cache_alloc+0x159/0x310 [ 2588.451255] xas_alloc+0x336/0x440 [ 2588.451772] xas_create+0x34a/0x10d0 [ 2588.452356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2588.453131] xas_store+0x8c/0x1c40 [ 2588.453611] __xa_store+0x164/0x2d0 [ 2588.454154] ? xa_delete_node+0x280/0x280 [ 2588.454753] ? trace_hardirqs_on+0x5b/0x180 [ 2588.455389] xa_store+0x31/0x50 [ 2588.455894] __io_uring_add_tctx_node+0x1cf/0x520 [ 2588.456624] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2588.457350] ? alloc_fd+0x2e7/0x670 [ 2588.457849] io_uring_setup+0x1fbb/0x2980 [ 2588.458423] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2588.459142] ? wait_for_completion_io+0x270/0x270 [ 2588.459849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.460662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.461399] do_syscall_64+0x33/0x40 [ 2588.461920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.462626] RIP: 0033:0x7fb073b23b19 [ 2588.463160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.465827] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2588.466931] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2588.467944] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2588.468986] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2588.470007] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2588.471306] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:02:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 36) 11:02:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 37) 11:02:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x6000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:02:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080001c0006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:02:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 11:02:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0xa107}], 0x6, 0x47) 11:02:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:02:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 46) [ 2588.490121] FAULT_INJECTION: forcing a failure. [ 2588.490121] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.491891] CPU: 0 PID: 21361 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2588.492925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.494147] Call Trace: [ 2588.494529] dump_stack+0x107/0x167 [ 2588.495054] should_fail.cold+0x5/0xa [ 2588.495678] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2588.496381] should_failslab+0x5/0x20 [ 2588.497049] kmem_cache_alloc_trace+0x55/0x320 [ 2588.497783] __io_uring_add_tctx_node+0x15c/0x520 [ 2588.498535] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2588.499344] ? alloc_fd+0x2e7/0x670 [ 2588.499884] io_uring_setup+0x1fbb/0x2980 [ 2588.500515] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2588.501253] ? wait_for_completion_io+0x270/0x270 [ 2588.501943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.502663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.503420] do_syscall_64+0x33/0x40 [ 2588.503958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.504751] RIP: 0033:0x7fb3e1098b19 [ 2588.505297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.508004] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2588.508181] FAULT_INJECTION: forcing a failure. [ 2588.508181] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.509088] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2588.509096] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2588.509115] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2588.513792] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2588.514760] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2588.515774] CPU: 1 PID: 21349 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2588.516826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.518014] Call Trace: [ 2588.518403] dump_stack+0x107/0x167 [ 2588.518911] should_fail.cold+0x5/0xa [ 2588.519426] ? create_object.isra.0+0x3a/0xa20 [ 2588.520189] should_failslab+0x5/0x20 [ 2588.520789] kmem_cache_alloc+0x5b/0x310 [ 2588.521354] ? io_wq_create+0x114/0xc00 [ 2588.521914] create_object.isra.0+0x3a/0xa20 [ 2588.522525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.523223] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2588.523888] io_wq_create+0x6ef/0xc00 [ 2588.524367] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2588.525045] ? io_import_iovec+0x1120/0x1120 [ 2588.525613] ? io_apoll_task_func+0x2d0/0x2d0 [ 2588.526210] ? __io_req_find_next+0x300/0x300 [ 2588.526797] ? do_raw_spin_lock+0x121/0x260 [ 2588.527390] ? rwlock_bug.part.0+0x90/0x90 [ 2588.527968] __io_uring_add_tctx_node+0x2c6/0x520 [ 2588.528636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2588.529331] ? alloc_fd+0x2e7/0x670 [ 2588.529809] io_uring_setup+0x1fbb/0x2980 [ 2588.530356] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2588.531022] ? wait_for_completion_io+0x270/0x270 [ 2588.531662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.532335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.533037] do_syscall_64+0x33/0x40 [ 2588.533517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.534182] RIP: 0033:0x7f910a3bdb19 [ 2588.534691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.537216] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2588.538241] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2588.539190] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2588.540160] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2588.541120] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2588.542175] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:02:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x4200, 0x0, 0x0, 0x0) 11:02:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000690006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2604.410450] FAULT_INJECTION: forcing a failure. [ 2604.410450] name failslab, interval 1, probability 0, space 0, times 0 11:02:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 37) 11:02:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:02:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 47) 11:02:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x7000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:02:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0, 0x0, 0xff00}], 0x6, 0x47) 11:02:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 38) 11:02:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000f00006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:02:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x4eff, 0x0, 0x0, 0x0) [ 2604.412005] CPU: 0 PID: 21385 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2604.412921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.413857] Call Trace: [ 2604.414167] dump_stack+0x107/0x167 [ 2604.414584] should_fail.cold+0x5/0xa [ 2604.415019] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2604.415595] should_failslab+0x5/0x20 [ 2604.416035] kmem_cache_alloc_trace+0x55/0x320 [ 2604.416600] __io_uring_add_tctx_node+0x15c/0x520 [ 2604.417305] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2604.418061] ? alloc_fd+0x2e7/0x670 [ 2604.418602] io_uring_setup+0x1fbb/0x2980 [ 2604.419212] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2604.419947] ? wait_for_completion_io+0x270/0x270 [ 2604.420679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.421440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.422196] do_syscall_64+0x33/0x40 [ 2604.422639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.423384] RIP: 0033:0x7f910a3bdb19 [ 2604.423922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.426572] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2604.427675] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2604.428717] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2604.429755] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2604.430790] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2604.431828] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:02:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x8, 0x47) 11:02:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2604.567191] FAULT_INJECTION: forcing a failure. [ 2604.567191] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.570087] CPU: 1 PID: 21396 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2604.571808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.573811] Call Trace: [ 2604.574452] dump_stack+0x107/0x167 [ 2604.575324] should_fail.cold+0x5/0xa [ 2604.576247] ? create_object.isra.0+0x3a/0xa20 [ 2604.577375] should_failslab+0x5/0x20 [ 2604.578306] kmem_cache_alloc+0x5b/0x310 [ 2604.579309] create_object.isra.0+0x3a/0xa20 [ 2604.580376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2604.581651] kmem_cache_alloc_trace+0x151/0x320 [ 2604.582794] __io_uring_add_tctx_node+0x15c/0x520 [ 2604.583968] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2604.585249] ? alloc_fd+0x2e7/0x670 [ 2604.586160] io_uring_setup+0x1fbb/0x2980 [ 2604.587179] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2604.588391] ? wait_for_completion_io+0x270/0x270 [ 2604.589482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.590678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.591754] do_syscall_64+0x33/0x40 [ 2604.592529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.593598] RIP: 0033:0x7fb3e1098b19 [ 2604.594380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.598217] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2604.599812] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2604.601308] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2604.602796] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2604.604292] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2604.605799] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2604.611057] FAULT_INJECTION: forcing a failure. [ 2604.611057] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.613537] CPU: 1 PID: 21386 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2604.615022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.616810] Call Trace: [ 2604.617385] dump_stack+0x107/0x167 [ 2604.618176] should_fail.cold+0x5/0xa [ 2604.619004] ? xas_alloc+0x336/0x440 [ 2604.619816] should_failslab+0x5/0x20 [ 2604.620648] kmem_cache_alloc+0x5b/0x310 [ 2604.621535] xas_alloc+0x336/0x440 [ 2604.622311] xas_create+0x34a/0x10d0 [ 2604.623133] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2604.624242] xas_store+0x8c/0x1c40 [ 2604.625052] __xa_store+0x164/0x2d0 [ 2604.625858] ? xa_delete_node+0x280/0x280 [ 2604.626778] ? trace_hardirqs_on+0x5b/0x180 [ 2604.627733] xa_store+0x31/0x50 [ 2604.628470] __io_uring_add_tctx_node+0x1cf/0x520 [ 2604.629557] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2604.630714] ? alloc_fd+0x2e7/0x670 [ 2604.631543] io_uring_setup+0x1fbb/0x2980 [ 2604.632474] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2604.633617] ? wait_for_completion_io+0x270/0x270 [ 2604.634728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.635906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.637080] do_syscall_64+0x33/0x40 [ 2604.637911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.639052] RIP: 0033:0x7fb073b23b19 [ 2604.639892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.644072] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2604.645818] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2604.647480] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2604.649162] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2604.650820] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2604.652504] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:03:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 48) 11:03:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000306000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 39) [ 2622.499174] FAULT_INJECTION: forcing a failure. [ 2622.499174] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.500653] CPU: 1 PID: 21412 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2622.501631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.502816] Call Trace: [ 2622.503260] dump_stack+0x107/0x167 [ 2622.503811] should_fail.cold+0x5/0xa [ 2622.504357] ? xas_alloc+0x336/0x440 [ 2622.504892] should_failslab+0x5/0x20 [ 2622.505420] kmem_cache_alloc+0x5b/0x310 [ 2622.505993] ? stack_trace_consume_entry+0x160/0x160 [ 2622.506747] xas_alloc+0x336/0x440 [ 2622.507225] xas_create+0x34a/0x10d0 [ 2622.507759] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2622.508517] xas_store+0x8c/0x1c40 [ 2622.509045] __xa_store+0x164/0x2d0 [ 2622.509588] ? xa_delete_node+0x280/0x280 [ 2622.510160] ? trace_hardirqs_on+0x5b/0x180 [ 2622.510770] xa_store+0x31/0x50 [ 2622.511257] __io_uring_add_tctx_node+0x1cf/0x520 [ 2622.511940] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2622.512682] ? alloc_fd+0x2e7/0x670 [ 2622.513258] io_uring_setup+0x1fbb/0x2980 [ 2622.513839] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.514538] ? wait_for_completion_io+0x270/0x270 [ 2622.515225] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.515947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.516685] do_syscall_64+0x33/0x40 [ 2622.517224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.517890] RIP: 0033:0x7fb3e1098b19 [ 2622.518397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.520945] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.521972] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2622.522883] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2622.523793] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2622.524726] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2622.525649] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2622.536506] FAULT_INJECTION: forcing a failure. [ 2622.536506] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.538218] CPU: 1 PID: 21418 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2622.539141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.540287] Call Trace: [ 2622.540658] dump_stack+0x107/0x167 [ 2622.541157] should_fail.cold+0x5/0xa [ 2622.541754] ? create_object.isra.0+0x3a/0xa20 [ 2622.542413] should_failslab+0x5/0x20 [ 2622.542930] kmem_cache_alloc+0x5b/0x310 [ 2622.543539] create_object.isra.0+0x3a/0xa20 [ 2622.544131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.544811] kmem_cache_alloc_trace+0x151/0x320 [ 2622.545481] __io_uring_add_tctx_node+0x15c/0x520 [ 2622.546178] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2622.546891] ? alloc_fd+0x2e7/0x670 [ 2622.547419] io_uring_setup+0x1fbb/0x2980 [ 2622.547978] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.548662] ? wait_for_completion_io+0x270/0x270 [ 2622.549364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.550066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.550750] do_syscall_64+0x33/0x40 [ 2622.551287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.552008] RIP: 0033:0x7f910a3bdb19 [ 2622.552498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.555067] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.556145] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2622.557203] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2622.558177] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2622.559176] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2622.560149] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 38) 11:03:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x8000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x8008, 0x0, 0x0, 0x0) 11:03:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x9, 0x47) 11:03:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000800406000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 40) 11:03:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 39) 11:03:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xc000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) poll(&(0x7f0000000000)=[{r0}, {r0}, {r0}, {r1, 0x2}, {r0}, {r0}], 0x6, 0x69) 11:03:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000506000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2622.684605] FAULT_INJECTION: forcing a failure. [ 2622.684605] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.686447] CPU: 1 PID: 21427 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2622.687478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.688629] Call Trace: [ 2622.688995] dump_stack+0x107/0x167 [ 2622.689513] should_fail.cold+0x5/0xa [ 2622.690051] ? xas_alloc+0x336/0x440 [ 2622.690614] should_failslab+0x5/0x20 [ 2622.691136] kmem_cache_alloc+0x5b/0x310 [ 2622.691749] ? stack_trace_consume_entry+0x160/0x160 [ 2622.692480] xas_alloc+0x336/0x440 [ 2622.693000] xas_create+0x34a/0x10d0 [ 2622.693502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2622.693818] FAULT_INJECTION: forcing a failure. [ 2622.693818] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.694230] xas_store+0x8c/0x1c40 [ 2622.696355] __xa_store+0x164/0x2d0 [ 2622.696862] ? xa_delete_node+0x280/0x280 [ 2622.697422] ? trace_hardirqs_on+0x5b/0x180 [ 2622.698014] xa_store+0x31/0x50 [ 2622.698467] __io_uring_add_tctx_node+0x1cf/0x520 [ 2622.699167] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2622.699930] ? alloc_fd+0x2e7/0x670 [ 2622.700427] io_uring_setup+0x1fbb/0x2980 [ 2622.701040] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.701738] ? wait_for_completion_io+0x270/0x270 [ 2622.702446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.703136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.703836] do_syscall_64+0x33/0x40 [ 2622.704359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.705087] RIP: 0033:0x7f910a3bdb19 [ 2622.705648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.708155] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.709189] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2622.710115] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2622.711078] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2622.712021] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2622.713017] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2622.714053] CPU: 0 PID: 21428 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2622.715152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.716374] Call Trace: [ 2622.716784] dump_stack+0x107/0x167 [ 2622.717337] should_fail.cold+0x5/0xa [ 2622.717833] FAULT_INJECTION: forcing a failure. [ 2622.717833] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.717928] ? xas_alloc+0x336/0x440 [ 2622.720195] should_failslab+0x5/0x20 [ 2622.720750] kmem_cache_alloc+0x5b/0x310 [ 2622.721377] ? stack_trace_consume_entry+0x160/0x160 [ 2622.722155] xas_alloc+0x336/0x440 [ 2622.722719] xas_create+0x34a/0x10d0 [ 2622.723274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2622.724037] xas_store+0x8c/0x1c40 [ 2622.724577] __xa_store+0x164/0x2d0 [ 2622.725141] ? xa_delete_node+0x280/0x280 [ 2622.725762] ? trace_hardirqs_on+0x5b/0x180 [ 2622.726378] xa_store+0x31/0x50 [ 2622.726843] __io_uring_add_tctx_node+0x1cf/0x520 [ 2622.727572] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2622.728315] ? alloc_fd+0x2e7/0x670 [ 2622.728861] io_uring_setup+0x1fbb/0x2980 [ 2622.729448] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.730218] ? wait_for_completion_io+0x270/0x270 [ 2622.730914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.731624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.732375] do_syscall_64+0x33/0x40 [ 2622.732957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.733717] RIP: 0033:0x7fb3e1098b19 [ 2622.734263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.736973] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.738105] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2622.739126] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2622.740239] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2622.741311] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2622.742387] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2622.743439] CPU: 1 PID: 21432 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2622.744540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.745786] Call Trace: [ 2622.746164] dump_stack+0x107/0x167 [ 2622.746669] should_fail.cold+0x5/0xa [ 2622.747185] ? create_object.isra.0+0x3a/0xa20 [ 2622.747838] should_failslab+0x5/0x20 [ 2622.748378] kmem_cache_alloc+0x5b/0x310 [ 2622.748989] ? mark_held_locks+0x9e/0xe0 [ 2622.749570] create_object.isra.0+0x3a/0xa20 [ 2622.750180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.750923] kmem_cache_alloc+0x159/0x310 [ 2622.751538] xas_alloc+0x336/0x440 [ 2622.752041] xas_create+0x34a/0x10d0 [ 2622.752569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2622.753300] xas_store+0x8c/0x1c40 [ 2622.753809] __xa_store+0x164/0x2d0 [ 2622.754328] ? xa_delete_node+0x280/0x280 [ 2622.754912] ? trace_hardirqs_on+0x5b/0x180 [ 2622.755493] xa_store+0x31/0x50 [ 2622.755968] __io_uring_add_tctx_node+0x1cf/0x520 [ 2622.756632] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2622.757368] ? alloc_fd+0x2e7/0x670 [ 2622.757884] io_uring_setup+0x1fbb/0x2980 [ 2622.758479] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2622.759196] ? wait_for_completion_io+0x270/0x270 [ 2622.759928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.760688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.761428] do_syscall_64+0x33/0x40 [ 2622.761983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.762722] RIP: 0033:0x7fb073b23b19 [ 2622.763267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.765885] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2622.766934] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2622.767903] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2622.768892] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2622.769804] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2622.770725] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:03:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000606000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 49) 11:03:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x10000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0xe302, 0x0, 0x0, 0x0) 11:03:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000706000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 41) 11:03:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x500000000, 0x3f, 0x9}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x8, 0x15, "cb178b5d40c6875c"}) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:03:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 40) [ 2638.931964] FAULT_INJECTION: forcing a failure. [ 2638.931964] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.934579] CPU: 1 PID: 21461 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2638.936019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.937749] Call Trace: [ 2638.938312] dump_stack+0x107/0x167 [ 2638.939087] should_fail.cold+0x5/0xa [ 2638.939886] ? create_object.isra.0+0x3a/0xa20 [ 2638.940847] should_failslab+0x5/0x20 [ 2638.941646] kmem_cache_alloc+0x5b/0x310 [ 2638.942503] create_object.isra.0+0x3a/0xa20 [ 2638.943414] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2638.944484] kmem_cache_alloc+0x159/0x310 [ 2638.945360] xas_alloc+0x336/0x440 [ 2638.946111] xas_create+0x34a/0x10d0 [ 2638.946900] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2638.947946] FAULT_INJECTION: forcing a failure. [ 2638.947946] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.948001] xas_store+0x8c/0x1c40 [ 2638.951420] __xa_store+0x164/0x2d0 [ 2638.952179] ? xa_delete_node+0x280/0x280 [ 2638.953055] ? trace_hardirqs_on+0x5b/0x180 [ 2638.953956] xa_store+0x31/0x50 [ 2638.954643] __io_uring_add_tctx_node+0x1cf/0x520 [ 2638.955639] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2638.956729] ? alloc_fd+0x2e7/0x670 [ 2638.957505] io_uring_setup+0x1fbb/0x2980 [ 2638.958377] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2638.959432] ? wait_for_completion_io+0x270/0x270 [ 2638.960464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2638.961551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2638.962622] do_syscall_64+0x33/0x40 [ 2638.963401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2638.964464] RIP: 0033:0x7f910a3bdb19 [ 2638.965269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2638.969090] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2638.970691] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2638.972179] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2638.973663] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2638.975146] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2638.976634] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2638.978169] CPU: 0 PID: 21463 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2638.979870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.981870] Call Trace: [ 2638.982509] dump_stack+0x107/0x167 [ 2638.983387] should_fail.cold+0x5/0xa [ 2638.984307] ? create_object.isra.0+0x3a/0xa20 [ 2638.985411] should_failslab+0x5/0x20 [ 2638.986322] kmem_cache_alloc+0x5b/0x310 [ 2638.987296] ? mark_held_locks+0x9e/0xe0 [ 2638.988272] create_object.isra.0+0x3a/0xa20 [ 2638.989371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2638.990599] kmem_cache_alloc+0x159/0x310 [ 2638.991599] xas_alloc+0x336/0x440 [ 2638.992457] xas_create+0x34a/0x10d0 [ 2638.993378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2638.994636] xas_store+0x8c/0x1c40 [ 2638.995508] __xa_store+0x164/0x2d0 [ 2638.996383] ? xa_delete_node+0x280/0x280 [ 2638.997393] ? trace_hardirqs_on+0x5b/0x180 [ 2638.998436] xa_store+0x31/0x50 [ 2638.999230] __io_uring_add_tctx_node+0x1cf/0x520 [ 2639.000387] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2639.001647] ? alloc_fd+0x2e7/0x670 [ 2639.002535] io_uring_setup+0x1fbb/0x2980 [ 2639.003540] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2639.004754] ? wait_for_completion_io+0x270/0x270 [ 2639.005950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.007208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.008446] do_syscall_64+0x33/0x40 [ 2639.009350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.010577] RIP: 0033:0x7fb073b23b19 [ 2639.011469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.015882] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2639.017712] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2639.019421] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2639.021139] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2639.022846] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2639.024554] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2639.032978] FAULT_INJECTION: forcing a failure. [ 2639.032978] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.035523] CPU: 1 PID: 21455 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2639.036991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.038756] Call Trace: [ 2639.039326] dump_stack+0x107/0x167 [ 2639.040099] should_fail.cold+0x5/0xa [ 2639.040907] ? xas_alloc+0x336/0x440 [ 2639.041715] should_failslab+0x5/0x20 [ 2639.042526] kmem_cache_alloc+0x5b/0x310 [ 2639.043400] xas_alloc+0x336/0x440 [ 2639.044158] xas_create+0x34a/0x10d0 [ 2639.044973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2639.046099] xas_store+0x8c/0x1c40 [ 2639.046876] __xa_store+0x164/0x2d0 [ 2639.047656] ? xa_delete_node+0x280/0x280 [ 2639.048547] ? trace_hardirqs_on+0x5b/0x180 [ 2639.049487] xa_store+0x31/0x50 [ 2639.050196] __io_uring_add_tctx_node+0x1cf/0x520 [ 2639.051221] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2639.052331] ? alloc_fd+0x2e7/0x670 [ 2639.053128] io_uring_setup+0x1fbb/0x2980 [ 2639.054023] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2639.055100] ? wait_for_completion_io+0x270/0x270 [ 2639.056153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.057270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.058368] do_syscall_64+0x33/0x40 [ 2639.059158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.060252] RIP: 0033:0x7fb3e1098b19 [ 2639.061047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.064951] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2639.066567] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2639.068078] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2639.069603] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2639.071118] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2639.072625] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 42) 11:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 11:03:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x12000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 50) 11:03:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0xff4e, 0x0, 0x0, 0x0) 11:03:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 41) 11:03:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001806000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2639.252090] FAULT_INJECTION: forcing a failure. [ 2639.252090] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.254575] CPU: 1 PID: 21476 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2639.256047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.257823] Call Trace: [ 2639.258388] dump_stack+0x107/0x167 [ 2639.259167] should_fail.cold+0x5/0xa [ 2639.259983] ? create_object.isra.0+0x3a/0xa20 [ 2639.260958] should_failslab+0x5/0x20 [ 2639.261776] kmem_cache_alloc+0x5b/0x310 [ 2639.262639] ? mark_held_locks+0x9e/0xe0 [ 2639.263506] create_object.isra.0+0x3a/0xa20 [ 2639.264440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2639.265529] kmem_cache_alloc+0x159/0x310 [ 2639.266425] xas_alloc+0x336/0x440 [ 2639.267191] xas_create+0x34a/0x10d0 [ 2639.268012] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2639.269097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2639.270215] xas_store+0x8c/0x1c40 [ 2639.270992] __xa_store+0x164/0x2d0 [ 2639.271770] ? xa_delete_node+0x280/0x280 [ 2639.272663] ? trace_hardirqs_on+0x5b/0x180 [ 2639.273600] xa_store+0x31/0x50 [ 2639.274306] __io_uring_add_tctx_node+0x1cf/0x520 [ 2639.275330] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2639.276440] ? alloc_fd+0x2e7/0x670 [ 2639.277242] io_uring_setup+0x1fbb/0x2980 [ 2639.278137] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2639.279219] ? wait_for_completion_io+0x270/0x270 [ 2639.280273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.281393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.282498] do_syscall_64+0x33/0x40 [ 2639.283288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.284371] RIP: 0033:0x7fb073b23b19 [ 2639.285166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.289069] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2639.290682] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2639.292190] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2639.293708] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2639.295225] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2639.296735] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2639.318989] FAULT_INJECTION: forcing a failure. [ 2639.318989] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.321415] CPU: 1 PID: 21486 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2639.322893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.324660] Call Trace: [ 2639.325228] dump_stack+0x107/0x167 [ 2639.326011] should_fail.cold+0x5/0xa [ 2639.326820] ? create_object.isra.0+0x3a/0xa20 [ 2639.327791] should_failslab+0x5/0x20 [ 2639.328593] kmem_cache_alloc+0x5b/0x310 [ 2639.329476] create_object.isra.0+0x3a/0xa20 [ 2639.330404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2639.331484] kmem_cache_alloc+0x159/0x310 [ 2639.332387] xas_alloc+0x336/0x440 [ 2639.333158] xas_create+0x34a/0x10d0 [ 2639.333965] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2639.335023] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2639.336142] xas_store+0x8c/0x1c40 [ 2639.336916] __xa_store+0x164/0x2d0 [ 2639.337702] ? xa_delete_node+0x280/0x280 [ 2639.338591] ? trace_hardirqs_on+0x5b/0x180 [ 2639.339515] xa_store+0x31/0x50 [ 2639.340217] __io_uring_add_tctx_node+0x1cf/0x520 [ 2639.341246] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2639.342356] ? alloc_fd+0x2e7/0x670 [ 2639.343145] io_uring_setup+0x1fbb/0x2980 [ 2639.344034] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2639.345121] ? wait_for_completion_io+0x270/0x270 [ 2639.346176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.347286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.348379] do_syscall_64+0x33/0x40 [ 2639.349184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.350275] RIP: 0033:0x7f910a3bdb19 [ 2639.351063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.354972] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2639.356581] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2639.358105] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2639.359624] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2639.361150] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2639.362848] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) 11:03:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x18000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x2000}, {r0, 0x420}, {r0}, {r0}], 0x6, 0x47) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0xac, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}}, 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x22040, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r4, 0xfffffffb}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000100)={0x136, 0x14, &(0x7f0000000300)}) [ 2639.495841] FAULT_INJECTION: forcing a failure. [ 2639.495841] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.498766] CPU: 0 PID: 21482 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2639.500464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.502514] Call Trace: [ 2639.503164] dump_stack+0x107/0x167 [ 2639.504058] should_fail.cold+0x5/0xa [ 2639.504998] ? create_object.isra.0+0x3a/0xa20 [ 2639.506131] should_failslab+0x5/0x20 [ 2639.507065] kmem_cache_alloc+0x5b/0x310 [ 2639.508062] ? mark_held_locks+0x9e/0xe0 [ 2639.509078] create_object.isra.0+0x3a/0xa20 [ 2639.510155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2639.511405] kmem_cache_alloc+0x159/0x310 [ 2639.512432] xas_alloc+0x336/0x440 [ 2639.513326] xas_create+0x34a/0x10d0 [ 2639.514257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2639.515545] xas_store+0x8c/0x1c40 [ 2639.516439] __xa_store+0x164/0x2d0 [ 2639.517344] ? xa_delete_node+0x280/0x280 [ 2639.518372] ? trace_hardirqs_on+0x5b/0x180 [ 2639.519441] xa_store+0x31/0x50 [ 2639.520256] __io_uring_add_tctx_node+0x1cf/0x520 [ 2639.521444] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2639.522726] ? alloc_fd+0x2e7/0x670 [ 2639.523633] io_uring_setup+0x1fbb/0x2980 [ 2639.524660] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2639.525908] ? wait_for_completion_io+0x270/0x270 [ 2639.527125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.528407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.529679] do_syscall_64+0x33/0x40 [ 2639.530590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.531848] RIP: 0033:0x7fb3e1098b19 [ 2639.532761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.537272] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2639.539145] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2639.540896] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2639.542655] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2639.544405] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2639.546160] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2639.640653] cgroup: fork rejected by pids controller in /syz2 11:03:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xf8000000, 0x4001, 0x9, 0x81, 0x2, "f6be45fd6cef270694eb7f68f13ad143d19c24", 0x9}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xd812, 0x80000000, 0x2}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000014) 11:03:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 51) 11:03:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 43) 11:03:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x1e000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001c06000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 42) 11:03:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) [ 2657.771729] FAULT_INJECTION: forcing a failure. [ 2657.771729] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.773801] CPU: 0 PID: 21523 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2657.774869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.776224] Call Trace: [ 2657.776635] dump_stack+0x107/0x167 [ 2657.777178] should_fail.cold+0x5/0xa [ 2657.777791] ? xas_alloc+0x336/0x440 [ 2657.778457] should_failslab+0x5/0x20 [ 2657.779045] kmem_cache_alloc+0x5b/0x310 [ 2657.779670] xas_alloc+0x336/0x440 [ 2657.780267] xas_create+0x34a/0x10d0 [ 2657.780854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.781666] xas_store+0x8c/0x1c40 [ 2657.782377] __xa_store+0x164/0x2d0 [ 2657.782992] ? xa_delete_node+0x280/0x280 [ 2657.783626] ? trace_hardirqs_on+0x5b/0x180 [ 2657.784314] xa_store+0x31/0x50 [ 2657.784822] __io_uring_add_tctx_node+0x1cf/0x520 [ 2657.785665] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2657.786455] ? alloc_fd+0x2e7/0x670 [ 2657.787112] io_uring_setup+0x1fbb/0x2980 [ 2657.787749] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2657.788543] ? wait_for_completion_io+0x270/0x270 [ 2657.789362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.790143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.791003] do_syscall_64+0x33/0x40 [ 2657.791660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.792433] RIP: 0033:0x7fb073b23b19 [ 2657.793002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.795819] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2657.797039] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2657.798087] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2657.799137] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2657.800179] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2657.801202] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2657.804197] FAULT_INJECTION: forcing a failure. [ 2657.804197] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.805876] CPU: 0 PID: 21528 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2657.806923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.808119] Call Trace: [ 2657.808503] dump_stack+0x107/0x167 [ 2657.809025] should_fail.cold+0x5/0xa [ 2657.809616] ? create_object.isra.0+0x3a/0xa20 [ 2657.810292] should_failslab+0x5/0x20 [ 2657.810829] kmem_cache_alloc+0x5b/0x310 [ 2657.811413] ? mark_held_locks+0x9e/0xe0 [ 2657.812035] create_object.isra.0+0x3a/0xa20 [ 2657.812712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.813588] kmem_cache_alloc+0x159/0x310 [ 2657.814235] xas_alloc+0x336/0x440 [ 2657.814802] xas_create+0x34a/0x10d0 [ 2657.815443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.816225] xas_store+0x8c/0x1c40 [ 2657.816752] __xa_store+0x164/0x2d0 [ 2657.817344] ? xa_delete_node+0x280/0x280 [ 2657.817849] FAULT_INJECTION: forcing a failure. [ 2657.817849] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.817962] ? trace_hardirqs_on+0x5b/0x180 [ 2657.817985] xa_store+0x31/0x50 [ 2657.820606] __io_uring_add_tctx_node+0x1cf/0x520 [ 2657.821334] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2657.822103] ? alloc_fd+0x2e7/0x670 [ 2657.822660] io_uring_setup+0x1fbb/0x2980 [ 2657.823270] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2657.824025] ? wait_for_completion_io+0x270/0x270 [ 2657.824771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.825559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.826341] do_syscall_64+0x33/0x40 [ 2657.826900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.827707] RIP: 0033:0x7fb3e1098b19 [ 2657.828251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.830949] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2657.832061] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2657.833129] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2657.834171] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2657.835216] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2657.836287] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2657.837399] CPU: 1 PID: 21530 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2657.838463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.839771] Call Trace: [ 2657.840135] dump_stack+0x107/0x167 [ 2657.840633] should_fail.cold+0x5/0xa [ 2657.841194] ? create_object.isra.0+0x3a/0xa20 [ 2657.841887] should_failslab+0x5/0x20 [ 2657.842364] kmem_cache_alloc+0x5b/0x310 [ 2657.842887] ? mark_held_locks+0x9e/0xe0 [ 2657.843450] create_object.isra.0+0x3a/0xa20 [ 2657.844059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.844705] kmem_cache_alloc+0x159/0x310 [ 2657.845700] xas_alloc+0x336/0x440 [ 2657.846279] xas_create+0x34a/0x10d0 [ 2657.846851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.847496] xas_store+0x8c/0x1c40 [ 2657.847953] __xa_store+0x164/0x2d0 [ 2657.848408] ? xa_delete_node+0x280/0x280 [ 2657.848939] ? trace_hardirqs_on+0x5b/0x180 [ 2657.849532] xa_store+0x31/0x50 [ 2657.849981] __io_uring_add_tctx_node+0x1cf/0x520 [ 2657.850650] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2657.851394] ? alloc_fd+0x2e7/0x670 [ 2657.851917] io_uring_setup+0x1fbb/0x2980 [ 2657.852500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2657.853198] ? wait_for_completion_io+0x270/0x270 [ 2657.853876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.854578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.855308] do_syscall_64+0x33/0x40 [ 2657.855951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.856643] RIP: 0033:0x7f910a3bdb19 [ 2657.857147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.859600] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2657.860622] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2657.861596] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2657.862523] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2657.863452] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2657.864453] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x20000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000002006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x20ffc000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x24000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 11:03:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 52) [ 2674.662405] FAULT_INJECTION: forcing a failure. [ 2674.662405] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.664076] CPU: 1 PID: 21555 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2674.665024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.666234] Call Trace: [ 2674.666630] dump_stack+0x107/0x167 [ 2674.667134] should_fail.cold+0x5/0xa [ 2674.667654] ? xas_alloc+0x336/0x440 [ 2674.668169] should_failslab+0x5/0x20 [ 2674.668696] kmem_cache_alloc+0x5b/0x310 [ 2674.669271] xas_alloc+0x336/0x440 [ 2674.669786] xas_create+0x34a/0x10d0 [ 2674.670316] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.671056] xas_store+0x8c/0x1c40 [ 2674.671593] __xa_store+0x164/0x2d0 [ 2674.672067] ? xa_delete_node+0x280/0x280 [ 2674.672621] ? trace_hardirqs_on+0x5b/0x180 [ 2674.673242] xa_store+0x31/0x50 [ 2674.673721] __io_uring_add_tctx_node+0x1cf/0x520 [ 2674.674355] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.675019] ? alloc_fd+0x2e7/0x670 [ 2674.675491] io_uring_setup+0x1fbb/0x2980 [ 2674.676021] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.676657] ? wait_for_completion_io+0x270/0x270 [ 2674.677310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.678000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.678658] do_syscall_64+0x33/0x40 [ 2674.679131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.679789] RIP: 0033:0x7f910a3bdb19 [ 2674.680269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.680864] FAULT_INJECTION: forcing a failure. [ 2674.680864] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.682813] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.682830] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2674.682837] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2674.682845] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2674.682853] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2674.682871] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2674.690012] CPU: 0 PID: 21561 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2674.691051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.692293] Call Trace: [ 2674.692744] dump_stack+0x107/0x167 [ 2674.693498] should_fail.cold+0x5/0xa [ 2674.694183] ? xas_alloc+0x336/0x440 [ 2674.694752] should_failslab+0x5/0x20 [ 2674.695309] kmem_cache_alloc+0x5b/0x310 [ 2674.695921] xas_alloc+0x336/0x440 [ 2674.696547] xas_create+0x34a/0x10d0 [ 2674.697138] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.697932] xas_store+0x8c/0x1c40 [ 2674.698479] __xa_store+0x164/0x2d0 [ 2674.699027] FAULT_INJECTION: forcing a failure. [ 2674.699027] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.699056] ? xa_delete_node+0x280/0x280 [ 2674.701191] ? trace_hardirqs_on+0x5b/0x180 [ 2674.701878] xa_store+0x31/0x50 [ 2674.702361] __io_uring_add_tctx_node+0x1cf/0x520 [ 2674.703091] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.703849] ? alloc_fd+0x2e7/0x670 [ 2674.704418] io_uring_setup+0x1fbb/0x2980 [ 2674.705042] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.705826] ? wait_for_completion_io+0x270/0x270 [ 2674.706571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.707353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.708162] do_syscall_64+0x33/0x40 [ 2674.708749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.709541] RIP: 0033:0x7fb073b23b19 [ 2674.710082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.712878] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.714014] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2674.715016] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2674.716019] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2674.717041] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2674.718060] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2674.719115] CPU: 1 PID: 21556 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2674.720098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.721169] Call Trace: [ 2674.721546] dump_stack+0x107/0x167 [ 2674.722039] should_fail.cold+0x5/0xa 11:03:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0, 0x42}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000003f06000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 43) 11:03:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 44) [ 2674.722787] ? xas_alloc+0x336/0x440 [ 2674.723379] should_failslab+0x5/0x20 [ 2674.723928] kmem_cache_alloc+0x5b/0x310 [ 2674.724545] xas_alloc+0x336/0x440 [ 2674.725065] xas_create+0x34a/0x10d0 [ 2674.725643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.726404] xas_store+0x8c/0x1c40 [ 2674.726927] __xa_store+0x164/0x2d0 [ 2674.727438] ? xa_delete_node+0x280/0x280 [ 2674.728033] ? trace_hardirqs_on+0x5b/0x180 [ 2674.728651] xa_store+0x31/0x50 [ 2674.729121] __io_uring_add_tctx_node+0x1cf/0x520 [ 2674.729933] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.730692] ? alloc_fd+0x2e7/0x670 [ 2674.731208] io_uring_setup+0x1fbb/0x2980 [ 2674.731757] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.732425] ? wait_for_completion_io+0x270/0x270 [ 2674.733125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.733862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.734600] do_syscall_64+0x33/0x40 [ 2674.735155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.735855] RIP: 0033:0x7fb3e1098b19 [ 2674.736352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.738808] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.739873] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2674.740914] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2674.741890] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2674.742839] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2674.743826] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 44) 11:03:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000092000000000000c00250000000000000000000003c8a4baac88779f8b513f13f5bbc58d871accef524a139414f60bfa13dbb0bd0c2e2f54803ea30ea786648aa53d6a6f8be1c1dc928fc5cc64f0ed39244b0e42ce8c61a1ea982d420000a10f80a4f1a200"/124], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d277deb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x510b507d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3daccb3d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c53aae1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25b803c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd35cd35}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2425a156}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28e7542}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e334eff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x804e8e7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29637ca5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c375793}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7316577f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6450b6f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1fe709}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed82f27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64390772}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c5dea}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48005}, 0x64004800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a08a8354413d8001002cbd7000ffdbdf25050000000e0001006e65746465006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008"], 0x64}, 0x1, 0x0, 0x0, 0x891}, 0x880) 11:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000006906000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2674.830144] FAULT_INJECTION: forcing a failure. [ 2674.830144] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.831812] CPU: 1 PID: 21569 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2674.832793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.833977] Call Trace: [ 2674.834359] dump_stack+0x107/0x167 [ 2674.834857] should_fail.cold+0x5/0xa [ 2674.835377] ? create_object.isra.0+0x3a/0xa20 [ 2674.836042] should_failslab+0x5/0x20 [ 2674.836562] kmem_cache_alloc+0x5b/0x310 [ 2674.837104] ? mark_held_locks+0x9e/0xe0 11:03:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) [ 2674.837703] create_object.isra.0+0x3a/0xa20 [ 2674.838558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2674.839247] kmem_cache_alloc+0x159/0x310 [ 2674.839821] xas_alloc+0x336/0x440 [ 2674.840298] xas_create+0x34a/0x10d0 [ 2674.840802] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.841553] xas_store+0x8c/0x1c40 [ 2674.842049] __xa_store+0x164/0x2d0 [ 2674.842539] ? xa_delete_node+0x280/0x280 [ 2674.843097] ? trace_hardirqs_on+0x5b/0x180 [ 2674.843694] xa_store+0x31/0x50 [ 2674.844132] __io_uring_add_tctx_node+0x1cf/0x520 [ 2674.844745] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.845437] ? alloc_fd+0x2e7/0x670 [ 2674.845919] io_uring_setup+0x1fbb/0x2980 [ 2674.846453] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.847110] ? wait_for_completion_io+0x270/0x270 [ 2674.847776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.848497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.849274] do_syscall_64+0x33/0x40 [ 2674.849838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.850548] RIP: 0033:0x7f910a3bdb19 [ 2674.851095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.853773] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.854890] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2674.855893] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2674.856881] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2674.857895] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2674.858891] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2674.868176] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 11:03:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 53) 11:03:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 45) 11:03:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 45) [ 2674.965164] FAULT_INJECTION: forcing a failure. [ 2674.965164] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.966912] CPU: 0 PID: 21653 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2674.967946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.969189] Call Trace: [ 2674.969610] dump_stack+0x107/0x167 [ 2674.970186] should_fail.cold+0x5/0xa [ 2674.970753] ? xas_alloc+0x336/0x440 [ 2674.971328] should_failslab+0x5/0x20 [ 2674.971860] kmem_cache_alloc+0x5b/0x310 [ 2674.972464] xas_alloc+0x336/0x440 [ 2674.972984] xas_create+0x34a/0x10d0 [ 2674.973600] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2674.974343] xas_store+0x8c/0x1c40 [ 2674.974869] __xa_store+0x164/0x2d0 [ 2674.975400] ? xa_delete_node+0x280/0x280 [ 2674.976030] ? trace_hardirqs_on+0x5b/0x180 [ 2674.976697] xa_store+0x31/0x50 [ 2674.977208] __io_uring_add_tctx_node+0x1cf/0x520 [ 2674.977958] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2674.978724] ? alloc_fd+0x2e7/0x670 [ 2674.979290] io_uring_setup+0x1fbb/0x2980 [ 2674.979899] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2674.980666] ? wait_for_completion_io+0x270/0x270 [ 2674.981393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.982148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.982862] do_syscall_64+0x33/0x40 [ 2674.983377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.983722] FAULT_INJECTION: forcing a failure. [ 2674.983722] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.984099] RIP: 0033:0x7fb073b23b19 [ 2674.986265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.988896] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.990044] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2674.991033] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2674.992021] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2674.993099] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2674.994161] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2674.995179] CPU: 1 PID: 21674 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2674.996190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.997304] Call Trace: [ 2674.997675] dump_stack+0x107/0x167 [ 2674.998161] should_fail.cold+0x5/0xa [ 2674.998659] ? xas_alloc+0x336/0x440 [ 2674.999146] should_failslab+0x5/0x20 [ 2674.999640] kmem_cache_alloc+0x5b/0x310 [ 2675.000175] xas_alloc+0x336/0x440 [ 2675.000639] xas_create+0x34a/0x10d0 [ 2675.001137] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2675.001832] xas_store+0x8c/0x1c40 [ 2675.002307] __xa_store+0x164/0x2d0 [ 2675.002804] ? xa_delete_node+0x280/0x280 [ 2675.003404] ? trace_hardirqs_on+0x5b/0x180 [ 2675.003991] xa_store+0x31/0x50 [ 2675.004415] __io_uring_add_tctx_node+0x1cf/0x520 [ 2675.005052] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2675.005791] ? alloc_fd+0x2e7/0x670 [ 2675.006383] io_uring_setup+0x1fbb/0x2980 [ 2675.006985] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2675.007688] ? wait_for_completion_io+0x270/0x270 [ 2675.008379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2675.009102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2675.009872] do_syscall_64+0x33/0x40 [ 2675.010479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2675.011195] RIP: 0033:0x7fb3e1098b19 [ 2675.011690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.014321] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2675.015408] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2675.016366] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2675.017437] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2675.018497] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2675.019533] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2675.044190] FAULT_INJECTION: forcing a failure. [ 2675.044190] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.045894] CPU: 1 PID: 21688 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2675.046849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2675.048145] Call Trace: [ 2675.048520] dump_stack+0x107/0x167 [ 2675.049013] should_fail.cold+0x5/0xa [ 2675.049578] ? xas_alloc+0x336/0x440 [ 2675.050171] should_failslab+0x5/0x20 [ 2675.050694] kmem_cache_alloc+0x5b/0x310 [ 2675.051268] xas_alloc+0x336/0x440 [ 2675.051803] xas_create+0x34a/0x10d0 [ 2675.052356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2675.053114] xas_store+0x8c/0x1c40 [ 2675.053666] __xa_store+0x164/0x2d0 [ 2675.054197] ? xa_delete_node+0x280/0x280 [ 2675.054785] ? trace_hardirqs_on+0x5b/0x180 [ 2675.055393] xa_store+0x31/0x50 [ 2675.055865] __io_uring_add_tctx_node+0x1cf/0x520 [ 2675.056549] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2675.057330] ? alloc_fd+0x2e7/0x670 [ 2675.057863] io_uring_setup+0x1fbb/0x2980 [ 2675.058454] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2675.059203] ? wait_for_completion_io+0x270/0x270 [ 2675.059893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2675.060613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2675.061310] do_syscall_64+0x33/0x40 [ 2675.061838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2675.062562] RIP: 0033:0x7f910a3bdb19 [ 2675.063184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.065748] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2675.066813] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2675.067796] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2675.068730] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2675.069738] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2675.070702] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:03:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2a000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000048006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:03:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x7, 0x3}) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x84c5}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:04:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 46) 11:04:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 46) 11:04:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x30000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:04:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:04:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000f006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 54) 11:04:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="140442402e9620aaeef3b9762a56cd12d8bb626275f4d135256d208167c006781241c89f6d6eb4f5d96a85e0264747d1f0a1e67f348c56a9594fd95ecbc581dba41b81d36030909379f0bffdbdcc75ef9f68186dddcaa4164dfcd3c52f8f771487151e654f545da7d77ec205448c1331316fc1fdfbb10d8f02132468037cc20b0d69f4a42cfd7ae63fc88ed1722125bedee5346608f89e3aa10c1761ab28bc0dc0212a7a7343754a6476a2a44d6ab626a8ade14c15e5243d1fb14dacc894d00c3cff2b77670803") 11:04:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x4000000, 0x0, 0x0, 0x0) 11:04:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2692.058279] FAULT_INJECTION: forcing a failure. [ 2692.058279] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.060040] CPU: 0 PID: 21716 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2692.061102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.062419] Call Trace: [ 2692.062836] dump_stack+0x107/0x167 [ 2692.063395] should_fail.cold+0x5/0xa [ 2692.063980] ? create_object.isra.0+0x3a/0xa20 [ 2692.064023] FAULT_INJECTION: forcing a failure. [ 2692.064023] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.064671] should_failslab+0x5/0x20 [ 2692.064686] kmem_cache_alloc+0x5b/0x310 [ 2692.064701] ? mark_held_locks+0x9e/0xe0 [ 2692.064720] create_object.isra.0+0x3a/0xa20 [ 2692.068685] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2692.069471] kmem_cache_alloc+0x159/0x310 [ 2692.070123] xas_alloc+0x336/0x440 [ 2692.070661] xas_create+0x34a/0x10d0 [ 2692.071261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2692.072040] xas_store+0x8c/0x1c40 [ 2692.072637] __xa_store+0x164/0x2d0 [ 2692.073190] ? xa_delete_node+0x280/0x280 [ 2692.073830] ? trace_hardirqs_on+0x5b/0x180 [ 2692.074497] xa_store+0x31/0x50 [ 2692.074989] __io_uring_add_tctx_node+0x1cf/0x520 [ 2692.075711] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2692.076484] ? alloc_fd+0x2e7/0x670 [ 2692.077041] io_uring_setup+0x1fbb/0x2980 [ 2692.077684] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2692.078434] ? wait_for_completion_io+0x270/0x270 [ 2692.079174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2692.079952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2692.081429] do_syscall_64+0x33/0x40 [ 2692.082011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2692.082766] RIP: 0033:0x7f910a3bdb19 [ 2692.083329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.086043] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2692.087174] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2692.088224] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2692.089276] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2692.090346] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2692.091404] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2692.092560] CPU: 1 PID: 21718 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2692.093583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.094758] Call Trace: [ 2692.095139] dump_stack+0x107/0x167 [ 2692.095665] should_fail.cold+0x5/0xa [ 2692.096204] ? ___slab_alloc+0x155/0x700 [ 2692.096778] ? create_object.isra.0+0x3a/0xa20 [ 2692.097422] should_failslab+0x5/0x20 [ 2692.097972] kmem_cache_alloc+0x5b/0x310 [ 2692.098569] create_object.isra.0+0x3a/0xa20 [ 2692.099189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2692.099905] kmem_cache_alloc+0x159/0x310 [ 2692.100499] xas_alloc+0x336/0x440 [ 2692.101001] xas_create+0x34a/0x10d0 [ 2692.101546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2692.102294] xas_store+0x8c/0x1c40 [ 2692.102815] __xa_store+0x164/0x2d0 [ 2692.103336] ? xa_delete_node+0x280/0x280 [ 2692.103932] ? trace_hardirqs_on+0x5b/0x180 [ 2692.104546] xa_store+0x31/0x50 [ 2692.105013] __io_uring_add_tctx_node+0x1cf/0x520 [ 2692.105745] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2692.106611] ? alloc_fd+0x2e7/0x670 [ 2692.107179] io_uring_setup+0x1fbb/0x2980 [ 2692.107897] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2692.108653] ? wait_for_completion_io+0x270/0x270 [ 2692.109349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2692.110093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2692.110818] do_syscall_64+0x33/0x40 [ 2692.111372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2692.112087] RIP: 0033:0x7fb3e1098b19 [ 2692.112661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.115269] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2692.116352] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2692.117382] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2692.118385] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2692.119382] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2692.120378] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:04:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000206000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x36000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:04:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x30c, 0x16, 0x8, 0x70bd25, 0x25dfdbfe, {0x4}, [@generic="05ead7560c01858ffa1a93b6da0a5255810f936a97f2449ba32d308e709c706237fd565406082314afc34cf83b0c14ecba9d783370bcd4caa9548c9c77e27c5336f825c15d200076ff9c999f5042f4c256fbb5d6aa5fc239eb3fc5793e315bdc716f46c1ba3e4fa068c39771191e210dfa038bac611c75b25e1fb274d5b206f8135d88a5e04419114e2f8e63542300e63e0d4547ce8203258cb590b3bba085f00881fbfd7d149a1607fdc33c323dcc2de32515b89f1efd753d72baee56563fe0536649e3e9e74a0120b80fbae68739d3f05f5fdba999ccd4371a99ab21a8a000b0ffe6ccf0a3c1ec6ae768c721508fbeae18155137f81eb336", @generic="97f39fe4dff56b4fb5010591e05dd3682a66890db821ef599418b57bf2f5d91e9b0ee98d95c03befba9bf982a39e5d9d948dcf38ab1b287242999516c3e22e2a4109b7040d59", @nested={0x1b6, 0x2b, 0x0, 0x1, [@typed={0x4, 0x50}, @generic="8d00ac67c3f6953ce93c5449fbb8afa9810fc4e93b952fe13cb84fce144d072ebb238e374f4ce4fab33b805f2653490ac5cecf31fed1cd2088207e5a3dfea98d46ff59d194904867a9c8a547e97c25637f4bbf", @generic="399f1eae6db525e8175737508b92c473edf34aed794bcc2b7abd908bd1eb8c77909d75a1293d98cc439b0a2bde18d5e0b9610242d2cc470df2038dcca2735b65ec3ac8d1226ad1fc844fe99b6393729d37ad2dfdf7cef50082aaa42a6ef96c0b4e4204be7e", @generic="d87b7158d9ff84b23c12ea19ed64eb63468a48f5273d1bb73e149475112eec36f2e1c829fdcee038a2b6b843f7e1551afaa13e51b645a3cec0dec07106343a579758d7d6d936ea543ffd9a0261d68c4bcba6a6e281bcfa2d8d878184e081798a284b1ae447c13f8f9c38055168121a0d881443a8dd2bb083bca1cf7de4d5ecc3cb2c871805c757c02fee20ff201af3dd4eeb82095655866b3aa82ae2b3e50d62ba57be5bbd2f265e2077eebe17304c96013679444a8e1e71d50968fc4c99fd40012dc4889e2e743157d4b787ef59cbfb20669cf169eb5e1cae3b6427ce875cfbc892887ed4246e58e201d4ded920", @typed={0x8, 0x67, 0x0, 0x0, @u32=0xffffff00}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0xc0}, 0x4800) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f00000000c0)={'L+', 0x99}, 0x16, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r2}, {r2}, {r2}, {r2}, {r2}, {r2}], 0x6, 0x47) 11:04:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) [ 2692.218631] FAULT_INJECTION: forcing a failure. [ 2692.218631] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.220336] CPU: 1 PID: 21705 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2692.221343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.222588] Call Trace: [ 2692.222982] dump_stack+0x107/0x167 [ 2692.223522] should_fail.cold+0x5/0xa [ 2692.224086] ? ___slab_alloc+0x155/0x700 [ 2692.224713] ? create_object.isra.0+0x3a/0xa20 [ 2692.225386] should_failslab+0x5/0x20 [ 2692.226000] kmem_cache_alloc+0x5b/0x310 [ 2692.226605] create_object.isra.0+0x3a/0xa20 [ 2692.227253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2692.228009] kmem_cache_alloc+0x159/0x310 [ 2692.228635] xas_alloc+0x336/0x440 [ 2692.229168] xas_create+0x34a/0x10d0 [ 2692.229752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2692.230526] xas_store+0x8c/0x1c40 [ 2692.231068] __xa_store+0x164/0x2d0 [ 2692.231602] ? xa_delete_node+0x280/0x280 [ 2692.232223] ? trace_hardirqs_on+0x5b/0x180 [ 2692.232868] xa_store+0x31/0x50 [ 2692.233351] __io_uring_add_tctx_node+0x1cf/0x520 [ 2692.234092] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2692.234862] ? alloc_fd+0x2e7/0x670 [ 2692.235412] io_uring_setup+0x1fbb/0x2980 [ 2692.236032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2692.236805] ? wait_for_completion_io+0x270/0x270 [ 2692.237570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2692.238367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2692.239123] do_syscall_64+0x33/0x40 [ 2692.239678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2692.240460] RIP: 0033:0x7fb073b23b19 [ 2692.241008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.243757] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2692.244906] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2692.245995] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2692.247047] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2692.248094] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2692.249153] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:04:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x3c000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:04:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000080)={'L-', 0xb}, 0x16, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10000, 0x4) 11:04:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:04:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 47) 11:04:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 55) 11:04:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 47) 11:04:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 11:04:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000306000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2708.932070] FAULT_INJECTION: forcing a failure. [ 2708.932070] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.933917] CPU: 1 PID: 21750 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2708.934967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2708.936254] Call Trace: [ 2708.936651] dump_stack+0x107/0x167 [ 2708.937198] should_fail.cold+0x5/0xa [ 2708.937768] ? xas_alloc+0x336/0x440 [ 2708.938389] should_failslab+0x5/0x20 [ 2708.938956] kmem_cache_alloc+0x5b/0x310 [ 2708.939569] xas_alloc+0x336/0x440 [ 2708.940150] xas_create+0x34a/0x10d0 [ 2708.940722] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.941288] FAULT_INJECTION: forcing a failure. [ 2708.941288] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.941530] xas_store+0x8c/0x1c40 [ 2708.943837] __xa_store+0x164/0x2d0 [ 2708.944427] ? xa_delete_node+0x280/0x280 [ 2708.945081] ? trace_hardirqs_on+0x5b/0x180 [ 2708.945725] xa_store+0x31/0x50 [ 2708.946274] __io_uring_add_tctx_node+0x1cf/0x520 [ 2708.947014] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2708.947789] ? alloc_fd+0x2e7/0x670 [ 2708.948381] io_uring_setup+0x1fbb/0x2980 [ 2708.949032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2708.949796] ? wait_for_completion_io+0x270/0x270 [ 2708.950539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2708.951358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2708.952132] do_syscall_64+0x33/0x40 [ 2708.952680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2708.953481] RIP: 0033:0x7fb3e1098b19 [ 2708.954049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2708.956808] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2708.957973] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2708.959036] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2708.960132] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2708.961201] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2708.962268] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2708.963408] CPU: 0 PID: 21763 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2708.964549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2708.965828] Call Trace: [ 2708.966263] dump_stack+0x107/0x167 [ 2708.966797] should_fail.cold+0x5/0xa [ 2708.967399] ? xas_alloc+0x336/0x440 [ 2708.967962] should_failslab+0x5/0x20 [ 2708.968529] kmem_cache_alloc+0x5b/0x310 [ 2708.969134] xas_alloc+0x336/0x440 [ 2708.969699] xas_create+0x34a/0x10d0 [ 2708.970285] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.971068] xas_store+0x8c/0x1c40 [ 2708.971630] __xa_store+0x164/0x2d0 [ 2708.972217] ? xa_delete_node+0x280/0x280 [ 2708.972961] ? trace_hardirqs_on+0x5b/0x180 [ 2708.973567] xa_store+0x31/0x50 [ 2708.973609] FAULT_INJECTION: forcing a failure. [ 2708.973609] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.974042] __io_uring_add_tctx_node+0x1cf/0x520 [ 2708.974058] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2708.974077] ? alloc_fd+0x2e7/0x670 [ 2708.977678] io_uring_setup+0x1fbb/0x2980 [ 2708.978305] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2708.979028] ? wait_for_completion_io+0x270/0x270 [ 2708.979726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2708.980437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2708.981191] do_syscall_64+0x33/0x40 [ 2708.981745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2708.982514] RIP: 0033:0x7f910a3bdb19 [ 2708.983075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2708.985662] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2708.986760] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2708.987765] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2708.988783] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2708.989799] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2708.990782] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2708.991880] CPU: 1 PID: 21770 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2708.992959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2708.994149] Call Trace: [ 2708.994730] dump_stack+0x107/0x167 [ 2708.995264] should_fail.cold+0x5/0xa [ 2708.995815] ? xas_alloc+0x336/0x440 [ 2708.996465] should_failslab+0x5/0x20 [ 2708.997063] kmem_cache_alloc+0x5b/0x310 [ 2708.997849] xas_alloc+0x336/0x440 [ 2708.998418] xas_create+0x34a/0x10d0 [ 2708.998965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2708.999714] xas_store+0x8c/0x1c40 [ 2709.000247] __xa_store+0x164/0x2d0 [ 2709.000776] ? xa_delete_node+0x280/0x280 [ 2709.001380] ? trace_hardirqs_on+0x5b/0x180 [ 2709.002023] xa_store+0x31/0x50 [ 2709.002511] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.003205] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.003953] ? alloc_fd+0x2e7/0x670 [ 2709.004496] io_uring_setup+0x1fbb/0x2980 [ 2709.005099] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.005836] ? wait_for_completion_io+0x270/0x270 [ 2709.006552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.007301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.008038] do_syscall_64+0x33/0x40 [ 2709.008558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.009294] RIP: 0033:0x7fb073b23b19 [ 2709.009847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.012453] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.013544] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2709.014580] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2709.015581] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2709.016600] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2709.017609] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:04:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000406000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 11:04:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:04:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 48) 11:04:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 56) 11:04:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 11:04:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000506000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2709.209799] FAULT_INJECTION: forcing a failure. [ 2709.209799] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.211509] CPU: 0 PID: 21974 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2709.212514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.213715] Call Trace: [ 2709.214120] dump_stack+0x107/0x167 [ 2709.214657] should_fail.cold+0x5/0xa [ 2709.215210] ? create_object.isra.0+0x3a/0xa20 [ 2709.215879] should_failslab+0x5/0x20 [ 2709.216434] kmem_cache_alloc+0x5b/0x310 [ 2709.217033] ? mark_held_locks+0x9e/0xe0 [ 2709.217632] create_object.isra.0+0x3a/0xa20 [ 2709.218281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.219030] kmem_cache_alloc+0x159/0x310 [ 2709.219636] xas_alloc+0x336/0x440 [ 2709.220152] xas_create+0x34a/0x10d0 [ 2709.220712] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.221476] xas_store+0x8c/0x1c40 [ 2709.222025] __xa_store+0x164/0x2d0 [ 2709.222560] ? xa_delete_node+0x280/0x280 [ 2709.223176] ? trace_hardirqs_on+0x5b/0x180 [ 2709.223815] xa_store+0x31/0x50 [ 2709.224307] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.225022] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.225808] ? alloc_fd+0x2e7/0x670 [ 2709.226350] io_uring_setup+0x1fbb/0x2980 [ 2709.226964] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.227704] ? wait_for_completion_io+0x270/0x270 [ 2709.228430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.229199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.229942] do_syscall_64+0x33/0x40 [ 2709.230465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.231199] RIP: 0033:0x7fb073b23b19 [ 2709.231740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.234428] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.235545] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2709.236583] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2709.237625] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2709.238642] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2709.239671] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:04:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x8800000, 0x0, 0x0, 0x0) 11:04:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 48) [ 2709.267360] FAULT_INJECTION: forcing a failure. [ 2709.267360] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.269013] CPU: 1 PID: 21980 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2709.269967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.271103] Call Trace: [ 2709.271477] dump_stack+0x107/0x167 [ 2709.271979] should_fail.cold+0x5/0xa [ 2709.272489] ? create_object.isra.0+0x3a/0xa20 [ 2709.273129] should_failslab+0x5/0x20 [ 2709.273808] kmem_cache_alloc+0x5b/0x310 [ 2709.274440] ? mark_held_locks+0x9e/0xe0 [ 2709.275133] create_object.isra.0+0x3a/0xa20 [ 2709.275737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.276446] kmem_cache_alloc+0x159/0x310 [ 2709.277022] xas_alloc+0x336/0x440 [ 2709.277518] xas_create+0x34a/0x10d0 [ 2709.278070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.278792] xas_store+0x8c/0x1c40 [ 2709.279297] __xa_store+0x164/0x2d0 [ 2709.279801] ? xa_delete_node+0x280/0x280 [ 2709.280376] ? trace_hardirqs_on+0x5b/0x180 [ 2709.280987] xa_store+0x31/0x50 [ 2709.281449] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.282124] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.282838] ? alloc_fd+0x2e7/0x670 [ 2709.283347] io_uring_setup+0x1fbb/0x2980 [ 2709.283925] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.284622] ? wait_for_completion_io+0x270/0x270 [ 2709.285301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.286048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.286759] do_syscall_64+0x33/0x40 [ 2709.287260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.287949] RIP: 0033:0x7fb3e1098b19 [ 2709.288468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.291061] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.292146] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2709.293160] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2709.294191] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2709.295194] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2709.296210] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:04:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2709.337374] FAULT_INJECTION: forcing a failure. [ 2709.337374] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.339154] CPU: 0 PID: 21991 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2709.340199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.341455] Call Trace: [ 2709.341878] dump_stack+0x107/0x167 [ 2709.342431] should_fail.cold+0x5/0xa [ 2709.343056] ? create_object.isra.0+0x3a/0xa20 [ 2709.343742] should_failslab+0x5/0x20 [ 2709.344319] kmem_cache_alloc+0x5b/0x310 [ 2709.344960] ? mark_held_locks+0x9e/0xe0 [ 2709.345577] create_object.isra.0+0x3a/0xa20 [ 2709.346262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.347026] kmem_cache_alloc+0x159/0x310 [ 2709.347662] xas_alloc+0x336/0x440 [ 2709.348201] xas_create+0x34a/0x10d0 [ 2709.348780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.349578] xas_store+0x8c/0x1c40 [ 2709.350148] __xa_store+0x164/0x2d0 [ 2709.350694] ? xa_delete_node+0x280/0x280 [ 2709.351332] ? trace_hardirqs_on+0x5b/0x180 [ 2709.351998] xa_store+0x31/0x50 [ 2709.352494] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.353247] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.354091] ? alloc_fd+0x2e7/0x670 [ 2709.354652] io_uring_setup+0x1fbb/0x2980 [ 2709.355291] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.356076] ? wait_for_completion_io+0x270/0x270 [ 2709.356870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.357667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.358467] do_syscall_64+0x33/0x40 [ 2709.359034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.359809] RIP: 0033:0x7f910a3bdb19 [ 2709.360375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.363161] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.364317] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2709.365401] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2709.366491] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2709.367568] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2709.368639] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:04:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) copy_file_range(r1, &(0x7f0000000080)=0x5, r2, &(0x7f00000000c0)=0x4, 0x1000, 0x0) 11:04:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x42000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:04:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 57) 11:04:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000606000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) [ 2709.405900] FAULT_INJECTION: forcing a failure. [ 2709.405900] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.407734] CPU: 1 PID: 21996 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2709.408725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.409910] Call Trace: [ 2709.410291] dump_stack+0x107/0x167 [ 2709.410811] should_fail.cold+0x5/0xa [ 2709.411357] ? create_object.isra.0+0x3a/0xa20 [ 2709.412007] should_failslab+0x5/0x20 [ 2709.412540] kmem_cache_alloc+0x5b/0x310 [ 2709.413120] ? mark_held_locks+0x9e/0xe0 [ 2709.413700] create_object.isra.0+0x3a/0xa20 [ 2709.414333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.415057] kmem_cache_alloc+0x159/0x310 [ 2709.415646] xas_alloc+0x336/0x440 [ 2709.416162] xas_create+0x34a/0x10d0 [ 2709.416702] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.417446] xas_store+0x8c/0x1c40 [ 2709.417976] __xa_store+0x164/0x2d0 [ 2709.418495] ? xa_delete_node+0x280/0x280 [ 2709.419094] ? trace_hardirqs_on+0x5b/0x180 [ 2709.419707] xa_store+0x31/0x50 [ 2709.420182] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.420869] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.421604] ? alloc_fd+0x2e7/0x670 [ 2709.422155] io_uring_setup+0x1fbb/0x2980 [ 2709.422756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.423476] ? wait_for_completion_io+0x270/0x270 [ 2709.424181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.424930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.425664] do_syscall_64+0x33/0x40 [ 2709.426211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.426946] RIP: 0033:0x7fb073b23b19 [ 2709.427473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.430100] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.431183] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2709.432191] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2709.433199] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2709.434231] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2709.435244] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:04:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:04:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000706000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 49) 11:04:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) 11:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000806000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:04:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 58) [ 2726.230326] kauditd_printk_skb: 3 callbacks suppressed [ 2726.230341] audit: type=1107 audit(1741172690.182:218): pid=22016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='÷6 "Ô©‹¤Ú%®æ4 ckbqö’?Zp_ZÔ¹_9ð]¬íÜnUpüUy³üž¸§ÃÛH7y»µáfÅñVÔnÛÃi?w0 <’)Äè¡áZPb º›)‹àês°-ÝÍRãƒvÈ´cùvªK\‹_œP§hÃÒ5ךÌK;b' [ 2726.238711] FAULT_INJECTION: forcing a failure. [ 2726.238711] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.240563] CPU: 0 PID: 22023 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2726.241608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2726.243013] Call Trace: [ 2726.243525] dump_stack+0x107/0x167 [ 2726.244149] should_fail.cold+0x5/0xa [ 2726.244730] ? create_object.isra.0+0x3a/0xa20 [ 2726.245433] should_failslab+0x5/0x20 [ 2726.246593] kmem_cache_alloc+0x5b/0x310 [ 2726.247310] ? mark_held_locks+0x9e/0xe0 [ 2726.247938] create_object.isra.0+0x3a/0xa20 [ 2726.248584] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2726.249361] kmem_cache_alloc+0x159/0x310 [ 2726.250013] xas_alloc+0x336/0x440 [ 2726.250535] xas_create+0x34a/0x10d0 [ 2726.251145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2726.251911] xas_store+0x8c/0x1c40 [ 2726.252495] __xa_store+0x164/0x2d0 [ 2726.253053] ? xa_delete_node+0x280/0x280 [ 2726.253672] ? trace_hardirqs_on+0x5b/0x180 [ 2726.254368] xa_store+0x31/0x50 [ 2726.254865] __io_uring_add_tctx_node+0x1cf/0x520 [ 2726.255582] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2726.256365] ? alloc_fd+0x2e7/0x670 [ 2726.256936] io_uring_setup+0x1fbb/0x2980 [ 2726.257617] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2726.258376] ? wait_for_completion_io+0x270/0x270 [ 2726.259198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2726.259965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2726.260741] do_syscall_64+0x33/0x40 [ 2726.261322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2726.262112] RIP: 0033:0x7fb073b23b19 [ 2726.262767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2726.265472] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2726.266691] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2726.267898] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2726.268888] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2726.269956] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2726.270948] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:04:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 49) 11:04:50 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x10, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48c0}, 0x8804) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x453, 0x300, 0x70bd25, 0x25dfdbfd, "f7360922d4c2a98ba4da25aee6342016636b1c6271f6923f5a705f5ad4b95f3917f05daceddc6e5570fc5579b3fc9eb8a7c3db4837791cbbb5e166c503f156d46edb13c3693f057730a03c922906c48de8a1e15a506220ba049b298be0ea73b02dddcd52e38376c8b463f976aa4b5c8b1b5f9c50a768c3d235d79acc4b3b623b", ["", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2dc, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xac}, @ETHTOOL_A_EEE_MODES_OURS={0x210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c58}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '<\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa2\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabc2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x95\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'U,-:,/1:-$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':/-&).:{/\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x12\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2493a87e}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x83\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "afca4cd5228619e28504bd35dc70c5f50d029f404db1f643fecfb26e1d851885bb5682de9a6e1f5deb91f99a6f1446bfe8aaf35c5f0fa816dd24cd8e59ce76efd693b6cab858a90fa0454f95245376b6b180f412922ac7d70cd9a134f764d2501176fb2cea63091a2cb6cf8fff550bf79b61fc25550886b414642783acffaf7b0f9416cec71983a8c9db3541767227b831"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r2}, {r2}, {r2}, {r2}, {r2}, {r2}], 0x6, 0x47) 11:04:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4fd00fff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:04:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2726.286600] FAULT_INJECTION: forcing a failure. [ 2726.286600] name failslab, interval 1, probability 0, space 0, times 0 11:04:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4fd90fff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2726.288684] CPU: 0 PID: 22034 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2726.290074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2726.291197] Call Trace: [ 2726.291573] dump_stack+0x107/0x167 [ 2726.292105] should_fail.cold+0x5/0xa [ 2726.293251] ? xas_alloc+0x336/0x440 [ 2726.293784] should_failslab+0x5/0x20 [ 2726.294339] kmem_cache_alloc+0x5b/0x310 [ 2726.294899] xas_alloc+0x336/0x440 [ 2726.295390] xas_create+0x34a/0x10d0 [ 2726.295912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2726.296639] xas_store+0x8c/0x1c40 [ 2726.297193] __xa_store+0x164/0x2d0 [ 2726.297730] ? xa_delete_node+0x280/0x280 [ 2726.298355] ? trace_hardirqs_on+0x5b/0x180 [ 2726.298984] xa_store+0x31/0x50 [ 2726.299458] __io_uring_add_tctx_node+0x1cf/0x520 [ 2726.300104] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2726.300804] ? alloc_fd+0x2e7/0x670 [ 2726.301312] io_uring_setup+0x1fbb/0x2980 [ 2726.301881] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2726.302620] ? wait_for_completion_io+0x270/0x270 [ 2726.303336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2726.304067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2726.304808] do_syscall_64+0x33/0x40 [ 2726.305328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2726.306051] RIP: 0033:0x7fb3e1098b19 [ 2726.306576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2726.309151] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2726.310276] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2726.311265] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2726.312264] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2726.313262] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2726.314278] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2726.319268] audit: type=1107 audit(1741172690.269:219): pid=22016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='÷6 "Ô©‹¤Ú%®æ4 ckbqö’?Zp_ZÔ¹_9ð]¬íÜnUpüUy³üž¸§ÃÛH7y»µáfÅñVÔnÛÃi?w0 <’)Äè¡áZPb º›)‹àês°-ÝÍRãƒvÈ´cùvªK\‹_œP§hÃÒ5ךÌK;b' [ 2726.361375] FAULT_INJECTION: forcing a failure. [ 2726.361375] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.363098] CPU: 1 PID: 22022 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2726.364195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2726.365397] Call Trace: [ 2726.365800] dump_stack+0x107/0x167 [ 2726.366357] should_fail.cold+0x5/0xa [ 2726.366917] ? xas_alloc+0x336/0x440 [ 2726.367444] should_failslab+0x5/0x20 [ 2726.367967] kmem_cache_alloc+0x5b/0x310 [ 2726.368551] xas_alloc+0x336/0x440 [ 2726.369067] xas_create+0x34a/0x10d0 [ 2726.369626] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2726.370360] xas_store+0x8c/0x1c40 [ 2726.370838] __xa_store+0x164/0x2d0 [ 2726.371352] ? xa_delete_node+0x280/0x280 [ 2726.371965] ? trace_hardirqs_on+0x5b/0x180 [ 2726.372596] xa_store+0x31/0x50 [ 2726.373096] __io_uring_add_tctx_node+0x1cf/0x520 [ 2726.373740] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2726.374506] ? alloc_fd+0x2e7/0x670 [ 2726.375106] io_uring_setup+0x1fbb/0x2980 [ 2726.375748] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2726.376465] ? wait_for_completion_io+0x270/0x270 [ 2726.377194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2726.378164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2726.378891] do_syscall_64+0x33/0x40 [ 2726.379420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2726.380146] RIP: 0033:0x7f910a3bdb19 [ 2726.380688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2726.383342] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2726.384443] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2726.385491] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2726.386520] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2726.387502] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2726.388506] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2742.578941] FAULT_INJECTION: forcing a failure. [ 2742.578941] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.580772] CPU: 0 PID: 22050 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2742.581805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.583077] FAULT_INJECTION: forcing a failure. [ 2742.583077] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.584911] Call Trace: [ 2742.585315] dump_stack+0x107/0x167 [ 2742.585844] should_fail.cold+0x5/0xa [ 2742.586470] ? xas_alloc+0x336/0x440 [ 2742.587034] should_failslab+0x5/0x20 [ 2742.587615] kmem_cache_alloc+0x5b/0x310 [ 2742.588297] xas_alloc+0x336/0x440 [ 2742.588826] xas_create+0x34a/0x10d0 [ 2742.589405] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.590222] xas_store+0x8c/0x1c40 [ 2742.590763] __xa_store+0x164/0x2d0 [ 2742.591336] ? xa_delete_node+0x280/0x280 [ 2742.591931] ? trace_hardirqs_on+0x5b/0x180 [ 2742.592582] xa_store+0x31/0x50 [ 2742.593067] __io_uring_add_tctx_node+0x1cf/0x520 [ 2742.593788] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2742.594642] ? alloc_fd+0x2e7/0x670 [ 2742.595179] io_uring_setup+0x1fbb/0x2980 [ 2742.595812] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2742.596580] ? wait_for_completion_io+0x270/0x270 [ 2742.597742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.598554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.599323] do_syscall_64+0x33/0x40 [ 2742.599890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.600652] RIP: 0033:0x7f910a3bdb19 [ 2742.601261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.604077] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2742.605265] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2742.606385] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2742.607485] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2742.608651] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2742.609762] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2742.610998] CPU: 1 PID: 22051 Comm: syz-executor.4 Not tainted 5.10.234 #1 11:05:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 50) 11:05:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 59) 11:05:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4fe00fff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001806000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 50) 11:05:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:05:06 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="09001200269929b50688934f544a"]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) r4 = dup2(r3, r2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) poll(&(0x7f0000000080)=[{r4, 0xc8}, {0xffffffffffffffff, 0x2000}, {r5, 0x20}, {r0, 0xdb6}, {r4, 0x4022}, {r6, 0x6a4}], 0x6, 0x20000049) [ 2742.612434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.613836] Call Trace: [ 2742.614245] dump_stack+0x107/0x167 [ 2742.614820] should_fail.cold+0x5/0xa [ 2742.615367] should_failslab+0x5/0x20 [ 2742.615906] kmem_cache_alloc_bulk+0x4b/0x320 [ 2742.616582] io_submit_sqes+0x6fe6/0x8610 [ 2742.617183] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2742.617947] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2742.618661] ? find_held_lock+0x2c/0x110 [ 2742.619296] ? io_submit_sqes+0x8610/0x8610 [ 2742.619909] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.620610] ? wait_for_completion_io+0x270/0x270 [ 2742.621334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.621994] ? vfs_write+0x354/0xb10 [ 2742.622622] ? fput_many+0x2f/0x1a0 [ 2742.623140] ? ksys_write+0x1a9/0x260 [ 2742.623689] ? __ia32_sys_read+0xb0/0xb0 [ 2742.624273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.625128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.625878] do_syscall_64+0x33/0x40 11:05:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) [ 2742.626413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.627412] RIP: 0033:0x7f679f3dcb19 [ 2742.627971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.630657] RSP: 002b:00007f679c931188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2742.631747] RAX: ffffffffffffffda RBX: 00007f679f4f0020 RCX: 00007f679f3dcb19 [ 2742.632855] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2742.633842] RBP: 00007f679c9311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.634954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.635960] R13: 00007fff5925ceaf R14: 00007f679c931300 R15: 0000000000022000 [ 2742.657448] FAULT_INJECTION: forcing a failure. [ 2742.657448] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.660213] CPU: 1 PID: 22061 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2742.661218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.662430] Call Trace: [ 2742.662784] dump_stack+0x107/0x167 [ 2742.663253] should_fail.cold+0x5/0xa [ 2742.663803] ? xas_alloc+0x336/0x440 [ 2742.664311] should_failslab+0x5/0x20 [ 2742.664889] kmem_cache_alloc+0x5b/0x310 [ 2742.665519] xas_alloc+0x336/0x440 [ 2742.666011] xas_create+0x34a/0x10d0 [ 2742.666551] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.667272] xas_store+0x8c/0x1c40 [ 2742.667790] __xa_store+0x164/0x2d0 [ 2742.668328] ? xa_delete_node+0x280/0x280 [ 2742.668968] ? trace_hardirqs_on+0x5b/0x180 [ 2742.669575] xa_store+0x31/0x50 [ 2742.670030] __io_uring_add_tctx_node+0x1cf/0x520 [ 2742.670742] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2742.671427] ? alloc_fd+0x2e7/0x670 [ 2742.671951] io_uring_setup+0x1fbb/0x2980 [ 2742.672553] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2742.673251] ? wait_for_completion_io+0x270/0x270 [ 2742.673942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.674738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.675501] do_syscall_64+0x33/0x40 [ 2742.676009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.676028] FAULT_INJECTION: forcing a failure. [ 2742.676028] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.678314] RIP: 0033:0x7fb3e1098b19 [ 2742.678880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.681547] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2742.682655] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2742.683680] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2742.684764] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2742.685750] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2742.686848] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2742.687973] CPU: 0 PID: 22062 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2742.689197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.690609] Call Trace: [ 2742.691014] dump_stack+0x107/0x167 [ 2742.691572] should_fail.cold+0x5/0xa [ 2742.692166] ? xas_alloc+0x336/0x440 [ 2742.692727] should_failslab+0x5/0x20 [ 2742.693288] kmem_cache_alloc+0x5b/0x310 [ 2742.693906] xas_alloc+0x336/0x440 [ 2742.694446] xas_create+0x34a/0x10d0 [ 2742.694979] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.695823] xas_store+0x8c/0x1c40 [ 2742.696371] __xa_store+0x164/0x2d0 [ 2742.696928] ? xa_delete_node+0x280/0x280 [ 2742.697542] ? trace_hardirqs_on+0x5b/0x180 [ 2742.698195] xa_store+0x31/0x50 [ 2742.698724] __io_uring_add_tctx_node+0x1cf/0x520 [ 2742.699429] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2742.700188] ? alloc_fd+0x2e7/0x670 [ 2742.700717] io_uring_setup+0x1fbb/0x2980 [ 2742.701314] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2742.702019] ? wait_for_completion_io+0x270/0x270 [ 2742.702787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.703538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.704268] do_syscall_64+0x33/0x40 [ 2742.704823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.705602] RIP: 0033:0x7fb073b23b19 [ 2742.706209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.708820] RSP: 002b:00007fb071078108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2742.709922] RAX: ffffffffffffffda RBX: 00007fb073c37020 RCX: 00007fb073b23b19 [ 2742.710936] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2742.711924] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2742.712920] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2742.713968] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:05:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 11:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000001c06000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x4fefffff}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:05:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000b00)="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", 0x1000) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0, 0x8000}, {r0}, {r0}, {r0}], 0x6, 0x47) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4dc, 0x9}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x80800, 0x205) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r2, 0x81, {0x0, r1}, 0x905, 0x6, 0x0, {0x0, 0x0, r3}}, 0x20) r4 = syz_open_dev$vcsa(&(0x7f0000000840), 0x3, 0x200000) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000a80)=""/81, 0x51}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x2) recvmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/34, 0x22}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/177, 0xb1}], 0x7, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x1, 0x2040, &(0x7f0000000800)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20a60, &(0x7f0000001c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,posixacl,nodevmap,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f0100000086702c6163636573733d00000000e88068c973135101000000646f6e745f686173682c667378616d653dc3252d2d2c666f776e65723e", @ANYRESOCT=r0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=staff_u,subj_user=,\x00']) 11:05:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 51) 11:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000006906000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x91000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2742.826542] FAULT_INJECTION: forcing a failure. [ 2742.826542] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.826561] CPU: 0 PID: 22074 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2742.826569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.826574] Call Trace: [ 2742.826596] dump_stack+0x107/0x167 [ 2742.826612] should_fail.cold+0x5/0xa [ 2742.826629] ? create_object.isra.0+0x3a/0xa20 [ 2742.826646] should_failslab+0x5/0x20 [ 2742.826660] kmem_cache_alloc+0x5b/0x310 [ 2742.826681] ? mark_held_locks+0x9e/0xe0 [ 2742.826697] create_object.isra.0+0x3a/0xa20 [ 2742.826708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2742.826725] kmem_cache_alloc+0x159/0x310 [ 2742.826745] xas_alloc+0x336/0x440 [ 2742.826760] xas_create+0x34a/0x10d0 [ 2742.826783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2742.826800] xas_store+0x8c/0x1c40 [ 2742.826826] __xa_store+0x164/0x2d0 [ 2742.826899] ? xa_delete_node+0x280/0x280 [ 2742.826923] ? trace_hardirqs_on+0x5b/0x180 [ 2742.826943] xa_store+0x31/0x50 [ 2742.826959] __io_uring_add_tctx_node+0x1cf/0x520 [ 2742.826974] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2742.826986] ? alloc_fd+0x2e7/0x670 [ 2742.827009] io_uring_setup+0x1fbb/0x2980 [ 2742.827029] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2742.827042] ? wait_for_completion_io+0x270/0x270 [ 2742.827080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.827094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.827111] do_syscall_64+0x33/0x40 [ 2742.827124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.827134] RIP: 0033:0x7f910a3bdb19 [ 2742.827149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.827157] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2742.827172] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2742.827181] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2742.827189] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2742.827197] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2742.827206] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:05:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 11:05:22 executing program 2: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d1c2", @ANYRES16=0x0, @ANYBLOB="02002abd70000400000018000000240007800c000300010000000000000008000100800000000c000400010000000000000004000480"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}, 0xfffffffffffffec8) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000340)={@private1, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x180, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00052dbd7000ffdbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900080000004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc0) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:05:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:05:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 60) 11:05:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 51) 11:05:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 52) [ 2758.702035] FAULT_INJECTION: forcing a failure. [ 2758.702035] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.703924] CPU: 0 PID: 22198 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2758.704963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.706148] Call Trace: [ 2758.706546] dump_stack+0x107/0x167 [ 2758.707173] should_fail.cold+0x5/0xa [ 2758.707776] ? create_object.isra.0+0x3a/0xa20 [ 2758.708454] should_failslab+0x5/0x20 [ 2758.709021] kmem_cache_alloc+0x5b/0x310 [ 2758.709617] ? mark_held_locks+0x9e/0xe0 [ 2758.710277] create_object.isra.0+0x3a/0xa20 [ 2758.710945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.711690] kmem_cache_alloc+0x159/0x310 [ 2758.712309] xas_alloc+0x336/0x440 [ 2758.712841] xas_create+0x34a/0x10d0 [ 2758.712894] FAULT_INJECTION: forcing a failure. [ 2758.712894] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.713402] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.713420] xas_store+0x8c/0x1c40 [ 2758.716430] __xa_store+0x164/0x2d0 [ 2758.716991] ? xa_delete_node+0x280/0x280 [ 2758.717630] ? trace_hardirqs_on+0x5b/0x180 [ 2758.718270] xa_store+0x31/0x50 [ 2758.718786] __io_uring_add_tctx_node+0x1cf/0x520 [ 2758.719494] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2758.720264] ? alloc_fd+0x2e7/0x670 [ 2758.720820] io_uring_setup+0x1fbb/0x2980 [ 2758.721433] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2758.722165] ? wait_for_completion_io+0x270/0x270 [ 2758.722918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.723693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.724436] do_syscall_64+0x33/0x40 [ 2758.724980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.725703] RIP: 0033:0x7f910a3bdb19 [ 2758.726253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.729060] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2758.730239] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2758.731311] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2758.732396] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2758.733483] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2758.734590] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2758.735685] CPU: 1 PID: 22199 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2758.736748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.737890] Call Trace: [ 2758.738232] dump_stack+0x107/0x167 [ 2758.738747] should_fail.cold+0x5/0xa [ 2758.739260] ? create_object.isra.0+0x3a/0xa20 [ 2758.739878] should_failslab+0x5/0x20 [ 2758.740402] kmem_cache_alloc+0x5b/0x310 [ 2758.740986] create_object.isra.0+0x3a/0xa20 [ 2758.741590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.742253] kmem_cache_alloc_bulk+0x168/0x320 [ 2758.742893] io_submit_sqes+0x6fe6/0x8610 [ 2758.743491] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2758.744188] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2758.744840] ? find_held_lock+0x2c/0x110 [ 2758.745375] ? io_submit_sqes+0x8610/0x8610 11:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x98030000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2758.745987] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2758.746967] ? wait_for_completion_io+0x270/0x270 [ 2758.747614] ? rcu_read_lock_any_held+0x75/0xa0 [ 2758.748295] ? vfs_write+0x354/0xb10 [ 2758.748835] ? fput_many+0x2f/0x1a0 [ 2758.749334] ? ksys_write+0x1a9/0x260 [ 2758.749885] ? __ia32_sys_read+0xb0/0xb0 [ 2758.750489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.751168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.751883] do_syscall_64+0x33/0x40 [ 2758.752423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.753158] RIP: 0033:0x7f679f3dcb19 [ 2758.753694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.756369] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2758.757453] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2758.758439] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2758.759395] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.760355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2758.761306] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 11:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000003f000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2758.766633] FAULT_INJECTION: forcing a failure. [ 2758.766633] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.768295] CPU: 1 PID: 22195 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2758.769347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.770526] Call Trace: [ 2758.770879] dump_stack+0x107/0x167 [ 2758.771364] should_fail.cold+0x5/0xa [ 2758.771904] ? create_object.isra.0+0x3a/0xa20 [ 2758.772539] should_failslab+0x5/0x20 [ 2758.773062] kmem_cache_alloc+0x5b/0x310 [ 2758.773625] ? mark_held_locks+0x9e/0xe0 [ 2758.774191] create_object.isra.0+0x3a/0xa20 [ 2758.774915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.775633] kmem_cache_alloc+0x159/0x310 [ 2758.776208] xas_alloc+0x336/0x440 [ 2758.776697] xas_create+0x34a/0x10d0 [ 2758.777198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.777899] xas_store+0x8c/0x1c40 [ 2758.779324] __xa_store+0x164/0x2d0 [ 2758.779874] ? xa_delete_node+0x280/0x280 [ 2758.780532] ? trace_hardirqs_on+0x5b/0x180 [ 2758.781138] xa_store+0x31/0x50 [ 2758.781594] __io_uring_add_tctx_node+0x1cf/0x520 [ 2758.782355] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2758.783121] ? alloc_fd+0x2e7/0x670 [ 2758.783754] io_uring_setup+0x1fbb/0x2980 [ 2758.784401] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2758.785097] ? wait_for_completion_io+0x270/0x270 [ 2758.785760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.786562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.787245] do_syscall_64+0x33/0x40 [ 2758.787767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.788501] RIP: 0033:0x7fb073b23b19 [ 2758.789058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.791699] RSP: 002b:00007fb071099108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2758.792756] RAX: ffffffffffffffda RBX: 00007fb073c36f60 RCX: 00007fb073b23b19 [ 2758.793780] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 000000000000621c [ 2758.794852] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2758.795846] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2758.796933] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:05:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 53) 11:05:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2758.915080] FAULT_INJECTION: forcing a failure. [ 2758.915080] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.916473] CPU: 1 PID: 22216 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2758.917283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.918310] Call Trace: [ 2758.918678] dump_stack+0x107/0x167 [ 2758.919151] should_fail.cold+0x5/0xa [ 2758.919727] ? create_object.isra.0+0x3a/0xa20 [ 2758.920429] should_failslab+0x5/0x20 [ 2758.920960] kmem_cache_alloc+0x5b/0x310 [ 2758.921486] ? mark_held_locks+0x9e/0xe0 [ 2758.922013] create_object.isra.0+0x3a/0xa20 [ 2758.922570] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.923203] kmem_cache_alloc+0x159/0x310 [ 2758.923729] xas_alloc+0x336/0x440 [ 2758.924295] xas_create+0x34a/0x10d0 [ 2758.924808] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.925472] xas_store+0x8c/0x1c40 [ 2758.925938] __xa_store+0x164/0x2d0 [ 2758.926411] ? xa_delete_node+0x280/0x280 [ 2758.926942] ? trace_hardirqs_on+0x5b/0x180 [ 2758.927491] xa_store+0x31/0x50 [ 2758.928001] __io_uring_add_tctx_node+0x1cf/0x520 [ 2758.928671] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2758.929325] ? alloc_fd+0x2e7/0x670 [ 2758.929781] io_uring_setup+0x1fbb/0x2980 [ 2758.930290] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2758.930939] ? wait_for_completion_io+0x270/0x270 [ 2758.931564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.932285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.932928] do_syscall_64+0x33/0x40 [ 2758.933438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.934106] RIP: 0033:0x7f910a3bdb19 [ 2758.934673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.937055] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2758.938083] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2758.939005] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2758.939944] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2758.940871] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2758.941770] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:05:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xbf030000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:05:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 11:05:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000280)=""/192, 0xfffffffffffffde3}], 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6, 0x6, 0xffffffffffffffff, 0x7ae4, 0xfff, 0x5}) 11:05:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 2758.974313] FAULT_INJECTION: forcing a failure. [ 2758.974313] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.976181] CPU: 0 PID: 22190 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2758.978780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.981820] Call Trace: [ 2758.982861] dump_stack+0x107/0x167 [ 2758.984235] should_fail.cold+0x5/0xa [ 2758.985636] ? create_object.isra.0+0x3a/0xa20 [ 2758.987236] should_failslab+0x5/0x20 [ 2758.988594] kmem_cache_alloc+0x5b/0x310 [ 2758.990080] ? mark_held_locks+0x9e/0xe0 [ 2758.991613] create_object.isra.0+0x3a/0xa20 [ 2758.992279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.992648] FAULT_INJECTION: forcing a failure. [ 2758.992648] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.993110] kmem_cache_alloc+0x159/0x310 [ 2758.993136] xas_alloc+0x336/0x440 [ 2758.995947] xas_create+0x34a/0x10d0 [ 2758.996550] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2758.997375] xas_store+0x8c/0x1c40 [ 2758.997896] __xa_store+0x164/0x2d0 [ 2758.998504] ? xa_delete_node+0x280/0x280 [ 2758.999137] ? trace_hardirqs_on+0x5b/0x180 [ 2758.999749] xa_store+0x31/0x50 [ 2759.000227] __io_uring_add_tctx_node+0x1cf/0x520 [ 2759.000954] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2759.001728] ? alloc_fd+0x2e7/0x670 [ 2759.002285] io_uring_setup+0x1fbb/0x2980 [ 2759.002927] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2759.003636] ? wait_for_completion_io+0x270/0x270 [ 2759.004346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.005108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.005862] do_syscall_64+0x33/0x40 [ 2759.006457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.007201] RIP: 0033:0x7fb3e1098b19 [ 2759.007731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.010471] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2759.011693] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2759.012701] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2759.013739] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2759.014794] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2759.015874] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2759.017026] CPU: 1 PID: 22222 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2759.018037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.019439] Call Trace: [ 2759.019823] dump_stack+0x107/0x167 [ 2759.020428] should_fail.cold+0x5/0xa [ 2759.020955] ? create_object.isra.0+0x3a/0xa20 [ 2759.021594] should_failslab+0x5/0x20 [ 2759.022204] kmem_cache_alloc+0x5b/0x310 [ 2759.022825] ? mark_held_locks+0x9e/0xe0 [ 2759.023435] create_object.isra.0+0x3a/0xa20 [ 2759.024007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2759.024757] kmem_cache_alloc_bulk+0x168/0x320 [ 2759.025380] io_submit_sqes+0x6fe6/0x8610 [ 2759.025924] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2759.026637] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2759.027466] ? find_held_lock+0x2c/0x110 [ 2759.028036] ? io_submit_sqes+0x8610/0x8610 [ 2759.028659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2759.029365] ? wait_for_completion_io+0x270/0x270 [ 2759.030137] ? rcu_read_lock_any_held+0x75/0xa0 [ 2759.031055] ? vfs_write+0x354/0xb10 [ 2759.031660] ? fput_many+0x2f/0x1a0 [ 2759.032173] ? ksys_write+0x1a9/0x260 [ 2759.032681] ? __ia32_sys_read+0xb0/0xb0 [ 2759.033233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.033921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.034727] do_syscall_64+0x33/0x40 [ 2759.035259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.035962] RIP: 0033:0x7f679f3dcb19 [ 2759.036539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.039107] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2759.040321] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2759.041376] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2759.042355] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2759.043328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2759.044299] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 11:05:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 61) 11:05:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xff0fd04f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:05:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000002000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2759.094778] FAULT_INJECTION: forcing a failure. [ 2759.094778] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.096810] CPU: 1 PID: 22230 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2759.097805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.098984] Call Trace: [ 2759.099361] dump_stack+0x107/0x167 [ 2759.099913] should_fail.cold+0x5/0xa [ 2759.100505] ? vm_area_dup+0x78/0x290 [ 2759.101048] should_failslab+0x5/0x20 [ 2759.101613] kmem_cache_alloc+0x5b/0x310 [ 2759.102181] vm_area_dup+0x78/0x290 [ 2759.102736] ? mark_lock+0xf5/0x2df0 [ 2759.103285] ? lock_chain_count+0x20/0x20 [ 2759.103864] ? mark_lock+0xf5/0x2df0 [ 2759.104392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2759.105125] ? lock_chain_count+0x20/0x20 [ 2759.105748] ? mark_lock+0xf5/0x2df0 [ 2759.106307] ? vm_area_alloc+0x110/0x110 [ 2759.106901] ? __lock_acquire+0x1657/0x5b00 [ 2759.107548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2759.108280] ? SOFTIRQ_verbose+0x10/0x10 [ 2759.108914] ? vmacache_find+0x55/0x2a0 [ 2759.109496] __split_vma+0xa8/0x4e0 [ 2759.110039] __do_munmap+0x365/0x1260 [ 2759.110597] ? arch_get_unmapped_area+0x450/0x450 [ 2759.111306] ? lock_release+0x680/0x680 [ 2759.111879] mmap_region+0x7c8/0x1500 [ 2759.112405] do_mmap+0xcdb/0x11e0 [ 2759.112952] vm_mmap_pgoff+0x198/0x1f0 [ 2759.113526] ? randomize_page+0xb0/0xb0 [ 2759.114080] ksys_mmap_pgoff+0x41c/0x560 [ 2759.114666] ? find_mergeable_anon_vma+0x250/0x250 [ 2759.115334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.116067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.116752] do_syscall_64+0x33/0x40 [ 2759.117238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.117898] RIP: 0033:0x7fb073b23b62 [ 2759.118400] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2759.120936] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2759.121995] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2759.123019] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2759.124167] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2759.125294] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2759.126288] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 11:05:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000e000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x21030000, 0x0, 0x0, 0x0) 11:05:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 54) 11:05:39 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 62) 11:05:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 11:05:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 11:05:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xff0fd94f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:05:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 11:05:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000083000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 52) [ 2775.859376] FAULT_INJECTION: forcing a failure. [ 2775.859376] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.860902] CPU: 1 PID: 22253 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2775.861787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.862931] Call Trace: [ 2775.863301] dump_stack+0x107/0x167 [ 2775.863781] should_fail.cold+0x5/0xa [ 2775.864366] ? create_object.isra.0+0x3a/0xa20 [ 2775.865098] should_failslab+0x5/0x20 [ 2775.865691] kmem_cache_alloc+0x5b/0x310 [ 2775.866270] create_object.isra.0+0x3a/0xa20 [ 2775.866915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.867595] kmem_cache_alloc+0x159/0x310 [ 2775.868154] vm_area_dup+0x78/0x290 [ 2775.868636] ? lock_release+0x680/0x680 [ 2775.869173] ? mark_lock+0xf5/0x2df0 [ 2775.869676] ? lock_chain_count+0x20/0x20 [ 2775.870235] ? mark_lock+0xf5/0x2df0 [ 2775.870767] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.871456] ? lock_chain_count+0x20/0x20 [ 2775.872048] ? mark_lock+0xf5/0x2df0 [ 2775.872549] ? vm_area_alloc+0x110/0x110 [ 2775.873086] ? __lock_acquire+0x1657/0x5b00 [ 2775.873719] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.874452] ? SOFTIRQ_verbose+0x10/0x10 [ 2775.875029] ? vmacache_find+0x55/0x2a0 [ 2775.875665] __split_vma+0xa8/0x4e0 [ 2775.876255] __do_munmap+0x365/0x1260 [ 2775.876784] ? arch_get_unmapped_area+0x450/0x450 [ 2775.877446] ? lock_release+0x680/0x680 [ 2775.878001] mmap_region+0x7c8/0x1500 [ 2775.878600] do_mmap+0xcdb/0x11e0 [ 2775.879139] vm_mmap_pgoff+0x198/0x1f0 [ 2775.879807] ? randomize_page+0xb0/0xb0 [ 2775.880086] FAULT_INJECTION: forcing a failure. [ 2775.880086] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.880479] ksys_mmap_pgoff+0x41c/0x560 [ 2775.883030] ? find_mergeable_anon_vma+0x250/0x250 [ 2775.883653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.884296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.884911] do_syscall_64+0x33/0x40 [ 2775.885401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.886080] RIP: 0033:0x7fb073b23b62 [ 2775.886646] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2775.889164] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2775.890206] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2775.891236] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2775.892201] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2775.893182] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2775.894185] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2775.895208] CPU: 0 PID: 22260 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2775.896307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.897517] Call Trace: [ 2775.897947] dump_stack+0x107/0x167 [ 2775.898491] should_fail.cold+0x5/0xa [ 2775.899091] ? create_object.isra.0+0x3a/0xa20 [ 2775.899769] should_failslab+0x5/0x20 [ 2775.900326] kmem_cache_alloc+0x5b/0x310 [ 2775.900899] ? mark_held_locks+0x9e/0xe0 [ 2775.901499] create_object.isra.0+0x3a/0xa20 [ 2775.902144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.902906] kmem_cache_alloc+0x159/0x310 [ 2775.903532] xas_alloc+0x336/0x440 [ 2775.904035] xas_create+0x34a/0x10d0 [ 2775.904587] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.905345] xas_store+0x8c/0x1c40 [ 2775.905888] __xa_store+0x164/0x2d0 [ 2775.906423] ? xa_delete_node+0x280/0x280 [ 2775.907046] ? trace_hardirqs_on+0x5b/0x180 [ 2775.907725] xa_store+0x31/0x50 [ 2775.908225] __io_uring_add_tctx_node+0x1cf/0x520 [ 2775.908888] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2775.909624] ? alloc_fd+0x2e7/0x670 [ 2775.910138] io_uring_setup+0x1fbb/0x2980 [ 2775.910814] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2775.911545] ? wait_for_completion_io+0x270/0x270 [ 2775.912261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.913006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.913738] do_syscall_64+0x33/0x40 [ 2775.914264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.915025] RIP: 0033:0x7fb3e1098b19 [ 2775.915574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.918212] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2775.919368] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2775.920387] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2775.921459] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2775.922479] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2775.923500] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:05:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006020000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2775.937355] FAULT_INJECTION: forcing a failure. [ 2775.937355] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.939760] CPU: 0 PID: 22254 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2775.940791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.941995] Call Trace: [ 2775.942381] dump_stack+0x107/0x167 [ 2775.942932] should_fail.cold+0x5/0xa 11:05:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xff0fe04f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2775.943506] ? create_object.isra.0+0x3a/0xa20 [ 2775.944467] should_failslab+0x5/0x20 [ 2775.945034] kmem_cache_alloc+0x5b/0x310 [ 2775.945646] ? mark_held_locks+0x9e/0xe0 [ 2775.946290] create_object.isra.0+0x3a/0xa20 [ 2775.946988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.947835] kmem_cache_alloc_bulk+0x168/0x320 [ 2775.948538] io_submit_sqes+0x6fe6/0x8610 [ 2775.949192] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2775.949991] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2775.950791] ? find_held_lock+0x2c/0x110 [ 2775.951402] ? io_submit_sqes+0x8610/0x8610 [ 2775.952067] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2775.952860] ? wait_for_completion_io+0x270/0x270 [ 2775.953605] ? rcu_read_lock_any_held+0x75/0xa0 [ 2775.954320] ? vfs_write+0x354/0xb10 [ 2775.954954] ? fput_many+0x2f/0x1a0 [ 2775.955545] ? ksys_write+0x1a9/0x260 [ 2775.956115] ? __ia32_sys_read+0xb0/0xb0 [ 2775.956746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.957646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.958454] do_syscall_64+0x33/0x40 [ 2775.959027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.959888] RIP: 0033:0x7f679f3dcb19 [ 2775.960486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.963432] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2775.964593] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2775.965747] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2775.966890] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.968022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2775.969120] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 [ 2775.977766] FAULT_INJECTION: forcing a failure. [ 2775.977766] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.979576] CPU: 1 PID: 22267 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2775.980588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.981733] Call Trace: [ 2775.982092] dump_stack+0x107/0x167 [ 2775.982595] should_fail.cold+0x5/0xa [ 2775.983100] ? create_object.isra.0+0x3a/0xa20 [ 2775.983735] should_failslab+0x5/0x20 [ 2775.984362] kmem_cache_alloc+0x5b/0x310 [ 2775.985062] ? mark_held_locks+0x9e/0xe0 [ 2775.985929] create_object.isra.0+0x3a/0xa20 [ 2775.986730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.987553] kmem_cache_alloc+0x159/0x310 [ 2775.988147] xas_alloc+0x336/0x440 [ 2775.988663] xas_create+0x34a/0x10d0 [ 2775.989194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2775.989870] xas_store+0x8c/0x1c40 [ 2775.990349] __xa_store+0x164/0x2d0 [ 2775.990850] ? xa_delete_node+0x280/0x280 [ 2775.991433] ? trace_hardirqs_on+0x5b/0x180 [ 2775.992134] xa_store+0x31/0x50 [ 2775.992646] __io_uring_add_tctx_node+0x1cf/0x520 [ 2775.993348] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2775.994041] ? alloc_fd+0x2e7/0x670 [ 2775.994596] io_uring_setup+0x1fbb/0x2980 [ 2775.995176] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2775.995891] ? wait_for_completion_io+0x270/0x270 [ 2775.996600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.997300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.998079] do_syscall_64+0x33/0x40 [ 2775.998633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.999395] RIP: 0033:0x7f910a3bdb19 [ 2775.999948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2776.002292] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2776.003369] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2776.004375] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2776.005390] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2776.006445] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2776.007490] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:05:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 11:05:56 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000080)="f99704b723658dfa37cd612824375363dbb9a8bb5c7b373a9da6e49526ce516841856cf53538711db0dadeea8752d03d11bc2a27815874c6a828925a80bd2326be6394071dcd076980caefc10ec6da83edf1d98988073fb0a1a2647348ce7021aefe4273aeaebabee78f4b0f8094d6f7d1beee761dbac931d44eb9339e44a91b138c546c723271ddd432bf9edec24a508a868721b04ef3902f", 0x99}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="0ecfd31cafbae7e8b3d587638283cb1acd98ff7a0b5f82fb98405b78f77b80f037898f408146c6421ad4925fa0838847706fc1d1421635e7b963d32d42f9b04cbbfde0921170c417ac1a4f3bb7e083ec8439eea7d5deb80c249637def735cf4957ab23748c151544bd54f54012be3a69e513feae8ccce97feb814daa93b0f4e0956df8c7cab00417bc279402eebb3a5ee34ad490e270000f1a30f4aa55ad77431681ea5a29e000d2d566758c88357b8416da266ec5f5a0056f22352d07cc3469fe3bc07712ab5052d6d039031015384e31a35685843681eee10912ff1118022a48b0d68f4d5956d0bef54382347341c793f230f0d7868d4e74", 0xf9}, {&(0x7f0000001240)="dd9971f8241470fa537c4cd0567b2b4198ab4ee2233ee61ee20344ae891e117443c608ad11bba39235635bc5608cc02e72abd40e", 0x34}], 0x4}}], 0x1, 0x20008018) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:05:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 11:05:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006030000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 63) 11:05:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xffff8000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2792.777657] FAULT_INJECTION: forcing a failure. [ 2792.777657] name failslab, interval 1, probability 0, space 0, times 0 11:05:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 55) 11:05:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 53) [ 2792.779731] CPU: 0 PID: 22287 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2792.781066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.782327] Call Trace: [ 2792.782840] dump_stack+0x107/0x167 [ 2792.783356] should_fail.cold+0x5/0xa [ 2792.783893] ? create_object.isra.0+0x3a/0xa20 [ 2792.784565] should_failslab+0x5/0x20 [ 2792.785117] kmem_cache_alloc+0x5b/0x310 [ 2792.785680] create_object.isra.0+0x3a/0xa20 [ 2792.786303] kmemleak_alloc_percpu+0xa0/0x100 [ 2792.786968] pcpu_alloc+0x4e2/0x1240 [ 2792.787483] __percpu_counter_init+0x10d/0x2d0 [ 2792.788222] io_uring_alloc_task_context+0xcc/0x6a0 [ 2792.789069] ? io_import_iovec+0x1120/0x1120 [ 2792.789775] ? find_held_lock+0x2c/0x110 [ 2792.790362] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2792.791123] __io_uring_add_tctx_node+0x2c6/0x520 [ 2792.791817] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2792.792734] __do_sys_io_uring_enter+0x146f/0x1890 [ 2792.793531] ? find_held_lock+0x2c/0x110 [ 2792.794185] ? io_submit_sqes+0x8610/0x8610 [ 2792.794928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2792.795658] ? wait_for_completion_io+0x270/0x270 [ 2792.796376] ? rcu_read_lock_any_held+0x75/0xa0 [ 2792.797319] ? vfs_write+0x354/0xb10 [ 2792.798097] ? fput_many+0x2f/0x1a0 [ 2792.798687] ? ksys_write+0x1a9/0x260 [ 2792.799434] ? __ia32_sys_read+0xb0/0xb0 [ 2792.800057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.800816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.801544] do_syscall_64+0x33/0x40 [ 2792.802138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.802933] RIP: 0033:0x7f679f3dcb19 [ 2792.803452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.806162] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2792.807304] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2792.808343] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2792.809391] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.810401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2792.811448] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 [ 2792.825557] FAULT_INJECTION: forcing a failure. [ 2792.825557] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.827306] CPU: 0 PID: 22278 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2792.828334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.828863] FAULT_INJECTION: forcing a failure. [ 2792.828863] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.829462] Call Trace: [ 2792.829491] dump_stack+0x107/0x167 [ 2792.832073] should_fail.cold+0x5/0xa [ 2792.832597] ? vm_area_dup+0x78/0x290 [ 2792.833175] should_failslab+0x5/0x20 [ 2792.833767] kmem_cache_alloc+0x5b/0x310 [ 2792.834374] vm_area_dup+0x78/0x290 [ 2792.834936] ? lock_release+0x680/0x680 [ 2792.835557] ? mark_lock+0xf5/0x2df0 [ 2792.836139] ? lock_chain_count+0x20/0x20 [ 2792.836776] ? mark_lock+0xf5/0x2df0 [ 2792.837353] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.838173] ? lock_chain_count+0x20/0x20 [ 2792.838904] ? mark_lock+0xf5/0x2df0 [ 2792.839497] ? vm_area_alloc+0x110/0x110 [ 2792.840166] ? __lock_acquire+0x1657/0x5b00 [ 2792.840846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.841591] ? SOFTIRQ_verbose+0x10/0x10 [ 2792.842208] ? vmacache_find+0x55/0x2a0 [ 2792.842817] __split_vma+0xa8/0x4e0 [ 2792.843372] __do_munmap+0x365/0x1260 [ 2792.843949] ? arch_get_unmapped_area+0x450/0x450 [ 2792.844678] ? lock_release+0x680/0x680 [ 2792.845264] mmap_region+0x7c8/0x1500 [ 2792.846003] do_mmap+0xcdb/0x11e0 [ 2792.846649] vm_mmap_pgoff+0x198/0x1f0 [ 2792.847283] ? randomize_page+0xb0/0xb0 [ 2792.847863] ksys_mmap_pgoff+0x41c/0x560 [ 2792.848491] ? find_mergeable_anon_vma+0x250/0x250 [ 2792.849207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.849996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.850726] do_syscall_64+0x33/0x40 [ 2792.851275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.852028] RIP: 0033:0x7fb073b23b62 [ 2792.852576] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2792.855657] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2792.856755] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2792.857767] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2792.858843] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2792.859913] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2792.861078] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2792.862200] CPU: 1 PID: 22292 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2792.863576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.864806] Call Trace: [ 2792.865198] dump_stack+0x107/0x167 [ 2792.865778] should_fail.cold+0x5/0xa [ 2792.866329] ? create_object.isra.0+0x3a/0xa20 [ 2792.866603] FAULT_INJECTION: forcing a failure. [ 2792.866603] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.866978] should_failslab+0x5/0x20 [ 2792.866993] kmem_cache_alloc+0x5b/0x310 [ 2792.867009] ? mark_held_locks+0x9e/0xe0 [ 2792.867029] create_object.isra.0+0x3a/0xa20 [ 2792.871052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.871797] kmem_cache_alloc+0x159/0x310 [ 2792.872372] xas_alloc+0x336/0x440 [ 2792.872878] xas_create+0x34a/0x10d0 [ 2792.873582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.874370] xas_store+0x8c/0x1c40 [ 2792.874952] __xa_store+0x164/0x2d0 [ 2792.875516] ? xa_delete_node+0x280/0x280 [ 2792.876107] ? trace_hardirqs_on+0x5b/0x180 [ 2792.876721] xa_store+0x31/0x50 [ 2792.877215] __io_uring_add_tctx_node+0x1cf/0x520 [ 2792.877921] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2792.878665] ? alloc_fd+0x2e7/0x670 [ 2792.879209] io_uring_setup+0x1fbb/0x2980 [ 2792.879802] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2792.880495] ? wait_for_completion_io+0x270/0x270 [ 2792.881137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.881819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.882529] do_syscall_64+0x33/0x40 [ 2792.883070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.883761] RIP: 0033:0x7fb3e1098b19 [ 2792.884267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.886667] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2792.887683] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2792.888613] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2792.889533] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2792.890440] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2792.891383] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2792.892377] CPU: 0 PID: 22293 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2792.893529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.894728] Call Trace: [ 2792.895168] dump_stack+0x107/0x167 [ 2792.895704] should_fail.cold+0x5/0xa [ 2792.896256] ? create_object.isra.0+0x3a/0xa20 [ 2792.896905] should_failslab+0x5/0x20 [ 2792.897455] kmem_cache_alloc+0x5b/0x310 [ 2792.898025] ? mark_held_locks+0x9e/0xe0 [ 2792.898603] create_object.isra.0+0x3a/0xa20 11:05:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006040000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xffffef4f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2792.899242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.900429] kmem_cache_alloc+0x159/0x310 [ 2792.901098] xas_alloc+0x336/0x440 [ 2792.901604] xas_create+0x34a/0x10d0 [ 2792.902124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2792.902877] xas_store+0x8c/0x1c40 [ 2792.903421] __xa_store+0x164/0x2d0 [ 2792.903968] ? xa_delete_node+0x280/0x280 [ 2792.904569] ? trace_hardirqs_on+0x5b/0x180 [ 2792.905175] xa_store+0x31/0x50 [ 2792.905640] __io_uring_add_tctx_node+0x1cf/0x520 [ 2792.906320] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2792.907078] ? alloc_fd+0x2e7/0x670 [ 2792.907605] io_uring_setup+0x1fbb/0x2980 [ 2792.908194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2792.908917] ? wait_for_completion_io+0x270/0x270 [ 2792.909650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.910403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.911196] do_syscall_64+0x33/0x40 [ 2792.911752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.912544] RIP: 0033:0x7f910a3bdb19 [ 2792.913137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.915940] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2792.917022] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2792.917998] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2792.919001] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2792.919968] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2792.920954] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:05:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 11:05:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x0, 0xfffc}) 11:05:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 11:05:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 64) 11:05:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 56) 11:05:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006050000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:05:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2793.094554] FAULT_INJECTION: forcing a failure. [ 2793.094554] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.096330] CPU: 1 PID: 22314 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2793.097354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2793.098485] Call Trace: [ 2793.098914] dump_stack+0x107/0x167 [ 2793.099493] should_fail.cold+0x5/0xa [ 2793.100074] ? create_object.isra.0+0x3a/0xa20 [ 2793.100741] should_failslab+0x5/0x20 [ 2793.101291] kmem_cache_alloc+0x5b/0x310 [ 2793.101855] create_object.isra.0+0x3a/0xa20 [ 2793.102444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2793.103177] kmem_cache_alloc+0x159/0x310 [ 2793.103741] anon_vma_clone+0xdc/0x590 [ 2793.104262] __split_vma+0x17c/0x4e0 [ 2793.104749] __do_munmap+0x365/0x1260 [ 2793.105296] ? arch_get_unmapped_area+0x450/0x450 [ 2793.106083] ? lock_release+0x680/0x680 [ 2793.106795] mmap_region+0x7c8/0x1500 [ 2793.107370] do_mmap+0xcdb/0x11e0 [ 2793.107914] vm_mmap_pgoff+0x198/0x1f0 [ 2793.108513] ? randomize_page+0xb0/0xb0 [ 2793.109090] ksys_mmap_pgoff+0x41c/0x560 [ 2793.109662] ? find_mergeable_anon_vma+0x250/0x250 [ 2793.110377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2793.111135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2793.111887] do_syscall_64+0x33/0x40 [ 2793.112450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.113223] RIP: 0033:0x7fb073b23b62 [ 2793.113716] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2793.116194] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2793.117282] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2793.118203] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2793.119214] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2793.120146] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2793.121071] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2793.124920] FAULT_INJECTION: forcing a failure. [ 2793.124920] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.126611] CPU: 1 PID: 22318 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2793.127562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2793.128670] Call Trace: [ 2793.129087] dump_stack+0x107/0x167 [ 2793.129655] should_fail.cold+0x5/0xa [ 2793.130199] ? create_object.isra.0+0x3a/0xa20 [ 2793.130856] should_failslab+0x5/0x20 [ 2793.131401] kmem_cache_alloc+0x5b/0x310 [ 2793.131936] ? mark_held_locks+0x9e/0xe0 [ 2793.132513] create_object.isra.0+0x3a/0xa20 [ 2793.133138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2793.133832] kmem_cache_alloc+0x159/0x310 [ 2793.134442] xas_alloc+0x336/0x440 [ 2793.135023] xas_create+0x34a/0x10d0 [ 2793.135580] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2793.136316] xas_store+0x8c/0x1c40 [ 2793.136860] __xa_store+0x164/0x2d0 [ 2793.137500] ? xa_delete_node+0x280/0x280 [ 2793.138467] ? trace_hardirqs_on+0x5b/0x180 [ 2793.139262] xa_store+0x31/0x50 [ 2793.139790] __io_uring_add_tctx_node+0x1cf/0x520 [ 2793.140478] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2793.141220] ? alloc_fd+0x2e7/0x670 [ 2793.141732] io_uring_setup+0x1fbb/0x2980 [ 2793.142448] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2793.143471] ? wait_for_completion_io+0x270/0x270 [ 2793.144129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2793.144816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2793.145582] do_syscall_64+0x33/0x40 [ 2793.146418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.147540] RIP: 0033:0x7f910a3bdb19 [ 2793.148412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2793.152004] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2793.153079] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2793.154431] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2793.155505] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2793.156486] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2793.157436] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2793.168861] FAULT_INJECTION: forcing a failure. [ 2793.168861] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.170590] CPU: 1 PID: 22313 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2793.171733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2793.172876] Call Trace: [ 2793.173276] dump_stack+0x107/0x167 [ 2793.173824] should_fail.cold+0x5/0xa [ 2793.174504] ? create_object.isra.0+0x3a/0xa20 [ 2793.175192] should_failslab+0x5/0x20 [ 2793.175758] kmem_cache_alloc+0x5b/0x310 [ 2793.176357] ? mark_held_locks+0x9e/0xe0 [ 2793.177057] create_object.isra.0+0x3a/0xa20 [ 2793.177794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2793.178630] kmem_cache_alloc_bulk+0x168/0x320 [ 2793.179398] io_submit_sqes+0x6fe6/0x8610 [ 2793.180044] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2793.180818] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2793.181660] ? find_held_lock+0x2c/0x110 [ 2793.182228] ? io_submit_sqes+0x8610/0x8610 [ 2793.182902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2793.183579] ? wait_for_completion_io+0x270/0x270 [ 2793.184283] ? rcu_read_lock_any_held+0x75/0xa0 [ 2793.184939] ? vfs_write+0x354/0xb10 [ 2793.185504] ? fput_many+0x2f/0x1a0 [ 2793.186134] ? ksys_write+0x1a9/0x260 [ 2793.186953] ? __ia32_sys_read+0xb0/0xb0 [ 2793.187591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2793.188359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2793.189083] do_syscall_64+0x33/0x40 [ 2793.189627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2793.190333] RIP: 0033:0x7f679f3dcb19 [ 2793.190887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2793.193626] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2793.194686] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2793.195705] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2793.196686] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.197691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2793.198676] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 11:06:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 57) 11:06:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 2809.858742] FAULT_INJECTION: forcing a failure. [ 2809.858742] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.860337] CPU: 0 PID: 22338 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2809.861273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.862410] Call Trace: 11:06:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) 11:06:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006060000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:06:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 11:06:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:06:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 54) 11:06:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 65) [ 2809.862777] dump_stack+0x107/0x167 [ 2809.863524] should_fail.cold+0x5/0xa [ 2809.864059] ? create_object.isra.0+0x3a/0xa20 [ 2809.864696] should_failslab+0x5/0x20 [ 2809.865261] kmem_cache_alloc+0x5b/0x310 [ 2809.865291] FAULT_INJECTION: forcing a failure. [ 2809.865291] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.865870] ? mark_held_locks+0x9e/0xe0 [ 2809.865891] create_object.isra.0+0x3a/0xa20 [ 2809.865903] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2809.865921] kmem_cache_alloc+0x159/0x310 [ 2809.869768] xas_alloc+0x336/0x440 [ 2809.870280] xas_create+0x34a/0x10d0 [ 2809.870829] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2809.871632] xas_store+0x8c/0x1c40 [ 2809.872203] __xa_store+0x164/0x2d0 [ 2809.872756] ? xa_delete_node+0x280/0x280 [ 2809.873425] ? trace_hardirqs_on+0x5b/0x180 [ 2809.874170] xa_store+0x31/0x50 [ 2809.874795] __io_uring_add_tctx_node+0x1cf/0x520 [ 2809.875560] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2809.876256] ? alloc_fd+0x2e7/0x670 [ 2809.876760] io_uring_setup+0x1fbb/0x2980 [ 2809.877356] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2809.878112] ? wait_for_completion_io+0x270/0x270 [ 2809.878849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.879568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.880252] do_syscall_64+0x33/0x40 [ 2809.880769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.881571] RIP: 0033:0x7fb3e1098b19 [ 2809.882190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2809.884911] RSP: 002b:00007fb3de5ed108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2809.886043] RAX: ffffffffffffffda RBX: 00007fb3e11ac020 RCX: 00007fb3e1098b19 [ 2809.887185] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2809.888212] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2809.889387] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2809.890520] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2809.891656] CPU: 1 PID: 22341 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2809.892664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.893691] Call Trace: [ 2809.894034] dump_stack+0x107/0x167 [ 2809.894496] should_fail.cold+0x5/0xa [ 2809.895117] ? xas_alloc+0x336/0x440 [ 2809.895613] should_failslab+0x5/0x20 [ 2809.896100] kmem_cache_alloc+0x5b/0x310 [ 2809.896613] xas_alloc+0x336/0x440 [ 2809.897066] xas_create+0x34a/0x10d0 [ 2809.897546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2809.898213] xas_store+0x8c/0x1c40 [ 2809.898686] __xa_store+0x164/0x2d0 [ 2809.899177] ? xa_delete_node+0x280/0x280 [ 2809.899715] ? trace_hardirqs_on+0x5b/0x180 [ 2809.900282] xa_store+0x31/0x50 [ 2809.900700] __io_uring_add_tctx_node+0x1cf/0x520 [ 2809.901321] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2809.901986] ? alloc_fd+0x2e7/0x670 [ 2809.902463] io_uring_setup+0x1fbb/0x2980 [ 2809.903030] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2809.903687] ? wait_for_completion_io+0x270/0x270 [ 2809.904325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.904971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.905658] do_syscall_64+0x33/0x40 [ 2809.906166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.906831] RIP: 0033:0x7f910a3bdb19 [ 2809.907360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2809.909644] FAULT_INJECTION: forcing a failure. [ 2809.909644] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.909675] RSP: 002b:00007f9107912108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2809.909690] RAX: ffffffffffffffda RBX: 00007f910a4d1020 RCX: 00007f910a3bdb19 [ 2809.909704] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2809.914525] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2809.915462] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2809.916362] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2809.917278] CPU: 0 PID: 22345 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2809.918262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.919432] Call Trace: [ 2809.919833] dump_stack+0x107/0x167 [ 2809.920356] should_fail.cold+0x5/0xa [ 2809.920890] ? vm_area_alloc+0x1c/0x110 [ 2809.921455] should_failslab+0x5/0x20 [ 2809.922003] kmem_cache_alloc+0x5b/0x310 [ 2809.922598] vm_area_alloc+0x1c/0x110 [ 2809.923267] mmap_region+0x97e/0x1500 [ 2809.924004] do_mmap+0xcdb/0x11e0 [ 2809.924571] vm_mmap_pgoff+0x198/0x1f0 [ 2809.925136] ? randomize_page+0xb0/0xb0 [ 2809.925719] ksys_mmap_pgoff+0x41c/0x560 [ 2809.926287] ? find_mergeable_anon_vma+0x250/0x250 [ 2809.926986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.927687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.928379] do_syscall_64+0x33/0x40 [ 2809.928876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.929555] RIP: 0033:0x7fb073b23b62 [ 2809.930105] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2809.932731] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2809.933793] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2809.934998] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2809.936088] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2809.937082] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2809.938089] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2809.951061] FAULT_INJECTION: forcing a failure. [ 2809.951061] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.952758] CPU: 0 PID: 22344 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2809.953761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.954935] Call Trace: [ 2809.955327] dump_stack+0x107/0x167 [ 2809.955859] should_fail.cold+0x5/0xa [ 2809.956415] ? create_object.isra.0+0x3a/0xa20 [ 2809.957103] should_failslab+0x5/0x20 [ 2809.957669] kmem_cache_alloc+0x5b/0x310 [ 2809.958250] ? mark_held_locks+0x9e/0xe0 [ 2809.958841] create_object.isra.0+0x3a/0xa20 [ 2809.959510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2809.960263] kmem_cache_alloc_bulk+0x168/0x320 [ 2809.960942] io_submit_sqes+0x6fe6/0x8610 [ 2809.961563] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2809.962280] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2809.963007] ? find_held_lock+0x2c/0x110 [ 2809.963588] ? io_submit_sqes+0x8610/0x8610 [ 2809.964188] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2809.964876] ? wait_for_completion_io+0x270/0x270 [ 2809.965574] ? rcu_read_lock_any_held+0x75/0xa0 [ 2809.966231] ? vfs_write+0x354/0xb10 [ 2809.966752] ? fput_many+0x2f/0x1a0 [ 2809.967309] ? ksys_write+0x1a9/0x260 [ 2809.967883] ? __ia32_sys_read+0xb0/0xb0 [ 2809.968478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.969221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.969930] do_syscall_64+0x33/0x40 [ 2809.970448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.971201] RIP: 0033:0x7f679f3dcb19 [ 2809.971746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2809.974384] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2809.975483] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2809.976503] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2809.977520] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.978495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2809.979524] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 11:06:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:06:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006070000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:06:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 55) 11:06:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:06:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (fail_nth: 58) 11:06:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 66) 11:06:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}, {r0}, {r0}, {r0}], 0x6, 0x47) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2) copy_file_range(r1, &(0x7f00000000c0)=0x9, r2, &(0x7f0000000100)=0x7fffffff, 0x1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000000)=0xc63, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) [ 2810.101160] FAULT_INJECTION: forcing a failure. [ 2810.101160] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.102809] CPU: 1 PID: 22359 Comm: syz-executor.6 Not tainted 5.10.234 #1 [ 2810.103737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.104817] Call Trace: [ 2810.105161] dump_stack+0x107/0x167 [ 2810.105623] should_fail.cold+0x5/0xa [ 2810.106101] ? xas_alloc+0x336/0x440 [ 2810.106573] should_failslab+0x5/0x20 [ 2810.107081] kmem_cache_alloc+0x5b/0x310 [ 2810.107609] xas_alloc+0x336/0x440 [ 2810.108077] xas_create+0x34a/0x10d0 [ 2810.108602] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2810.109327] xas_store+0x8c/0x1c40 [ 2810.109827] __xa_store+0x164/0x2d0 [ 2810.110324] ? xa_delete_node+0x280/0x280 [ 2810.110881] ? trace_hardirqs_on+0x5b/0x180 [ 2810.111487] xa_store+0x31/0x50 [ 2810.111948] __io_uring_add_tctx_node+0x1cf/0x520 [ 2810.112620] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2810.113334] ? alloc_fd+0x2e7/0x670 [ 2810.113857] io_uring_setup+0x1fbb/0x2980 [ 2810.114592] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2810.115410] ? wait_for_completion_io+0x270/0x270 [ 2810.116066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.116747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.117414] do_syscall_64+0x33/0x40 [ 2810.117902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.118556] RIP: 0033:0x7fb3e1098b19 [ 2810.119060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.121512] RSP: 002b:00007fb3de60e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2810.122527] RAX: ffffffffffffffda RBX: 00007fb3e11abf60 RCX: 00007fb3e1098b19 [ 2810.123465] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2810.124438] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2810.125407] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2810.126355] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 [ 2810.158977] FAULT_INJECTION: forcing a failure. [ 2810.158977] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.160982] CPU: 0 PID: 22363 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2810.161996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.163451] Call Trace: [ 2810.163863] dump_stack+0x107/0x167 [ 2810.164392] should_fail.cold+0x5/0xa [ 2810.165003] ? create_object.isra.0+0x3a/0xa20 [ 2810.165734] should_failslab+0x5/0x20 [ 2810.166290] kmem_cache_alloc+0x5b/0x310 [ 2810.166965] create_object.isra.0+0x3a/0xa20 [ 2810.167696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2810.168472] kmem_cache_alloc+0x159/0x310 [ 2810.169104] vm_area_alloc+0x1c/0x110 [ 2810.169695] mmap_region+0x97e/0x1500 [ 2810.170271] do_mmap+0xcdb/0x11e0 [ 2810.170813] vm_mmap_pgoff+0x198/0x1f0 [ 2810.171421] ? randomize_page+0xb0/0xb0 [ 2810.171936] FAULT_INJECTION: forcing a failure. [ 2810.171936] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.172088] ksys_mmap_pgoff+0x41c/0x560 [ 2810.174352] ? find_mergeable_anon_vma+0x250/0x250 [ 2810.175152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.176057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.176814] do_syscall_64+0x33/0x40 [ 2810.177329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.178065] RIP: 0033:0x7fb073b23b62 [ 2810.178613] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2810.181449] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2810.182632] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2810.183744] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2810.184811] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2810.185882] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2810.186956] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2810.188040] CPU: 1 PID: 22367 Comm: syz-executor.5 Not tainted 5.10.234 #1 [ 2810.189066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.190235] Call Trace: [ 2810.190591] dump_stack+0x107/0x167 [ 2810.191092] should_fail.cold+0x5/0xa [ 2810.191599] ? create_object.isra.0+0x3a/0xa20 [ 2810.192278] should_failslab+0x5/0x20 [ 2810.192798] kmem_cache_alloc+0x5b/0x310 [ 2810.193353] ? mark_held_locks+0x9e/0xe0 [ 2810.193901] create_object.isra.0+0x3a/0xa20 [ 2810.194550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2810.195268] kmem_cache_alloc+0x159/0x310 [ 2810.195832] xas_alloc+0x336/0x440 [ 2810.196315] xas_create+0x34a/0x10d0 [ 2810.196869] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2810.197643] xas_store+0x8c/0x1c40 [ 2810.198142] __xa_store+0x164/0x2d0 [ 2810.198641] ? xa_delete_node+0x280/0x280 [ 2810.199221] ? trace_hardirqs_on+0x5b/0x180 [ 2810.199837] xa_store+0x31/0x50 [ 2810.200304] __io_uring_add_tctx_node+0x1cf/0x520 [ 2810.200959] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2810.201659] ? alloc_fd+0x2e7/0x670 [ 2810.202155] io_uring_setup+0x1fbb/0x2980 [ 2810.202812] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2810.203480] ? wait_for_completion_io+0x270/0x270 [ 2810.204140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.204828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.205512] do_syscall_64+0x33/0x40 [ 2810.206005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.206713] RIP: 0033:0x7f910a3bdb19 [ 2810.207223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.209723] RSP: 002b:00007f9107933108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2810.210752] RAX: ffffffffffffffda RBX: 00007f910a4d0f60 RCX: 00007f910a3bdb19 [ 2810.211732] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000002203 [ 2810.212669] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2810.213681] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000140 [ 2810.214612] R13: 0000000020ffc000 R14: 0000000020000000 R15: 0000000020ffc000 11:06:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006080000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) 11:06:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 11:06:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 11:06:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) [ 2810.281098] FAULT_INJECTION: forcing a failure. [ 2810.281098] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.282775] CPU: 1 PID: 22376 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 2810.283688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.284756] Call Trace: [ 2810.285105] dump_stack+0x107/0x167 [ 2810.285571] should_fail.cold+0x5/0xa [ 2810.286084] ? create_object.isra.0+0x3a/0xa20 [ 2810.286659] should_failslab+0x5/0x20 [ 2810.287155] kmem_cache_alloc+0x5b/0x310 [ 2810.287665] ? mark_held_locks+0x9e/0xe0 [ 2810.288185] create_object.isra.0+0x3a/0xa20 [ 2810.288743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2810.289481] kmem_cache_alloc_bulk+0x168/0x320 [ 2810.290153] io_submit_sqes+0x6fe6/0x8610 [ 2810.290756] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2810.291407] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2810.292019] ? find_held_lock+0x2c/0x110 [ 2810.292541] ? io_submit_sqes+0x8610/0x8610 [ 2810.293105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2810.293716] ? wait_for_completion_io+0x270/0x270 [ 2810.294332] ? rcu_read_lock_any_held+0x75/0xa0 [ 2810.294949] ? vfs_write+0x354/0xb10 [ 2810.295412] ? fput_many+0x2f/0x1a0 [ 2810.295872] ? ksys_write+0x1a9/0x260 [ 2810.296355] ? __ia32_sys_read+0xb0/0xb0 [ 2810.296887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.297555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.298218] do_syscall_64+0x33/0x40 [ 2810.298706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.299390] RIP: 0033:0x7f679f3dcb19 [ 2810.299870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.302178] RSP: 002b:00007f679c952188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2810.303190] RAX: ffffffffffffffda RBX: 00007f679f4eff60 RCX: 00007f679f3dcb19 [ 2810.304113] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2810.305008] RBP: 00007f679c9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2810.305894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2810.306845] R13: 00007fff5925ceaf R14: 00007f679c952300 R15: 0000000000022000 11:06:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x621c, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 67) 11:06:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006180000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000310001000000000000000000cc12553eb0a0aa", 0x31, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f00", 0x10, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000012c00)) [ 2810.369243] FAULT_INJECTION: forcing a failure. [ 2810.369243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2810.371106] CPU: 0 PID: 22384 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2810.372073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.373269] Call Trace: [ 2810.373638] dump_stack+0x107/0x167 [ 2810.374152] should_fail.cold+0x5/0xa [ 2810.374728] __alloc_pages_nodemask+0x182/0x600 [ 2810.375505] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2810.376371] ? walk_mem_res+0x170/0x170 [ 2810.376970] alloc_pages_current+0x187/0x280 [ 2810.377673] pte_alloc_one+0x16/0x1a0 [ 2810.378226] __pte_alloc+0x1d/0x330 [ 2810.378804] remap_pfn_range_internal+0x9a3/0xf60 [ 2810.379545] ? lookup_memtype+0x5b/0x200 [ 2810.380134] ? apply_to_existing_page_range+0x40/0x40 [ 2810.380877] remap_pfn_range+0xcd/0x160 [ 2810.381417] ? remap_pfn_range_notrack+0x70/0x70 [ 2810.382116] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2810.382915] io_uring_mmap+0x398/0x530 [ 2810.383472] mmap_file+0x5e/0xe0 [ 2810.383941] mmap_region+0xc49/0x1500 [ 2810.384490] do_mmap+0xcdb/0x11e0 [ 2810.384981] vm_mmap_pgoff+0x198/0x1f0 [ 2810.385549] ? randomize_page+0xb0/0xb0 [ 2810.386130] ksys_mmap_pgoff+0x41c/0x560 [ 2810.386717] ? find_mergeable_anon_vma+0x250/0x250 [ 2810.387444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.388201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.388952] do_syscall_64+0x33/0x40 [ 2810.389463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.390195] RIP: 0033:0x7fb073b23b62 [ 2810.390724] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2810.393294] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2810.394389] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2810.395450] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2810.396542] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2810.397577] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2810.398603] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2810.435012] ------------[ cut here ]------------ [ 2810.435877] WARNING: CPU: 0 PID: 22384 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2810.437329] Modules linked in: [ 2810.437780] CPU: 0 PID: 22384 Comm: syz-executor.7 Not tainted 5.10.234 #1 [ 2810.438708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.439952] RIP: 0010:get_pat_info+0x216/0x270 [ 2810.440848] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 91 81 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 7a 81 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 75 79 5a 00 e9 [ 2810.443612] RSP: 0018:ffff88804b9d7898 EFLAGS: 00010212 [ 2810.444711] RAX: 000000000001373f RBX: ffff888049196600 RCX: ffffc9000d662000 [ 2810.449334] RDX: 0000000000040000 RSI: ffffffff81123696 RDI: 0000000000000007 [ 2810.450429] RBP: ffff88804b9d7950 R08: 0000000000000000 R09: ffff88804b9d7820 [ 2810.451579] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2810.452631] R13: 1ffff1100973af13 R14: 0000000000000000 R15: ffff888049196650 [ 2810.453715] FS: 00007fb071099700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2810.455031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2810.455934] CR2: 000055555deb9c58 CR3: 000000004ba3c000 CR4: 0000000000350ef0 [ 2810.457008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2810.458101] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000dd060a [ 2810.459197] Call Trace: [ 2810.459628] ? __warn+0xe2/0x1f0 [ 2810.460149] ? get_pat_info+0x216/0x270 [ 2810.460782] ? report_bug+0x1c1/0x210 [ 2810.461306] ? handle_bug+0x41/0x90 [ 2810.461862] ? exc_invalid_op+0x14/0x50 [ 2810.462402] ? asm_exc_invalid_op+0x12/0x20 [ 2810.463084] ? get_pat_info+0x216/0x270 [ 2810.463715] ? get_pat_info+0x216/0x270 [ 2810.464304] ? get_pat_info+0x216/0x270 [ 2810.464881] ? pgprot_writethrough+0xc0/0xc0 [ 2810.465540] ? finish_task_switch+0x126/0x5d0 [ 2810.466181] untrack_pfn+0xdc/0x240 [ 2810.466806] ? track_pfn_insert+0x150/0x150 [ 2810.467488] ? lock_downgrade+0x6d0/0x6d0 [ 2810.468144] ? uprobe_munmap+0x1c/0x560 [ 2810.468802] unmap_single_vma+0x1bc/0x300 [ 2810.469398] zap_page_range_single+0x2ce/0x450 [ 2810.470080] ? unmap_single_vma+0x300/0x300 [ 2810.470719] ? remap_pfn_range_internal+0xc56/0xf60 [ 2810.471463] ? lookup_memtype+0x5b/0x200 [ 2810.472122] ? apply_to_existing_page_range+0x40/0x40 [ 2810.473002] remap_pfn_range+0x139/0x160 [ 2810.473617] ? remap_pfn_range_notrack+0x70/0x70 [ 2810.474348] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2810.475199] io_uring_mmap+0x398/0x530 [ 2810.475805] mmap_file+0x5e/0xe0 [ 2810.476292] mmap_region+0xc49/0x1500 [ 2810.476898] do_mmap+0xcdb/0x11e0 [ 2810.477414] vm_mmap_pgoff+0x198/0x1f0 [ 2810.477994] ? randomize_page+0xb0/0xb0 [ 2810.478565] ksys_mmap_pgoff+0x41c/0x560 [ 2810.479226] ? find_mergeable_anon_vma+0x250/0x250 [ 2810.479977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.480737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.481448] do_syscall_64+0x33/0x40 [ 2810.482010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.482810] RIP: 0033:0x7fb073b23b62 [ 2810.483383] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2810.486156] RSP: 002b:00007fb0710990f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2810.487363] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb073b23b62 [ 2810.488449] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2810.489515] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2810.490563] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 2810.491637] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffb000 [ 2810.492760] irq event stamp: 1281 [ 2810.493259] hardirqs last enabled at (1289): [] console_unlock+0x92d/0xb40 [ 2810.494518] hardirqs last disabled at (1298): [] console_unlock+0x839/0xb40 [ 2810.495796] softirqs last enabled at (678): [] asm_call_irq_on_stack+0x12/0x20 [ 2810.497103] softirqs last disabled at (627): [] asm_call_irq_on_stack+0x12/0x20 [ 2810.498438] ---[ end trace 49e78e0f6eedbe07 ]--- VM DIAGNOSIS: 11:06:14 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822dde81 RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff88804b9d72a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000005d R13=000000000000005d R14=ffffffff879f3100 R15=dffffc0000000000 RIP=ffffffff822dded8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb071099700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555deb9c58 CR3=000000004ba3c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007fb073c0a7c800007fb073c0a7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff85d10882 RDX=ffff88800c9df0d8 RSI=dffffc0000000000 RDI=ffffffff85d10884 RBP=ffff88800c9df0cd RSP=ffff88800c9defc0 R8 =0000000000000007 R9 =ffff88800c9dfcc0 R10=0000000000032042 R11=1ffff1100193be00 R12=ffff88800c9dfcc0 R13=ffff88800c9df098 R14=1ffff1100193be00 R15=ffffffff85d10886 RIP=ffffffff811084e6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fea94ad69f0 CR3=0000000009d32000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=d07f944b95f75089a4486fb9a24bea93 XMM02=6b1e99b806172e3b00000000000aea08 XMM03=ac8bc31478ec851100000000000aef80 XMM04=4795ee04f929663e00000000003a0278 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=2af683e9c889104d00000000000ae968 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000