8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) [ 619.647823] perf: interrupt took too long (4112 > 4038), lowering kernel.perf_event_max_sample_rate to 48000 [ 619.650304] perf: interrupt took too long (5187 > 5140), lowering kernel.perf_event_max_sample_rate to 38000 [ 619.653532] perf: interrupt took too long (6512 > 6483), lowering kernel.perf_event_max_sample_rate to 30000 [ 619.656790] perf: interrupt took too long (8171 > 8140), lowering kernel.perf_event_max_sample_rate to 24000 [ 619.719140] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 619.729961] perf: interrupt took too long (10218 > 10213), lowering kernel.perf_event_max_sample_rate to 19000 22:56:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 619.757801] perf: interrupt took too long (12784 > 12772), lowering kernel.perf_event_max_sample_rate to 15000 [ 619.783370] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 619.856595] perf: interrupt took too long (16033 > 15980), lowering kernel.perf_event_max_sample_rate to 12000 22:56:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) [ 632.964108] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:56:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:56:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 22:56:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:56:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 633.324499] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 633.326699] FAULT_INJECTION: forcing a failure. [ 633.326699] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 633.330217] CPU: 0 PID: 6291 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 633.331975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.334027] Call Trace: [ 633.334682] dump_stack+0x107/0x167 [ 633.335596] should_fail.cold+0x5/0xa [ 633.336556] _copy_from_user+0x2e/0x1b0 [ 633.337549] packet_setsockopt+0x1d21/0x3b30 [ 633.338654] ? sock_has_perm+0xf0/0x280 [ 633.339644] ? packet_sendmsg_spkt+0x1440/0x1440 [ 633.340817] ? find_held_lock+0x2c/0x110 [ 633.341833] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 633.343203] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 633.344508] ? __fget_files+0x2f8/0x520 [ 633.345507] ? selinux_socket_setsockopt+0x6a/0x80 [ 633.346742] __sys_setsockopt+0x180/0x2b0 [ 633.347769] ? packet_sendmsg_spkt+0x1440/0x1440 [ 633.348941] ? __ia32_sys_recv+0x100/0x100 [ 633.349989] ? fput_many+0x2f/0x1a0 [ 633.350896] ? ksys_write+0x1a9/0x260 [ 633.351838] ? __ia32_sys_read+0xb0/0xb0 [ 633.352855] __x64_sys_setsockopt+0xba/0x160 [ 633.353945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 633.355211] do_syscall_64+0x33/0x40 [ 633.356124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 633.357384] RIP: 0033:0x7fa745bf7b19 [ 633.358309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.362813] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 633.364689] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 633.366453] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 633.368211] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 633.369972] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 633.371727] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 22:56:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 633.511139] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 633.548917] FAULT_INJECTION: forcing a failure. [ 633.548917] name failslab, interval 1, probability 0, space 0, times 1 [ 633.550351] CPU: 1 PID: 6299 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 633.551165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.552140] Call Trace: [ 633.552449] dump_stack+0x107/0x167 [ 633.552879] should_fail.cold+0x5/0xa [ 633.553329] ? packet_setsockopt+0x252e/0x3b30 [ 633.553873] should_failslab+0x5/0x20 [ 633.554323] kmem_cache_alloc_trace+0x55/0x320 [ 633.554853] packet_setsockopt+0x252e/0x3b30 [ 633.555369] ? sock_has_perm+0xf0/0x280 [ 633.555829] ? packet_sendmsg_spkt+0x1440/0x1440 [ 633.556380] ? find_held_lock+0x2c/0x110 [ 633.556857] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 633.557512] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 633.558137] ? __fget_files+0x2f8/0x520 [ 633.558605] ? selinux_socket_setsockopt+0x6a/0x80 [ 633.559185] __sys_setsockopt+0x180/0x2b0 [ 633.559669] ? packet_sendmsg_spkt+0x1440/0x1440 [ 633.560222] ? __ia32_sys_recv+0x100/0x100 [ 633.560720] ? fput_many+0x2f/0x1a0 [ 633.561149] ? ksys_write+0x1a9/0x260 [ 633.561598] ? __ia32_sys_read+0xb0/0xb0 [ 633.562087] __x64_sys_setsockopt+0xba/0x160 [ 633.562605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 633.563208] do_syscall_64+0x33/0x40 [ 633.563640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 633.564236] RIP: 0033:0x7fa745bf7b19 [ 633.564669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.566825] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 633.567717] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 633.568547] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 633.569384] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 633.570226] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 633.571064] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 646.941319] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:56:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:56:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 22:56:36 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:56:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) [ 646.968137] FAULT_INJECTION: forcing a failure. [ 646.968137] name failslab, interval 1, probability 0, space 0, times 0 [ 646.970358] CPU: 0 PID: 6316 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 646.971607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.973134] Call Trace: [ 646.973629] dump_stack+0x107/0x167 [ 646.974314] should_fail.cold+0x5/0xa [ 646.975017] ? create_object.isra.0+0x3a/0xa20 [ 646.975857] should_failslab+0x5/0x20 [ 646.976554] kmem_cache_alloc+0x5b/0x310 [ 646.977321] create_object.isra.0+0x3a/0xa20 [ 646.978134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 646.979098] kmem_cache_alloc_trace+0x151/0x320 [ 646.980084] packet_setsockopt+0x252e/0x3b30 [ 646.980894] ? sock_has_perm+0xf0/0x280 [ 646.981623] ? packet_sendmsg_spkt+0x1440/0x1440 [ 646.982854] ? find_held_lock+0x2c/0x110 [ 646.983917] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 646.985334] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 646.986704] ? __fget_files+0x2f8/0x520 [ 646.987596] ? selinux_socket_setsockopt+0x6a/0x80 [ 646.988642] __sys_setsockopt+0x180/0x2b0 [ 646.989522] ? packet_sendmsg_spkt+0x1440/0x1440 [ 646.990524] ? __ia32_sys_recv+0x100/0x100 [ 646.991399] ? fput_many+0x2f/0x1a0 [ 646.992181] ? ksys_write+0x1a9/0x260 [ 646.993001] ? __ia32_sys_read+0xb0/0xb0 [ 646.993897] __x64_sys_setsockopt+0xba/0x160 [ 646.994846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 646.995917] do_syscall_64+0x33/0x40 [ 646.996700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 646.997769] RIP: 0033:0x7fa745bf7b19 [ 646.998563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.002416] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 647.004034] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 647.005529] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 647.007026] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 22:56:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 647.008510] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 647.010161] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 647.012172] device lo entered promiscuous mode [ 647.161623] device lo left promiscuous mode 22:56:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 647.285226] device lo entered promiscuous mode [ 647.285904] FAULT_INJECTION: forcing a failure. [ 647.285904] name failslab, interval 1, probability 0, space 0, times 0 [ 647.287262] CPU: 1 PID: 6327 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 647.288078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.289070] Call Trace: [ 647.289391] dump_stack+0x107/0x167 [ 647.289828] should_fail.cold+0x5/0xa [ 647.290293] ? __alloc_skb+0x6d/0x5b0 [ 647.290745] should_failslab+0x5/0x20 [ 647.291200] kmem_cache_alloc_node+0x55/0x330 [ 647.291735] __alloc_skb+0x6d/0x5b0 [ 647.292168] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 647.292715] rtmsg_ifinfo+0x83/0x120 [ 647.293164] __dev_notify_flags+0x22a/0x2c0 [ 647.293675] ? dev_change_name+0x6b0/0x6b0 [ 647.294190] ? record_print_text.cold+0x16/0x16 [ 647.294745] ? kmem_cache_alloc_trace+0x151/0x320 [ 647.295327] __dev_set_promiscuity+0x19b/0x220 [ 647.295883] dev_set_promiscuity+0x4f/0x160 [ 647.296486] packet_dev_mc+0x73/0x2a0 [ 647.297040] packet_setsockopt+0x28c8/0x3b30 [ 647.297584] ? sock_has_perm+0xf0/0x280 [ 647.298076] ? packet_sendmsg_spkt+0x1440/0x1440 [ 647.298638] ? find_held_lock+0x2c/0x110 [ 647.299116] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 647.299781] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 647.300414] ? __fget_files+0x2f8/0x520 [ 647.301016] ? selinux_socket_setsockopt+0x6a/0x80 [ 647.301632] __sys_setsockopt+0x180/0x2b0 [ 647.302164] ? packet_sendmsg_spkt+0x1440/0x1440 [ 647.302842] ? __ia32_sys_recv+0x100/0x100 [ 647.303397] ? fput_many+0x2f/0x1a0 [ 647.303834] ? ksys_write+0x1a9/0x260 [ 647.304327] ? __ia32_sys_read+0xb0/0xb0 [ 647.304943] __x64_sys_setsockopt+0xba/0x160 [ 647.305505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 647.306252] do_syscall_64+0x33/0x40 [ 647.306695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 647.307304] RIP: 0033:0x7fa745bf7b19 [ 647.307753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.310098] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 647.311004] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 647.311859] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 647.312708] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 647.313556] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 647.314424] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 22:56:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 647.414224] device lo left promiscuous mode [ 647.561886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:56:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 647.593173] device lo entered promiscuous mode [ 647.593885] FAULT_INJECTION: forcing a failure. [ 647.593885] name failslab, interval 1, probability 0, space 0, times 0 [ 647.595191] CPU: 1 PID: 6335 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 647.596008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.597090] Call Trace: [ 647.597496] dump_stack+0x107/0x167 [ 647.597948] should_fail.cold+0x5/0xa [ 647.598406] ? create_object.isra.0+0x3a/0xa20 [ 647.598957] should_failslab+0x5/0x20 [ 647.599521] kmem_cache_alloc+0x5b/0x310 [ 647.600089] create_object.isra.0+0x3a/0xa20 [ 647.600606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 647.601209] kmem_cache_alloc_node+0x169/0x330 [ 647.601758] __alloc_skb+0x6d/0x5b0 [ 647.602204] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 647.602749] rtmsg_ifinfo+0x83/0x120 [ 647.603195] __dev_notify_flags+0x22a/0x2c0 [ 647.603703] ? dev_change_name+0x6b0/0x6b0 [ 647.604211] ? record_print_text.cold+0x16/0x16 [ 647.604772] ? kmem_cache_alloc_trace+0x151/0x320 [ 647.605348] __dev_set_promiscuity+0x19b/0x220 [ 647.605906] dev_set_promiscuity+0x4f/0x160 [ 647.606516] packet_dev_mc+0x73/0x2a0 [ 647.607083] packet_setsockopt+0x28c8/0x3b30 [ 647.607608] ? sock_has_perm+0xf0/0x280 [ 647.608080] ? packet_sendmsg_spkt+0x1440/0x1440 [ 647.608641] ? find_held_lock+0x2c/0x110 [ 647.609121] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 647.609780] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 647.610405] ? __fget_files+0x2f8/0x520 [ 647.610881] ? selinux_socket_setsockopt+0x6a/0x80 [ 647.611461] __sys_setsockopt+0x180/0x2b0 [ 647.611945] ? packet_sendmsg_spkt+0x1440/0x1440 [ 647.612500] ? __ia32_sys_recv+0x100/0x100 [ 647.613000] ? fput_many+0x2f/0x1a0 [ 647.613437] ? ksys_write+0x1a9/0x260 [ 647.613896] ? __ia32_sys_read+0xb0/0xb0 [ 647.614384] __x64_sys_setsockopt+0xba/0x160 [ 647.614903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 647.615504] do_syscall_64+0x33/0x40 [ 647.615942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 647.616549] RIP: 0033:0x7fa745bf7b19 [ 647.616998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.619333] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 647.620246] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 647.621102] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 647.621952] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 647.622798] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 647.623640] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 647.657445] device lo left promiscuous mode [ 659.926636] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:56:49 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:56:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:56:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:56:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:49 executing program 3: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:56:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) [ 659.948149] device lo entered promiscuous mode [ 659.949056] FAULT_INJECTION: forcing a failure. [ 659.949056] name failslab, interval 1, probability 0, space 0, times 0 [ 659.950790] CPU: 0 PID: 6347 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 659.951828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 659.953090] Call Trace: [ 659.953501] dump_stack+0x107/0x167 [ 659.954067] should_fail.cold+0x5/0xa [ 659.954664] should_failslab+0x5/0x20 [ 659.955232] __kmalloc_node_track_caller+0x74/0x3b0 [ 659.955982] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 659.956713] __alloc_skb+0xb1/0x5b0 [ 659.957294] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 659.958001] rtmsg_ifinfo+0x83/0x120 [ 659.958573] __dev_notify_flags+0x22a/0x2c0 [ 659.959214] ? dev_change_name+0x6b0/0x6b0 [ 659.959877] ? record_print_text.cold+0x16/0x16 [ 659.960592] ? kmem_cache_alloc_trace+0x151/0x320 [ 659.961351] __dev_set_promiscuity+0x19b/0x220 [ 659.962048] dev_set_promiscuity+0x4f/0x160 [ 659.962693] packet_dev_mc+0x73/0x2a0 [ 659.963291] packet_setsockopt+0x28c8/0x3b30 [ 659.963951] ? sock_has_perm+0xf0/0x280 [ 659.964546] ? packet_sendmsg_spkt+0x1440/0x1440 [ 659.965273] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 659.966108] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 659.966913] ? __fget_files+0x2f8/0x520 [ 659.967516] ? selinux_socket_setsockopt+0x6a/0x80 [ 659.968281] __sys_setsockopt+0x180/0x2b0 [ 659.968894] ? packet_sendmsg_spkt+0x1440/0x1440 [ 659.969620] ? __ia32_sys_recv+0x100/0x100 [ 659.970274] ? fput_many+0x2f/0x1a0 [ 659.970821] ? ksys_write+0x1a9/0x260 [ 659.971395] ? __ia32_sys_read+0xb0/0xb0 [ 659.972034] __x64_sys_setsockopt+0xba/0x160 [ 659.972727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 659.973506] do_syscall_64+0x33/0x40 [ 659.974079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 659.974854] RIP: 0033:0x7fa745bf7b19 [ 659.975425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 659.978176] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 659.979336] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 659.980388] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 659.981441] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 659.982518] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 659.983600] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 660.069914] device lo left promiscuous mode 22:56:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:56:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:56:49 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:56:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 660.234086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 660.244226] device lo entered promiscuous mode [ 660.244924] FAULT_INJECTION: forcing a failure. [ 660.244924] name failslab, interval 1, probability 0, space 0, times 0 [ 660.246330] CPU: 0 PID: 6361 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 660.247164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.248157] Call Trace: [ 660.248487] dump_stack+0x107/0x167 [ 660.248929] should_fail.cold+0x5/0xa [ 660.249393] ? create_object.isra.0+0x3a/0xa20 [ 660.249947] should_failslab+0x5/0x20 [ 660.250417] kmem_cache_alloc+0x5b/0x310 [ 660.250916] create_object.isra.0+0x3a/0xa20 [ 660.251446] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 660.252064] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 660.252676] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 660.253256] __alloc_skb+0xb1/0x5b0 [ 660.253701] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 660.254441] rtmsg_ifinfo+0x83/0x120 [ 660.254902] __dev_notify_flags+0x22a/0x2c0 [ 660.255423] ? dev_change_name+0x6b0/0x6b0 [ 660.255935] ? record_print_text.cold+0x16/0x16 [ 660.256506] ? kmem_cache_alloc_trace+0x151/0x320 [ 660.257110] __dev_set_promiscuity+0x19b/0x220 [ 660.257668] dev_set_promiscuity+0x4f/0x160 [ 660.258204] packet_dev_mc+0x73/0x2a0 [ 660.258665] packet_setsockopt+0x28c8/0x3b30 [ 660.259207] ? sock_has_perm+0xf0/0x280 [ 660.259690] ? packet_sendmsg_spkt+0x1440/0x1440 [ 660.260260] ? find_held_lock+0x2c/0x110 [ 660.260756] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 660.261444] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 660.262093] ? __fget_files+0x2f8/0x520 [ 660.262587] ? selinux_socket_setsockopt+0x6a/0x80 [ 660.263195] __sys_setsockopt+0x180/0x2b0 [ 660.263700] ? packet_sendmsg_spkt+0x1440/0x1440 [ 660.264273] ? __ia32_sys_recv+0x100/0x100 [ 660.264784] ? fput_many+0x2f/0x1a0 [ 660.265226] ? ksys_write+0x1a9/0x260 [ 660.265695] ? __ia32_sys_read+0xb0/0xb0 [ 660.266206] __x64_sys_setsockopt+0xba/0x160 [ 660.266739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.267355] do_syscall_64+0x33/0x40 [ 660.267819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.268458] RIP: 0033:0x7fa745bf7b19 [ 660.268922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.271149] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.272072] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 660.272929] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 660.273790] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 660.274650] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 660.275503] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 22:56:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 660.341364] device lo left promiscuous mode 22:56:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:56:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 660.476005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 22:56:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 660.551768] device lo entered promiscuous mode [ 660.553004] FAULT_INJECTION: forcing a failure. [ 660.553004] name failslab, interval 1, probability 0, space 0, times 0 [ 660.556841] CPU: 1 PID: 6372 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 660.558508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.560653] Call Trace: [ 660.561330] dump_stack+0x107/0x167 [ 660.562248] should_fail.cold+0x5/0xa [ 660.563217] should_failslab+0x5/0x20 [ 660.564095] __kmalloc_node_track_caller+0x74/0x3b0 [ 660.565309] ? netlink_trim+0x1ee/0x250 [ 660.566237] pskb_expand_head+0x15a/0x1040 [ 660.567215] netlink_trim+0x1ee/0x250 [ 660.568089] netlink_broadcast_filtered+0x62/0xe00 [ 660.569204] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 660.570304] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 660.571383] nlmsg_notify+0x94/0x290 [ 660.572237] rtmsg_ifinfo+0xf5/0x120 [ 660.573089] __dev_notify_flags+0x22a/0x2c0 [ 660.574074] ? dev_change_name+0x6b0/0x6b0 [ 660.575040] ? record_print_text.cold+0x16/0x16 [ 660.576098] ? kmem_cache_alloc_trace+0x151/0x320 [ 660.577206] __dev_set_promiscuity+0x19b/0x220 [ 660.578255] dev_set_promiscuity+0x4f/0x160 [ 660.579233] packet_dev_mc+0x73/0x2a0 [ 660.580101] packet_setsockopt+0x28c8/0x3b30 [ 660.581099] ? sock_has_perm+0xf0/0x280 [ 660.582007] ? packet_sendmsg_spkt+0x1440/0x1440 [ 660.583083] ? find_held_lock+0x2c/0x110 22:56:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 660.584009] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 660.585441] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 660.586658] ? __fget_files+0x2f8/0x520 [ 660.587567] ? selinux_socket_setsockopt+0x6a/0x80 [ 660.588700] __sys_setsockopt+0x180/0x2b0 [ 660.589643] ? packet_sendmsg_spkt+0x1440/0x1440 [ 660.590730] ? __ia32_sys_recv+0x100/0x100 [ 660.591687] ? fput_many+0x2f/0x1a0 [ 660.592517] ? ksys_write+0x1a9/0x260 [ 660.593381] ? __ia32_sys_read+0xb0/0xb0 [ 660.594327] __x64_sys_setsockopt+0xba/0x160 [ 660.595324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.596495] do_syscall_64+0x33/0x40 [ 660.597344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.598513] RIP: 0033:0x7fa745bf7b19 [ 660.599346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.603510] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.605236] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 660.606862] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 660.608473] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 660.610092] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 660.611702] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 660.613924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:56:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 660.650696] device lo left promiscuous mode 22:57:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 1) 22:57:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 1) 22:57:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:57:02 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 1) [ 672.822486] device lo entered promiscuous mode [ 672.830356] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:02 executing program 3: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:57:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 672.834430] FAULT_INJECTION: forcing a failure. [ 672.834430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.836040] CPU: 0 PID: 6393 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 672.836972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.838088] Call Trace: [ 672.838459] dump_stack+0x107/0x167 [ 672.838944] should_fail.cold+0x5/0xa [ 672.839452] _copy_from_user+0x2e/0x1b0 [ 672.839979] packet_setsockopt+0x1d21/0x3b30 [ 672.840567] ? sock_has_perm+0xf0/0x280 [ 672.841097] ? packet_sendmsg_spkt+0x1440/0x1440 [ 672.841742] ? find_held_lock+0x2c/0x110 [ 672.841865] FAULT_INJECTION: forcing a failure. [ 672.841865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.842307] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 672.846026] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 672.846728] ? __fget_files+0x2f8/0x520 [ 672.847254] ? selinux_socket_setsockopt+0x6a/0x80 [ 672.847909] __sys_setsockopt+0x180/0x2b0 [ 672.848446] ? packet_sendmsg_spkt+0x1440/0x1440 [ 672.849064] ? __ia32_sys_recv+0x100/0x100 [ 672.849608] ? fput_many+0x2f/0x1a0 [ 672.850088] ? ksys_write+0x1a9/0x260 [ 672.850594] ? __ia32_sys_read+0xb0/0xb0 [ 672.851130] __x64_sys_setsockopt+0xba/0x160 [ 672.851701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.852375] do_syscall_64+0x33/0x40 [ 672.852858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 672.853528] RIP: 0033:0x7fda4e524b19 [ 672.854024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.856422] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.857419] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 672.858372] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 672.859312] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 672.860248] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 672.861177] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 672.862154] CPU: 1 PID: 6399 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 672.863967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.866152] Call Trace: [ 672.866840] dump_stack+0x107/0x167 [ 672.867799] should_fail.cold+0x5/0xa [ 672.868800] _copy_from_user+0x2e/0x1b0 [ 672.869855] perf_copy_attr+0x11a/0x8a0 [ 672.870922] __do_sys_perf_event_open+0xb9/0x2e60 [ 672.872204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 672.873469] ? perf_event_set_output+0x5b0/0x5b0 [ 672.874719] ? wait_for_completion_io+0x270/0x270 [ 672.876015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.877411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.878778] do_syscall_64+0x33/0x40 [ 672.879767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 672.881104] RIP: 0033:0x7f8615117b19 [ 672.882082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.885930] RSP: 002b:00007f861266c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 672.887496] RAX: ffffffffffffffda RBX: 00007f861522b020 RCX: 00007f8615117b19 [ 672.888944] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 672.890380] RBP: 00007f861266c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.891815] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 672.893251] R13: 00007ffc81cbd3ff R14: 00007f861266c300 R15: 0000000000022000 22:57:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) [ 672.913891] FAULT_INJECTION: forcing a failure. [ 672.913891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.916322] CPU: 1 PID: 6390 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 672.917681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.919841] Call Trace: [ 672.920528] dump_stack+0x107/0x167 [ 672.920542] device lo left promiscuous mode [ 672.921448] should_fail.cold+0x5/0xa [ 672.921477] _copy_from_user+0x2e/0x1b0 [ 672.921504] io_uring_setup+0x9b/0x2980 [ 672.924614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 672.925631] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 672.926715] ? wait_for_completion_io+0x270/0x270 [ 672.927740] ? rcu_read_lock_any_held+0x75/0xa0 [ 672.928723] ? vfs_write+0x354/0xb10 [ 672.929510] ? fput_many+0x2f/0x1a0 [ 672.930280] ? ksys_write+0x1a9/0x260 [ 672.931079] ? __ia32_sys_read+0xb0/0xb0 [ 672.931947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.933045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.934145] do_syscall_64+0x33/0x40 [ 672.934931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 672.936013] RIP: 0033:0x7fe1ce9abb19 [ 672.936796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.940680] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 672.942292] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 672.943802] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 672.945307] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 672.946814] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 672.948317] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 672.951104] device lo entered promiscuous mode [ 672.952438] FAULT_INJECTION: forcing a failure. [ 672.952438] name failslab, interval 1, probability 0, space 0, times 0 [ 672.954851] CPU: 1 PID: 6396 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 672.956305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.958071] Call Trace: [ 672.958640] dump_stack+0x107/0x167 [ 672.959410] should_fail.cold+0x5/0xa [ 672.960215] ? create_object.isra.0+0x3a/0xa20 [ 672.961193] should_failslab+0x5/0x20 [ 672.961997] kmem_cache_alloc+0x5b/0x310 [ 672.962873] create_object.isra.0+0x3a/0xa20 [ 672.963798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 672.964879] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 672.965951] ? netlink_trim+0x1ee/0x250 [ 672.966817] pskb_expand_head+0x15a/0x1040 [ 672.967728] netlink_trim+0x1ee/0x250 [ 672.968541] netlink_broadcast_filtered+0x62/0xe00 [ 672.969584] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 672.970604] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 672.971610] nlmsg_notify+0x94/0x290 [ 672.972414] rtmsg_ifinfo+0xf5/0x120 [ 672.973209] __dev_notify_flags+0x22a/0x2c0 [ 672.974129] ? dev_change_name+0x6b0/0x6b0 [ 672.975027] ? record_print_text.cold+0x16/0x16 [ 672.976020] ? kmem_cache_alloc_trace+0x151/0x320 [ 672.977052] __dev_set_promiscuity+0x19b/0x220 [ 672.978031] dev_set_promiscuity+0x4f/0x160 [ 672.978966] packet_dev_mc+0x73/0x2a0 [ 672.979774] packet_setsockopt+0x28c8/0x3b30 [ 672.980709] ? sock_has_perm+0xf0/0x280 [ 672.981566] ? packet_sendmsg_spkt+0x1440/0x1440 [ 672.982580] ? find_held_lock+0x2c/0x110 [ 672.983449] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 672.984636] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 672.985755] ? __fget_files+0x2f8/0x520 [ 672.986618] ? selinux_socket_setsockopt+0x6a/0x80 [ 672.987668] __sys_setsockopt+0x180/0x2b0 [ 672.988542] ? packet_sendmsg_spkt+0x1440/0x1440 [ 672.989549] ? __ia32_sys_recv+0x100/0x100 [ 672.990454] ? fput_many+0x2f/0x1a0 [ 672.991227] ? ksys_write+0x1a9/0x260 [ 672.992042] ? __ia32_sys_read+0xb0/0xb0 [ 672.992910] __x64_sys_setsockopt+0xba/0x160 [ 672.993841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.994939] do_syscall_64+0x33/0x40 [ 672.995725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 672.996808] RIP: 0033:0x7fa745bf7b19 [ 672.997597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.001501] RSP: 002b:00007fa74316d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.003137] RAX: ffffffffffffffda RBX: 00007fa745d0af60 RCX: 00007fa745bf7b19 [ 673.004666] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 673.006184] RBP: 00007fa74316d1d0 R08: 0000000000000010 R09: 0000000000000000 [ 673.007725] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 673.009242] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 673.011521] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 2) [ 673.024490] FAULT_INJECTION: forcing a failure. [ 673.024490] name failslab, interval 1, probability 0, space 0, times 0 [ 673.027141] CPU: 1 PID: 6409 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 673.028613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.030372] Call Trace: [ 673.030937] dump_stack+0x107/0x167 [ 673.031719] should_fail.cold+0x5/0xa [ 673.032537] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 673.033589] should_failslab+0x5/0x20 [ 673.034414] kmem_cache_alloc_trace+0x55/0x320 [ 673.035387] perf_event_alloc.part.0+0x5b/0x2b70 [ 673.036403] __do_sys_perf_event_open+0x579/0x2e60 [ 673.037447] ? __mutex_unlock_slowpath+0xe1/0x600 [ 673.038497] ? perf_event_set_output+0x5b0/0x5b0 [ 673.039494] ? wait_for_completion_io+0x270/0x270 [ 673.040552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.041668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.042786] do_syscall_64+0x33/0x40 [ 673.043581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.044672] RIP: 0033:0x7f8615117b19 [ 673.045463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.049377] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 673.050996] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 673.052524] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 673.054047] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.055571] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 673.057085] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 22:57:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 2) 22:57:02 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 2) [ 673.063806] device lo left promiscuous mode [ 673.117404] device lo entered promiscuous mode [ 673.122614] FAULT_INJECTION: forcing a failure. [ 673.122614] name failslab, interval 1, probability 0, space 0, times 0 [ 673.124110] CPU: 0 PID: 6413 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 673.124968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 22:57:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) (fail_nth: 10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 673.126102] Call Trace: [ 673.126466] dump_stack+0x107/0x167 [ 673.126920] should_fail.cold+0x5/0xa [ 673.127410] ? io_uring_setup+0x258/0x2980 [ 673.127944] should_failslab+0x5/0x20 [ 673.128425] kmem_cache_alloc_trace+0x55/0x320 [ 673.128998] io_uring_setup+0x258/0x2980 [ 673.129507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 673.130085] FAULT_INJECTION: forcing a failure. [ 673.130085] name failslab, interval 1, probability 0, space 0, times 0 [ 673.131493] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 673.131502] ? wait_for_completion_io+0x270/0x270 [ 673.131533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.133865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.134525] do_syscall_64+0x33/0x40 [ 673.134991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.135652] RIP: 0033:0x7fe1ce9abb19 [ 673.136134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.138448] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 673.139437] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 673.140356] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 673.141249] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 673.142163] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 673.143082] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 673.144001] CPU: 1 PID: 6412 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 673.145511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.147373] Call Trace: [ 673.147949] dump_stack+0x107/0x167 [ 673.148876] should_fail.cold+0x5/0xa [ 673.149784] ? packet_setsockopt+0x252e/0x3b30 [ 673.150864] should_failslab+0x5/0x20 [ 673.151675] kmem_cache_alloc_trace+0x55/0x320 [ 673.152641] packet_setsockopt+0x252e/0x3b30 [ 673.153793] ? sock_has_perm+0xf0/0x280 [ 673.154639] ? packet_sendmsg_spkt+0x1440/0x1440 [ 673.155699] ? find_held_lock+0x2c/0x110 [ 673.156599] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 673.157772] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 673.158895] ? __fget_files+0x2f8/0x520 [ 673.159739] ? selinux_socket_setsockopt+0x6a/0x80 [ 673.160797] __sys_setsockopt+0x180/0x2b0 [ 673.161673] ? packet_sendmsg_spkt+0x1440/0x1440 [ 673.162682] ? __ia32_sys_recv+0x100/0x100 [ 673.163576] ? fput_many+0x2f/0x1a0 [ 673.164354] ? ksys_write+0x1a9/0x260 [ 673.165162] ? __ia32_sys_read+0xb0/0xb0 [ 673.166027] __x64_sys_setsockopt+0xba/0x160 [ 673.166964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.168055] do_syscall_64+0x33/0x40 [ 673.168846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.169928] RIP: 0033:0x7fda4e524b19 [ 673.170715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.174607] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.176212] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 673.177716] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 673.179242] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 673.180723] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 673.182236] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 673.248689] device lo entered promiscuous mode [ 673.249626] FAULT_INJECTION: forcing a failure. [ 673.249626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.251346] CPU: 0 PID: 6415 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 673.252205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.253237] Call Trace: [ 673.253573] dump_stack+0x107/0x167 [ 673.254025] should_fail.cold+0x5/0xa [ 673.254515] _copy_to_user+0x2e/0x180 [ 673.254988] simple_read_from_buffer+0xcc/0x160 [ 673.255561] proc_fail_nth_read+0x198/0x230 [ 673.256088] ? proc_sessionid_read+0x230/0x230 [ 673.256660] ? security_file_permission+0xb1/0xe0 [ 673.257279] ? proc_sessionid_read+0x230/0x230 [ 673.257850] vfs_read+0x228/0x620 [ 673.258290] ksys_read+0x12d/0x260 [ 673.258723] ? vfs_write+0xb10/0xb10 [ 673.259184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.259822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.260490] do_syscall_64+0x33/0x40 [ 673.260962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.261585] RIP: 0033:0x7fa745baa69c [ 673.262036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 673.264268] RSP: 002b:00007fa74316d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 673.265192] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa745baa69c [ 673.266073] RDX: 000000000000000f RSI: 00007fa74316d1e0 RDI: 0000000000000006 [ 673.266951] RBP: 00007fa74316d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.267852] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 673.268727] R13: 00007fff4a2e842f R14: 00007fa74316d300 R15: 0000000000022000 [ 673.273278] device lo left promiscuous mode [ 673.427187] device lo left promiscuous mode 22:57:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 3) 22:57:16 executing program 3: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:57:16 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 3) 22:57:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) [ 686.613247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 3) 22:57:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 686.620790] device lo entered promiscuous mode [ 686.626340] FAULT_INJECTION: forcing a failure. [ 686.626340] name failslab, interval 1, probability 0, space 0, times 0 [ 686.628969] CPU: 1 PID: 6427 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 686.630541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.632412] Call Trace: [ 686.633009] dump_stack+0x107/0x167 [ 686.633849] should_fail.cold+0x5/0xa [ 686.634897] ? create_object.isra.0+0x3a/0xa20 [ 686.635951] should_failslab+0x5/0x20 [ 686.636823] kmem_cache_alloc+0x5b/0x310 [ 686.637770] create_object.isra.0+0x3a/0xa20 [ 686.638790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 686.639946] kmem_cache_alloc_trace+0x151/0x320 [ 686.641004] packet_setsockopt+0x252e/0x3b30 [ 686.642007] ? sock_has_perm+0xf0/0x280 [ 686.642911] ? packet_sendmsg_spkt+0x1440/0x1440 [ 686.643981] ? find_held_lock+0x2c/0x110 [ 686.644915] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 686.646169] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 686.647370] ? __fget_files+0x2f8/0x520 [ 686.648272] ? selinux_socket_setsockopt+0x6a/0x80 [ 686.649388] __sys_setsockopt+0x180/0x2b0 [ 686.650336] ? packet_sendmsg_spkt+0x1440/0x1440 [ 686.651412] ? __ia32_sys_recv+0x100/0x100 [ 686.652362] ? fput_many+0x2f/0x1a0 [ 686.653186] ? ksys_write+0x1a9/0x260 [ 686.654044] ? __ia32_sys_read+0xb0/0xb0 [ 686.654974] __x64_sys_setsockopt+0xba/0x160 [ 686.655963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.657115] do_syscall_64+0x33/0x40 [ 686.657957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 686.659130] RIP: 0033:0x7fda4e524b19 [ 686.659962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.664204] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.665906] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 686.667524] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 686.669119] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 686.670728] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 686.672347] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 686.693009] FAULT_INJECTION: forcing a failure. [ 686.693009] name failslab, interval 1, probability 0, space 0, times 0 [ 686.694657] CPU: 0 PID: 6435 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 686.695486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.696586] Call Trace: [ 686.696986] dump_stack+0x107/0x167 [ 686.697430] should_fail.cold+0x5/0xa [ 686.697907] ? create_object.isra.0+0x3a/0xa20 [ 686.698475] should_failslab+0x5/0x20 [ 686.698935] kmem_cache_alloc+0x5b/0x310 [ 686.699430] create_object.isra.0+0x3a/0xa20 [ 686.699960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 686.700581] kmem_cache_alloc_trace+0x151/0x320 [ 686.701153] io_uring_setup+0x258/0x2980 [ 686.701644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 686.702237] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 686.702860] ? wait_for_completion_io+0x270/0x270 [ 686.703464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 686.704100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.704728] do_syscall_64+0x33/0x40 [ 686.705180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 686.705737] device lo entered promiscuous mode [ 686.705803] RIP: 0033:0x7fe1ce9abb19 [ 686.705823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.709558] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 686.710486] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 686.711352] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 686.712227] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 686.713089] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 686.713948] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 686.733537] device lo left promiscuous mode [ 686.734302] device lo left promiscuous mode 22:57:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:57:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 686.776658] FAULT_INJECTION: forcing a failure. [ 686.776658] name failslab, interval 1, probability 0, space 0, times 0 [ 686.779645] CPU: 1 PID: 6438 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 686.781170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.783056] Call Trace: [ 686.783805] dump_stack+0x107/0x167 [ 686.784626] should_fail.cold+0x5/0xa [ 686.785488] ? create_object.isra.0+0x3a/0xa20 [ 686.786534] should_failslab+0x5/0x20 [ 686.787389] kmem_cache_alloc+0x5b/0x310 [ 686.788431] create_object.isra.0+0x3a/0xa20 [ 686.789423] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 686.790834] kmem_cache_alloc_trace+0x151/0x320 [ 686.792156] perf_event_alloc.part.0+0x5b/0x2b70 [ 686.793459] __do_sys_perf_event_open+0x579/0x2e60 [ 686.794737] ? __mutex_unlock_slowpath+0xe1/0x600 [ 686.796067] ? perf_event_set_output+0x5b0/0x5b0 [ 686.797484] ? wait_for_completion_io+0x270/0x270 [ 686.798887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 686.800190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.801475] do_syscall_64+0x33/0x40 [ 686.802602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 686.804119] RIP: 0033:0x7f8615117b19 [ 686.805050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.809874] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 686.811956] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 686.813691] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 686.815480] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.817161] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 686.818937] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 22:57:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x29, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:57:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:16 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 4) 22:57:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 686.883113] device lo entered promiscuous mode [ 686.908605] FAULT_INJECTION: forcing a failure. [ 686.908605] name failslab, interval 1, probability 0, space 0, times 0 [ 686.911592] CPU: 1 PID: 6448 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 686.913537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.915619] Call Trace: [ 686.916301] dump_stack+0x107/0x167 [ 686.917332] should_fail.cold+0x5/0xa [ 686.918560] ? __alloc_skb+0x6d/0x5b0 [ 686.919180] should_failslab+0x5/0x20 [ 686.919839] kmem_cache_alloc_node+0x55/0x330 [ 686.920607] __alloc_skb+0x6d/0x5b0 [ 686.921429] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 686.922231] rtmsg_ifinfo+0x83/0x120 [ 686.922982] __dev_notify_flags+0x22a/0x2c0 [ 686.923712] ? dev_change_name+0x6b0/0x6b0 [ 686.924311] ? kmem_cache_alloc_trace+0x151/0x320 [ 686.925056] __dev_set_promiscuity+0x19b/0x220 [ 686.925750] dev_set_promiscuity+0x4f/0x160 [ 686.926578] packet_dev_mc+0x73/0x2a0 [ 686.927327] packet_setsockopt+0x28c8/0x3b30 [ 686.928161] ? packet_sendmsg_spkt+0x1440/0x1440 [ 686.928836] ? find_held_lock+0x2c/0x110 [ 686.929414] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 686.930461] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 686.931186] ? __fget_files+0x2f8/0x520 [ 686.931744] ? selinux_socket_setsockopt+0x6a/0x80 [ 686.932432] __sys_setsockopt+0x180/0x2b0 [ 686.933144] ? packet_sendmsg_spkt+0x1440/0x1440 [ 686.933809] ? __ia32_sys_recv+0x100/0x100 [ 686.934414] ? fput_many+0x2f/0x1a0 [ 686.934942] ? ksys_write+0x1a9/0x260 [ 686.935467] ? __ia32_sys_read+0xb0/0xb0 [ 686.936042] __x64_sys_setsockopt+0xba/0x160 [ 686.936654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.937372] do_syscall_64+0x33/0x40 [ 686.937889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 686.938611] RIP: 0033:0x7fda4e524b19 [ 686.939139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.941694] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.942770] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 686.943768] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 686.944792] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 686.945775] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 686.946760] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 687.036265] FAULT_INJECTION: forcing a failure. [ 687.036265] name failslab, interval 1, probability 0, space 0, times 0 [ 687.037726] CPU: 0 PID: 6456 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 687.038745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 687.039743] Call Trace: [ 687.040063] dump_stack+0x107/0x167 [ 687.040501] should_fail.cold+0x5/0xa [ 687.040961] ? io_uring_setup+0x33c/0x2980 [ 687.041476] should_failslab+0x5/0x20 22:57:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 4) [ 687.041930] __kmalloc+0x72/0x390 22:57:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) [ 687.042528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 687.043212] io_uring_setup+0x33c/0x2980 [ 687.043699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 687.044283] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 687.044889] ? wait_for_completion_io+0x270/0x270 [ 687.045481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 687.046109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 687.046745] do_syscall_64+0x33/0x40 [ 687.047200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 687.047812] RIP: 0033:0x7fe1ce9abb19 [ 687.048252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.050483] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 687.051394] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 687.052253] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 687.053109] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 687.053955] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 687.054813] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:57:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 4) [ 687.081452] FAULT_INJECTION: forcing a failure. [ 687.081452] name failslab, interval 1, probability 0, space 0, times 0 [ 687.083100] CPU: 0 PID: 6460 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 687.083926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 687.084916] Call Trace: [ 687.085246] dump_stack+0x107/0x167 [ 687.085691] should_fail.cold+0x5/0xa [ 687.086151] ? allocate_fake_cpuc+0x45/0x110 [ 687.086700] should_failslab+0x5/0x20 [ 687.087158] kmem_cache_alloc_trace+0x55/0x320 [ 687.087705] ? x86_pmu_hw_config+0x3ec/0x850 [ 687.088246] allocate_fake_cpuc+0x45/0x110 [ 687.088755] x86_pmu_event_init+0x378/0x6e0 [ 687.089279] perf_try_init_event+0x202/0x570 [ 687.089807] perf_event_alloc.part.0+0xd96/0x2b70 [ 687.090426] __do_sys_perf_event_open+0x579/0x2e60 [ 687.091021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 687.091603] ? perf_event_set_output+0x5b0/0x5b0 [ 687.092175] ? wait_for_completion_io+0x270/0x270 [ 687.092771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 687.093402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 687.094019] do_syscall_64+0x33/0x40 [ 687.094474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 687.095088] RIP: 0033:0x7f8615117b19 [ 687.095535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.097742] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 687.098661] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 687.099519] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 687.100376] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.101230] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 687.102080] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 687.170586] device lo left promiscuous mode 22:57:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 5) 22:57:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:57:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:57:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 5) 22:57:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 5) 22:57:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x106, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:57:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 707.934148] FAULT_INJECTION: forcing a failure. [ 707.934148] name failslab, interval 1, probability 0, space 0, times 0 [ 707.937330] CPU: 1 PID: 6471 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 707.938938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.940857] Call Trace: [ 707.941469] dump_stack+0x107/0x167 [ 707.942314] should_fail.cold+0x5/0xa [ 707.943213] ? create_object.isra.0+0x3a/0xa20 [ 707.944281] should_failslab+0x5/0x20 [ 707.945158] kmem_cache_alloc+0x5b/0x310 [ 707.946093] ? lock_release+0x680/0x680 [ 707.947028] create_object.isra.0+0x3a/0xa20 [ 707.948042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 707.949219] kmem_cache_alloc_trace+0x151/0x320 [ 707.950302] allocate_fake_cpuc+0x45/0x110 [ 707.951295] x86_pmu_event_init+0x378/0x6e0 [ 707.952299] perf_try_init_event+0x202/0x570 [ 707.953324] perf_event_alloc.part.0+0xd96/0x2b70 [ 707.954451] __do_sys_perf_event_open+0x579/0x2e60 [ 707.955608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 707.956732] ? perf_event_set_output+0x5b0/0x5b0 [ 707.957833] ? wait_for_completion_io+0x270/0x270 [ 707.958989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 707.960204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.961400] do_syscall_64+0x33/0x40 [ 707.962267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 707.963461] RIP: 0033:0x7f8615117b19 [ 707.964326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.968606] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 707.970389] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 707.972069] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 707.973737] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.975422] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 707.977097] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 707.988410] FAULT_INJECTION: forcing a failure. [ 707.988410] name failslab, interval 1, probability 0, space 0, times 0 [ 707.990343] CPU: 0 PID: 6476 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 707.991414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.992699] Call Trace: [ 707.993111] dump_stack+0x107/0x167 [ 707.993676] should_fail.cold+0x5/0xa [ 707.994265] ? create_object.isra.0+0x3a/0xa20 [ 707.994980] should_failslab+0x5/0x20 [ 707.995566] kmem_cache_alloc+0x5b/0x310 [ 707.996194] create_object.isra.0+0x3a/0xa20 [ 707.996872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 707.997657] __kmalloc+0x16e/0x390 [ 707.998225] io_uring_setup+0x33c/0x2980 [ 707.998859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 707.999615] ? __do_sys_io_uring_enter+0x1890/0x1890 22:57:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 708.000395] ? wait_for_completion_io+0x270/0x270 [ 708.001350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 708.002160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 708.002980] do_syscall_64+0x33/0x40 [ 708.003557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 708.004351] RIP: 0033:0x7fe1ce9abb19 [ 708.004927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.007789] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 708.008969] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 708.010077] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 708.011190] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 708.012294] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 708.013400] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 708.053019] device lo entered promiscuous mode [ 708.055099] FAULT_INJECTION: forcing a failure. [ 708.055099] name failslab, interval 1, probability 0, space 0, times 0 [ 708.057077] CPU: 0 PID: 6485 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 708.058344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.059654] Call Trace: [ 708.060067] dump_stack+0x107/0x167 [ 708.060630] should_fail.cold+0x5/0xa [ 708.061219] ? create_object.isra.0+0x3a/0xa20 [ 708.061925] should_failslab+0x5/0x20 [ 708.062528] kmem_cache_alloc+0x5b/0x310 [ 708.063158] create_object.isra.0+0x3a/0xa20 [ 708.063836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 708.064626] kmem_cache_alloc_node+0x169/0x330 [ 708.065339] __alloc_skb+0x6d/0x5b0 [ 708.065906] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 708.066619] rtmsg_ifinfo+0x83/0x120 [ 708.067199] __dev_notify_flags+0x22a/0x2c0 [ 708.067860] ? dev_change_name+0x6b0/0x6b0 [ 708.068519] ? kmem_cache_alloc_trace+0x151/0x320 [ 708.069270] __dev_set_promiscuity+0x19b/0x220 [ 708.069979] dev_set_promiscuity+0x4f/0x160 [ 708.070654] packet_dev_mc+0x73/0x2a0 [ 708.071243] packet_setsockopt+0x28c8/0x3b30 [ 708.071923] ? packet_sendmsg_spkt+0x1440/0x1440 [ 708.072654] ? find_held_lock+0x2c/0x110 [ 708.073287] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 708.074144] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 708.074964] ? __fget_files+0x2f8/0x520 [ 708.075581] ? selinux_socket_setsockopt+0x6a/0x80 [ 708.076341] __sys_setsockopt+0x180/0x2b0 [ 708.076973] ? packet_sendmsg_spkt+0x1440/0x1440 [ 708.077704] ? __ia32_sys_recv+0x100/0x100 [ 708.078354] ? fput_many+0x2f/0x1a0 [ 708.078923] ? ksys_write+0x1a9/0x260 [ 708.079510] ? __ia32_sys_read+0xb0/0xb0 [ 708.080139] __x64_sys_setsockopt+0xba/0x160 [ 708.080820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 708.081614] do_syscall_64+0x33/0x40 [ 708.082188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 708.082985] RIP: 0033:0x7fda4e524b19 [ 708.083560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.086396] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 708.087573] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 708.088676] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 708.089772] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 708.090877] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 708.091975] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 22:57:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 6) 22:57:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:57:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 6) 22:57:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 708.185688] FAULT_INJECTION: forcing a failure. [ 708.185688] name failslab, interval 1, probability 0, space 0, times 0 [ 708.187427] CPU: 0 PID: 6491 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 708.188291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.189330] Call Trace: [ 708.189665] dump_stack+0x107/0x167 [ 708.190124] should_fail.cold+0x5/0xa [ 708.190618] ? selinux_perf_event_alloc+0x43/0x190 [ 708.191231] should_failslab+0x5/0x20 [ 708.191709] kmem_cache_alloc_trace+0x55/0x320 [ 708.192288] selinux_perf_event_alloc+0x43/0x190 [ 708.192886] security_perf_event_alloc+0x46/0xa0 [ 708.193479] perf_event_alloc.part.0+0x18b3/0x2b70 [ 708.194099] __do_sys_perf_event_open+0x579/0x2e60 [ 708.194723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 708.195327] ? perf_event_set_output+0x5b0/0x5b0 [ 708.195919] ? wait_for_completion_io+0x270/0x270 [ 708.196532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 708.197193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 708.197839] do_syscall_64+0x33/0x40 [ 708.198306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 708.198955] RIP: 0033:0x7f8615117b19 [ 708.199419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.201732] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 708.202691] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 708.203586] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 708.204476] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.205361] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 708.206255] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 708.216540] FAULT_INJECTION: forcing a failure. [ 708.216540] name failslab, interval 1, probability 0, space 0, times 0 [ 708.219409] CPU: 1 PID: 6494 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 708.221210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.223154] Call Trace: [ 708.223772] dump_stack+0x107/0x167 [ 708.224616] should_fail.cold+0x5/0xa [ 708.225510] ? io_uring_setup+0x40b/0x2980 [ 708.226509] should_failslab+0x5/0x20 [ 708.227398] kmem_cache_alloc_trace+0x55/0x320 [ 708.228459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 708.229642] io_uring_setup+0x40b/0x2980 [ 708.230588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 708.231705] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 708.232873] ? wait_for_completion_io+0x270/0x270 [ 708.234010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 708.235229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 708.236421] do_syscall_64+0x33/0x40 [ 708.237284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 708.238483] RIP: 0033:0x7fe1ce9abb19 [ 708.239352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.243644] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 708.245424] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 708.247088] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 708.248752] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 708.250394] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 708.252030] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:57:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 7) 22:57:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x125, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 708.358468] FAULT_INJECTION: forcing a failure. [ 708.358468] name failslab, interval 1, probability 0, space 0, times 0 [ 708.359902] CPU: 0 PID: 6504 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 708.360789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.361908] Call Trace: [ 708.362233] dump_stack+0x107/0x167 [ 708.362692] should_fail.cold+0x5/0xa [ 708.363156] ? create_object.isra.0+0x3a/0xa20 [ 708.363706] should_failslab+0x5/0x20 [ 708.364166] kmem_cache_alloc+0x5b/0x310 [ 708.364662] create_object.isra.0+0x3a/0xa20 [ 708.365204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 708.365824] kmem_cache_alloc_trace+0x151/0x320 [ 708.366395] selinux_perf_event_alloc+0x43/0x190 [ 708.366974] security_perf_event_alloc+0x46/0xa0 [ 708.367554] perf_event_alloc.part.0+0x18b3/0x2b70 [ 708.368156] __do_sys_perf_event_open+0x579/0x2e60 [ 708.368750] ? __mutex_unlock_slowpath+0xe1/0x600 [ 708.369334] ? perf_event_set_output+0x5b0/0x5b0 [ 708.369908] ? wait_for_completion_io+0x270/0x270 [ 708.370510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 708.371146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 708.371768] do_syscall_64+0x33/0x40 [ 708.372224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 708.372843] RIP: 0033:0x7f8615117b19 [ 708.373288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.375531] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 708.376466] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 708.377330] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 708.378195] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.379062] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 708.379946] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 708.404821] device lo left promiscuous mode [ 721.632512] device lo entered promiscuous mode 22:57:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 7) 22:57:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 6) 22:57:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x20d315) 22:57:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) [ 721.636210] FAULT_INJECTION: forcing a failure. [ 721.636210] name failslab, interval 1, probability 0, space 0, times 0 [ 721.637887] CPU: 0 PID: 6518 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 721.638934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.640166] Call Trace: [ 721.640562] dump_stack+0x107/0x167 [ 721.641101] should_fail.cold+0x5/0xa [ 721.641690] should_failslab+0x5/0x20 [ 721.642254] __kmalloc_node_track_caller+0x74/0x3b0 [ 721.643026] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 721.643736] __alloc_skb+0xb1/0x5b0 [ 721.644278] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 721.644962] rtmsg_ifinfo+0x83/0x120 [ 721.645518] __dev_notify_flags+0x22a/0x2c0 [ 721.646157] ? dev_change_name+0x6b0/0x6b0 [ 721.646844] ? kmem_cache_alloc_trace+0x151/0x320 [ 721.647566] __dev_set_promiscuity+0x19b/0x220 [ 721.648245] dev_set_promiscuity+0x4f/0x160 [ 721.648885] packet_dev_mc+0x73/0x2a0 [ 721.649448] packet_setsockopt+0x28c8/0x3b30 [ 721.650105] ? packet_sendmsg_spkt+0x1440/0x1440 [ 721.650875] ? find_held_lock+0x2c/0x110 [ 721.651480] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 721.652305] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 721.653085] ? __fget_files+0x2f8/0x520 [ 721.653690] ? selinux_socket_setsockopt+0x6a/0x80 [ 721.654424] __sys_setsockopt+0x180/0x2b0 [ 721.655048] ? packet_sendmsg_spkt+0x1440/0x1440 [ 721.655768] ? __ia32_sys_recv+0x100/0x100 [ 721.656423] ? fput_many+0x2f/0x1a0 [ 721.656985] ? ksys_write+0x1a9/0x260 [ 721.657574] ? __ia32_sys_read+0xb0/0xb0 [ 721.658206] __x64_sys_setsockopt+0xba/0x160 [ 721.658905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.659703] do_syscall_64+0x33/0x40 [ 721.660281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.661043] RIP: 0033:0x7fda4e524b19 [ 721.661619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.664342] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.665533] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 721.666655] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 721.667766] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 721.668880] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 721.669992] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 721.671330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 721.681329] FAULT_INJECTION: forcing a failure. [ 721.681329] name failslab, interval 1, probability 0, space 0, times 0 [ 721.683994] CPU: 1 PID: 6523 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 721.685587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.687508] Call Trace: [ 721.688122] dump_stack+0x107/0x167 [ 721.688966] should_fail.cold+0x5/0xa [ 721.689859] ? __d_alloc+0x2a/0x990 [ 721.690725] should_failslab+0x5/0x20 [ 721.691611] kmem_cache_alloc+0x5b/0x310 [ 721.692566] __d_alloc+0x2a/0x990 [ 721.693378] d_alloc_pseudo+0x19/0x70 [ 721.694262] alloc_file_pseudo+0xce/0x250 [ 721.695233] ? alloc_file+0x5a0/0x5a0 [ 721.696120] ? security_perf_event_alloc+0x79/0xa0 22:57:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 8) 22:57:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x132, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 721.697269] ? ctx_sched_out+0xa00/0xa00 [ 721.698457] anon_inode_getfile+0xc8/0x1f0 [ 721.699422] __do_sys_perf_event_open+0xf59/0x2e60 [ 721.700567] ? __mutex_unlock_slowpath+0x70/0x600 [ 721.701677] ? perf_event_set_output+0x5b0/0x5b0 [ 721.702776] ? wait_for_completion_io+0x270/0x270 [ 721.703912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 721.705121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.706318] do_syscall_64+0x33/0x40 [ 721.707189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.708370] RIP: 0033:0x7f8615117b19 [ 721.709225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.713484] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 721.715258] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 721.716906] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 721.718548] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.720220] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 721.721884] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 721.757577] FAULT_INJECTION: forcing a failure. [ 721.757577] name failslab, interval 1, probability 0, space 0, times 0 [ 721.759446] CPU: 0 PID: 6516 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 721.760680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.761961] Call Trace: [ 721.762372] dump_stack+0x107/0x167 [ 721.762944] should_fail.cold+0x5/0xa [ 721.763532] ? create_object.isra.0+0x3a/0xa20 [ 721.764242] should_failslab+0x5/0x20 [ 721.764826] kmem_cache_alloc+0x5b/0x310 [ 721.765457] create_object.isra.0+0x3a/0xa20 [ 721.766135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 721.766927] kmem_cache_alloc_trace+0x151/0x320 [ 721.767649] io_uring_setup+0x40b/0x2980 [ 721.768277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 721.769023] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 721.769801] ? wait_for_completion_io+0x270/0x270 [ 721.770561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 721.771375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.772167] do_syscall_64+0x33/0x40 [ 721.772740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.773527] RIP: 0033:0x7fe1ce9abb19 [ 721.774100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.776935] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 721.778105] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 721.779218] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 721.780311] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 721.781407] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 721.782504] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 721.805371] device lo left promiscuous mode 22:57:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 9) 22:57:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:57:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:57:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:57:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 7) [ 721.912333] device lo entered promiscuous mode [ 721.922216] FAULT_INJECTION: forcing a failure. [ 721.922216] name failslab, interval 1, probability 0, space 0, times 0 [ 721.923958] CPU: 0 PID: 6534 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 721.924977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.926201] Call Trace: [ 721.926601] dump_stack+0x107/0x167 [ 721.927197] should_fail.cold+0x5/0xa [ 721.927877] ? create_object.isra.0+0x3a/0xa20 [ 721.928569] should_failslab+0x5/0x20 [ 721.929156] kmem_cache_alloc+0x5b/0x310 [ 721.929788] create_object.isra.0+0x3a/0xa20 [ 721.930464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 721.931269] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 721.932055] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 721.932786] __alloc_skb+0xb1/0x5b0 [ 721.933332] rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 721.934047] rtmsg_ifinfo+0x83/0x120 [ 721.934625] __dev_notify_flags+0x22a/0x2c0 [ 721.935294] ? dev_change_name+0x6b0/0x6b0 [ 721.935931] ? kmem_cache_alloc_trace+0x151/0x320 [ 721.936686] __dev_set_promiscuity+0x19b/0x220 [ 721.937380] dev_set_promiscuity+0x4f/0x160 [ 721.938043] packet_dev_mc+0x73/0x2a0 [ 721.938648] packet_setsockopt+0x28c8/0x3b30 [ 721.939313] ? packet_sendmsg_spkt+0x1440/0x1440 [ 721.940056] ? find_held_lock+0x2c/0x110 [ 721.940674] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 721.941521] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 721.942325] ? __fget_files+0x2f8/0x520 [ 721.942938] ? selinux_socket_setsockopt+0x6a/0x80 [ 721.943711] __sys_setsockopt+0x180/0x2b0 [ 721.944370] ? packet_sendmsg_spkt+0x1440/0x1440 [ 721.945089] ? __ia32_sys_recv+0x100/0x100 [ 721.945733] ? fput_many+0x2f/0x1a0 [ 721.946286] ? ksys_write+0x1a9/0x260 [ 721.946888] ? __ia32_sys_read+0xb0/0xb0 [ 721.947527] __x64_sys_setsockopt+0xba/0x160 [ 721.948098] FAULT_INJECTION: forcing a failure. [ 721.948098] name failslab, interval 1, probability 0, space 0, times 0 [ 721.948214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.948234] do_syscall_64+0x33/0x40 [ 721.952063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.952851] RIP: 0033:0x7fda4e524b19 [ 721.953409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.956239] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.957380] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 721.958460] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 721.959551] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 721.960634] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 721.961716] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 721.962830] CPU: 1 PID: 6538 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 721.964430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.966310] Call Trace: [ 721.966923] dump_stack+0x107/0x167 [ 721.967744] should_fail.cold+0x5/0xa [ 721.968608] ? create_object.isra.0+0x3a/0xa20 [ 721.969637] should_failslab+0x5/0x20 [ 721.970494] kmem_cache_alloc+0x5b/0x310 [ 721.971436] create_object.isra.0+0x3a/0xa20 [ 721.972422] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 721.973578] kmem_cache_alloc+0x159/0x310 [ 721.974528] __d_alloc+0x2a/0x990 [ 721.975323] d_alloc_pseudo+0x19/0x70 [ 721.976190] alloc_file_pseudo+0xce/0x250 [ 721.977119] ? alloc_file+0x5a0/0x5a0 [ 721.977979] ? security_perf_event_alloc+0x79/0xa0 [ 721.979093] ? ctx_sched_out+0xa00/0xa00 [ 721.980021] anon_inode_getfile+0xc8/0x1f0 [ 721.980986] __do_sys_perf_event_open+0xf59/0x2e60 22:57:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) [ 721.982104] ? __mutex_unlock_slowpath+0x70/0x600 [ 721.983460] ? perf_event_set_output+0x5b0/0x5b0 [ 721.984534] ? wait_for_completion_io+0x270/0x270 [ 721.985652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 721.986851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.988023] do_syscall_64+0x33/0x40 [ 721.988860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.990017] RIP: 0033:0x7f8615117b19 [ 721.990866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.995029] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 721.996750] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 721.998357] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 721.999979] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.001589] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 722.003208] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 722.008530] FAULT_INJECTION: forcing a failure. [ 722.008530] name failslab, interval 1, probability 0, space 0, times 0 [ 722.009962] CPU: 0 PID: 6542 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 722.010800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.011792] Call Trace: [ 722.012115] dump_stack+0x107/0x167 [ 722.012700] should_fail.cold+0x5/0xa [ 722.013252] ? create_object.isra.0+0x3a/0xa20 [ 722.013806] should_failslab+0x5/0x20 [ 722.014269] kmem_cache_alloc+0x5b/0x310 [ 722.014772] create_object.isra.0+0x3a/0xa20 [ 722.015318] kmemleak_alloc_percpu+0xa0/0x100 [ 722.015858] pcpu_alloc+0x4e2/0x1240 [ 722.016317] ? io_tctx_exit_cb+0xf0/0xf0 [ 722.016808] percpu_ref_init+0x31/0x3d0 [ 722.017296] io_uring_setup+0x47a/0x2980 [ 722.017781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 722.018364] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 722.018981] ? wait_for_completion_io+0x270/0x270 [ 722.019576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.020205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.020829] do_syscall_64+0x33/0x40 [ 722.021279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.021892] RIP: 0033:0x7fe1ce9abb19 [ 722.022337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.024557] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 722.025486] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 722.026342] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 722.027204] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 722.028059] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 722.028917] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 722.038581] device lo left promiscuous mode 22:57:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 722.048310] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) 22:57:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 8) 22:57:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 10) 22:57:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x3, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 722.144713] FAULT_INJECTION: forcing a failure. [ 722.144713] name failslab, interval 1, probability 0, space 0, times 0 [ 722.147834] CPU: 1 PID: 6549 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 722.149389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.151271] Call Trace: [ 722.151869] dump_stack+0x107/0x167 [ 722.152702] should_fail.cold+0x5/0xa [ 722.153561] ? create_object.isra.0+0x3a/0xa20 [ 722.154605] should_failslab+0x5/0x20 [ 722.155617] kmem_cache_alloc+0x5b/0x310 [ 722.156545] create_object.isra.0+0x3a/0xa20 [ 722.157551] kmemleak_alloc_percpu+0xa0/0x100 [ 722.158575] pcpu_alloc+0x4e2/0x1240 [ 722.159450] ? io_tctx_exit_cb+0xf0/0xf0 [ 722.160377] percpu_ref_init+0x31/0x3d0 [ 722.161283] io_uring_setup+0x47a/0x2980 [ 722.162208] ? __mutex_unlock_slowpath+0xe1/0x600 [ 722.163306] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 722.164448] ? wait_for_completion_io+0x270/0x270 [ 722.165560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.166749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.167918] do_syscall_64+0x33/0x40 [ 722.168763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.169926] RIP: 0033:0x7fe1ce9abb19 [ 722.170775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.174954] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 722.176688] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 722.178309] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 722.179928] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 722.181537] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 722.183155] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 722.211821] device lo entered promiscuous mode [ 722.215476] FAULT_INJECTION: forcing a failure. [ 722.215476] name failslab, interval 1, probability 0, space 0, times 0 [ 722.218223] CPU: 1 PID: 6550 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 722.219775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.221659] Call Trace: [ 722.222261] dump_stack+0x107/0x167 [ 722.223093] should_fail.cold+0x5/0xa [ 722.223959] should_failslab+0x5/0x20 [ 722.224831] __kmalloc_node_track_caller+0x74/0x3b0 [ 722.225952] ? netlink_trim+0x1ee/0x250 [ 722.226871] pskb_expand_head+0x15a/0x1040 [ 722.227840] netlink_trim+0x1ee/0x250 [ 722.228703] netlink_broadcast_filtered+0x62/0xe00 [ 722.229817] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 722.230908] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 722.231978] nlmsg_notify+0x94/0x290 [ 722.232824] rtmsg_ifinfo+0xf5/0x120 [ 722.233666] __dev_notify_flags+0x22a/0x2c0 [ 722.234647] ? dev_change_name+0x6b0/0x6b0 [ 722.235615] ? kmem_cache_alloc_trace+0x151/0x320 [ 722.236718] __dev_set_promiscuity+0x19b/0x220 [ 722.237759] dev_set_promiscuity+0x4f/0x160 [ 722.238740] packet_dev_mc+0x73/0x2a0 [ 722.239599] packet_setsockopt+0x28c8/0x3b30 [ 722.240593] ? packet_sendmsg_spkt+0x1440/0x1440 [ 722.241657] ? find_held_lock+0x2c/0x110 [ 722.242579] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 722.243847] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 722.245034] ? __fget_files+0x2f8/0x520 [ 722.245943] ? selinux_socket_setsockopt+0x6a/0x80 [ 722.247065] __sys_setsockopt+0x180/0x2b0 [ 722.247997] ? packet_sendmsg_spkt+0x1440/0x1440 [ 722.249063] ? __ia32_sys_recv+0x100/0x100 [ 722.250016] ? fput_many+0x2f/0x1a0 [ 722.250845] ? ksys_write+0x1a9/0x260 [ 722.251709] ? __ia32_sys_read+0xb0/0xb0 [ 722.252632] __x64_sys_setsockopt+0xba/0x160 [ 722.253626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.254792] do_syscall_64+0x33/0x40 [ 722.255629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.256791] RIP: 0033:0x7fda4e524b19 [ 722.257625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.261791] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 722.263526] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 722.265135] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 722.266741] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 722.268343] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 722.269943] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 722.300246] FAULT_INJECTION: forcing a failure. [ 722.300246] name failslab, interval 1, probability 0, space 0, times 0 [ 722.304167] CPU: 1 PID: 6557 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 722.305854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.307883] Call Trace: [ 722.308481] dump_stack+0x107/0x167 [ 722.309311] should_fail.cold+0x5/0xa [ 722.310182] ? create_object.isra.0+0x3a/0xa20 [ 722.311368] should_failslab+0x5/0x20 [ 722.312237] kmem_cache_alloc+0x5b/0x310 [ 722.313272] create_object.isra.0+0x3a/0xa20 [ 722.314403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 722.315604] kmem_cache_alloc+0x159/0x310 [ 722.316621] __d_alloc+0x2a/0x990 [ 722.317419] d_alloc_pseudo+0x19/0x70 [ 722.318278] alloc_file_pseudo+0xce/0x250 [ 722.319224] ? alloc_file+0x5a0/0x5a0 [ 722.320087] ? security_perf_event_alloc+0x79/0xa0 [ 722.321196] ? ctx_sched_out+0xa00/0xa00 [ 722.322124] anon_inode_getfile+0xc8/0x1f0 [ 722.323098] __do_sys_perf_event_open+0xf59/0x2e60 [ 722.324212] ? __mutex_unlock_slowpath+0x70/0x600 [ 722.325307] ? perf_event_set_output+0x5b0/0x5b0 [ 722.326385] ? wait_for_completion_io+0x270/0x270 [ 722.327510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.328699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.329867] do_syscall_64+0x33/0x40 [ 722.330724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.331892] RIP: 0033:0x7f8615117b19 [ 722.332733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.336905] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 722.338636] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 722.340256] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 722.341860] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.343477] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 722.345091] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 722.465058] device lo left promiscuous mode 22:58:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x5, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:58:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:58:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:58:06 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) 22:58:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 11) 22:58:06 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 9) 22:58:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 736.842302] FAULT_INJECTION: forcing a failure. [ 736.842302] name failslab, interval 1, probability 0, space 0, times 0 [ 736.844759] CPU: 1 PID: 6571 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 736.845713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 736.846868] Call Trace: [ 736.847239] dump_stack+0x107/0x167 [ 736.847746] should_fail.cold+0x5/0xa [ 736.848286] ? percpu_ref_init+0xd8/0x3d0 [ 736.848860] should_failslab+0x5/0x20 [ 736.849385] kmem_cache_alloc_trace+0x55/0x320 [ 736.850033] ? io_tctx_exit_cb+0xf0/0xf0 [ 736.850597] percpu_ref_init+0xd8/0x3d0 [ 736.851162] io_uring_setup+0x47a/0x2980 [ 736.851727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 736.852398] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 736.853097] ? wait_for_completion_io+0x270/0x270 [ 736.853790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 736.854517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 736.854919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 736.855254] do_syscall_64+0x33/0x40 [ 736.857853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 736.858564] RIP: 0033:0x7fe1ce9abb19 [ 736.859090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 736.861662] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 736.862721] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 736.863718] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 736.864707] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 736.865698] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 736.866693] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 736.869030] device lo entered promiscuous mode [ 736.871119] FAULT_INJECTION: forcing a failure. [ 736.871119] name failslab, interval 1, probability 0, space 0, times 0 [ 736.873962] CPU: 0 PID: 6576 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 736.875885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 736.877909] Call Trace: [ 736.878555] dump_stack+0x107/0x167 [ 736.879449] should_fail.cold+0x5/0xa [ 736.880377] ? create_object.isra.0+0x3a/0xa20 [ 736.881489] should_failslab+0x5/0x20 [ 736.882408] kmem_cache_alloc+0x5b/0x310 [ 736.883410] create_object.isra.0+0x3a/0xa20 [ 736.884472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 736.885713] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 736.886945] ? netlink_trim+0x1ee/0x250 [ 736.887923] pskb_expand_head+0x15a/0x1040 [ 736.888963] netlink_trim+0x1ee/0x250 [ 736.889885] netlink_broadcast_filtered+0x62/0xe00 [ 736.891088] ? rtmsg_ifinfo_build_skb+0x77/0x1b0 [ 736.892241] ? rtmsg_ifinfo_build_skb+0xdb/0x1b0 [ 736.893395] nlmsg_notify+0x94/0x290 [ 736.894297] rtmsg_ifinfo+0xf5/0x120 [ 736.895215] __dev_notify_flags+0x22a/0x2c0 [ 736.896259] ? dev_change_name+0x6b0/0x6b0 [ 736.897294] ? kmem_cache_alloc_trace+0x151/0x320 [ 736.898471] __dev_set_promiscuity+0x19b/0x220 [ 736.899588] dev_set_promiscuity+0x4f/0x160 [ 736.900632] packet_dev_mc+0x73/0x2a0 [ 736.901561] packet_setsockopt+0x28c8/0x3b30 [ 736.902637] ? packet_sendmsg_spkt+0x1440/0x1440 [ 736.903797] ? find_held_lock+0x2c/0x110 [ 736.904790] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 736.906153] ? selinux_netlbl_sock_rcv_skb+0x540/0x540 [ 736.907444] ? __fget_files+0x2f8/0x520 [ 736.908420] ? selinux_socket_setsockopt+0x6a/0x80 [ 736.909632] __sys_setsockopt+0x180/0x2b0 [ 736.910645] ? packet_sendmsg_spkt+0x1440/0x1440 [ 736.911814] ? __ia32_sys_recv+0x100/0x100 [ 736.912845] ? fput_many+0x2f/0x1a0 [ 736.913729] ? ksys_write+0x1a9/0x260 [ 736.914657] ? __ia32_sys_read+0xb0/0xb0 [ 736.915653] __x64_sys_setsockopt+0xba/0x160 [ 736.916719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 736.917977] do_syscall_64+0x33/0x40 [ 736.918885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 736.920125] RIP: 0033:0x7fda4e524b19 [ 736.921041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 736.925530] RSP: 002b:00007fda4ba9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 736.927389] RAX: ffffffffffffffda RBX: 00007fda4e637f60 RCX: 00007fda4e524b19 [ 736.929128] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 736.930877] RBP: 00007fda4ba9a1d0 R08: 0000000000000010 R09: 0000000000000000 [ 736.932606] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 736.934346] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 736.944282] FAULT_INJECTION: forcing a failure. [ 736.944282] name failslab, interval 1, probability 0, space 0, times 0 [ 736.945916] CPU: 1 PID: 6577 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 736.946885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 736.948041] Call Trace: [ 736.948421] dump_stack+0x107/0x167 [ 736.948936] should_fail.cold+0x5/0xa [ 736.949478] ? create_object.isra.0+0x3a/0xa20 [ 736.950133] should_failslab+0x5/0x20 [ 736.950669] kmem_cache_alloc+0x5b/0x310 [ 736.951263] create_object.isra.0+0x3a/0xa20 [ 736.951882] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 736.952596] kmem_cache_alloc+0x159/0x310 [ 736.953183] __alloc_file+0x21/0x320 [ 736.953707] alloc_empty_file+0x6d/0x170 [ 736.954278] alloc_file+0x5e/0x5a0 [ 736.954789] alloc_file_pseudo+0x16a/0x250 [ 736.955389] ? alloc_file+0x5a0/0x5a0 [ 736.955930] ? security_perf_event_alloc+0x79/0xa0 [ 736.956629] ? ctx_sched_out+0xa00/0xa00 [ 736.957217] anon_inode_getfile+0xc8/0x1f0 [ 736.957814] __do_sys_perf_event_open+0xf59/0x2e60 [ 736.958511] ? __mutex_unlock_slowpath+0x70/0x600 [ 736.959198] ? perf_event_set_output+0x5b0/0x5b0 [ 736.959859] ? wait_for_completion_io+0x270/0x270 [ 736.960556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 736.961288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 736.962016] do_syscall_64+0x33/0x40 [ 736.962542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 736.963264] RIP: 0033:0x7f8615117b19 [ 736.963790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 736.966373] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 736.967450] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 736.968449] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 736.969451] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.970454] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 736.971480] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 737.062555] device lo left promiscuous mode [ 748.945469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x7, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:58:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) (fail_nth: 10) 22:58:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:58:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) 22:58:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:58:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 12) 22:58:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 748.956371] FAULT_INJECTION: forcing a failure. [ 748.956371] name failslab, interval 1, probability 0, space 0, times 0 [ 748.959070] CPU: 0 PID: 6604 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 748.960616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 748.962504] Call Trace: [ 748.963110] dump_stack+0x107/0x167 [ 748.963935] should_fail.cold+0x5/0xa [ 748.964797] ? security_file_alloc+0x34/0x170 [ 748.965816] should_failslab+0x5/0x20 [ 748.966666] kmem_cache_alloc+0x5b/0x310 [ 748.967593] security_file_alloc+0x34/0x170 [ 748.968581] __alloc_file+0xb7/0x320 [ 748.969425] alloc_empty_file+0x6d/0x170 [ 748.970368] alloc_file+0x5e/0x5a0 [ 748.971204] alloc_file_pseudo+0x16a/0x250 [ 748.972178] ? alloc_file+0x5a0/0x5a0 [ 748.973060] ? security_perf_event_alloc+0x79/0xa0 [ 748.974195] ? ctx_sched_out+0xa00/0xa00 [ 748.975147] anon_inode_getfile+0xc8/0x1f0 [ 748.976130] __do_sys_perf_event_open+0xf59/0x2e60 [ 748.977264] ? __mutex_unlock_slowpath+0x70/0x600 [ 748.978379] ? perf_event_set_output+0x5b0/0x5b0 [ 748.979474] ? wait_for_completion_io+0x270/0x270 [ 748.980586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 748.981944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 748.983142] do_syscall_64+0x33/0x40 [ 748.983982] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 748.985167] RIP: 0033:0x7f8615117b19 [ 748.986026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 748.990299] RSP: 002b:00007f861268d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 748.992069] RAX: ffffffffffffffda RBX: 00007f861522af60 RCX: 00007f8615117b19 [ 748.993722] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 748.995383] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.997030] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 748.998677] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 749.001467] device lo entered promiscuous mode [ 749.005252] FAULT_INJECTION: forcing a failure. [ 749.005252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.007174] CPU: 1 PID: 6603 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 749.008381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.009507] Call Trace: [ 749.009868] dump_stack+0x107/0x167 [ 749.010366] should_fail.cold+0x5/0xa 22:58:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 749.010890] _copy_to_user+0x2e/0x180 [ 749.011679] simple_read_from_buffer+0xcc/0x160 [ 749.012325] proc_fail_nth_read+0x198/0x230 [ 749.012916] ? proc_sessionid_read+0x230/0x230 [ 749.013565] ? security_file_permission+0xb1/0xe0 [ 749.014256] ? proc_sessionid_read+0x230/0x230 [ 749.014913] vfs_read+0x228/0x620 [ 749.015406] ksys_read+0x12d/0x260 [ 749.015906] ? vfs_write+0xb10/0xb10 [ 749.016432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 749.017162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 749.017880] do_syscall_64+0x33/0x40 [ 749.018397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 749.019117] RIP: 0033:0x7fda4e4d769c [ 749.019634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 749.022201] RSP: 002b:00007fda4ba9a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 749.023275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda4e4d769c [ 749.024271] RDX: 000000000000000f RSI: 00007fda4ba9a1e0 RDI: 0000000000000005 [ 749.025255] RBP: 00007fda4ba9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.026241] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 749.027212] R13: 00007ffc113be2cf R14: 00007fda4ba9a300 R15: 0000000000022000 [ 749.028932] FAULT_INJECTION: forcing a failure. [ 749.028932] name failslab, interval 1, probability 0, space 0, times 0 [ 749.030490] CPU: 1 PID: 6596 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 749.031432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.032617] Call Trace: [ 749.033167] dump_stack+0x107/0x167 [ 749.033676] should_fail.cold+0x5/0xa [ 749.034202] ? create_object.isra.0+0x3a/0xa20 [ 749.034822] should_failslab+0x5/0x20 [ 749.035354] kmem_cache_alloc+0x5b/0x310 [ 749.035911] create_object.isra.0+0x3a/0xa20 [ 749.036502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 749.037196] kmem_cache_alloc_trace+0x151/0x320 [ 749.037833] ? io_tctx_exit_cb+0xf0/0xf0 [ 749.038399] percpu_ref_init+0xd8/0x3d0 [ 749.038962] io_uring_setup+0x47a/0x2980 [ 749.039524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 749.040181] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 749.040879] ? wait_for_completion_io+0x270/0x270 [ 749.041549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 749.042266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 749.042981] do_syscall_64+0x33/0x40 [ 749.043487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 749.044190] RIP: 0033:0x7fe1ce9abb19 [ 749.044691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.047190] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 749.048242] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 749.049229] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 749.050221] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 749.051204] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 749.052180] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:58:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 749.127838] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x8, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 13) 22:58:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) [ 749.226514] FAULT_INJECTION: forcing a failure. [ 749.226514] name failslab, interval 1, probability 0, space 0, times 0 [ 749.228036] CPU: 1 PID: 6614 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 749.228891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.229924] Call Trace: [ 749.230262] dump_stack+0x107/0x167 [ 749.230712] should_fail.cold+0x5/0xa [ 749.231193] ? create_object.isra.0+0x3a/0xa20 [ 749.231760] should_failslab+0x5/0x20 [ 749.232229] kmem_cache_alloc+0x5b/0x310 [ 749.232742] create_object.isra.0+0x3a/0xa20 [ 749.233300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 749.233940] kmem_cache_alloc+0x159/0x310 [ 749.234456] __alloc_file+0x21/0x320 [ 749.234921] alloc_empty_file+0x6d/0x170 [ 749.235426] alloc_file+0x5e/0x5a0 [ 749.235866] alloc_file_pseudo+0x16a/0x250 [ 749.236387] ? alloc_file+0x5a0/0x5a0 [ 749.236863] ? ctx_sched_out+0xa00/0xa00 [ 749.237367] anon_inode_getfile+0xc8/0x1f0 [ 749.237895] __do_sys_perf_event_open+0xf59/0x2e60 [ 749.238503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 749.239106] ? perf_event_set_output+0x5b0/0x5b0 [ 749.239687] ? wait_for_completion_io+0x270/0x270 [ 749.240276] device lo left promiscuous mode [ 749.240824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 749.241481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 749.242124] do_syscall_64+0x33/0x40 [ 749.242584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 749.243221] RIP: 0033:0x7f8615117b19 [ 749.243677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.245958] RSP: 002b:00007f861266c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 749.246891] RAX: ffffffffffffffda RBX: 00007f861522b020 RCX: 00007f8615117b19 [ 749.247773] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 [ 749.248658] RBP: 00007f861266c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.249529] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 749.250404] R13: 00007ffc81cbd3ff R14: 00007f861266c300 R15: 0000000000022000 22:58:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 749.287301] FAULT_INJECTION: forcing a failure. [ 749.287301] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 749.290331] CPU: 0 PID: 6619 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 749.292036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.293901] Call Trace: [ 749.294500] dump_stack+0x107/0x167 [ 749.295332] should_fail.cold+0x5/0xa [ 749.296200] __alloc_pages_nodemask+0x182/0x600 [ 749.297250] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 749.298603] ? kasan_save_stack+0x32/0x40 [ 749.299552] ? kasan_save_stack+0x1b/0x40 [ 749.300482] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 749.301622] ? kmem_cache_alloc_trace+0x133/0x320 [ 749.302708] ? percpu_ref_init+0xd8/0x3d0 [ 749.303648] ? io_uring_setup+0x47a/0x2980 [ 749.304600] alloc_pages_current+0x187/0x280 [ 749.305593] allocate_slab+0x26f/0x380 [ 749.306475] ___slab_alloc+0x470/0x700 [ 749.307365] ? fs_reclaim_release+0x94/0xd0 [ 749.308336] ? create_object.isra.0+0x3a/0xa20 [ 749.309366] ? fs_reclaim_acquire+0xa5/0x100 [ 749.310366] ? create_object.isra.0+0x3a/0xa20 [ 749.311404] ? kmem_cache_alloc+0x301/0x310 [ 749.312372] kmem_cache_alloc+0x301/0x310 [ 749.313309] create_object.isra.0+0x3a/0xa20 [ 749.314296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 749.315455] kmem_cache_alloc_trace+0x151/0x320 [ 749.316502] ? io_tctx_exit_cb+0xf0/0xf0 [ 749.317421] percpu_ref_init+0xd8/0x3d0 [ 749.318318] io_uring_setup+0x47a/0x2980 [ 749.319250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 749.320338] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 749.321478] ? wait_for_completion_io+0x270/0x270 [ 749.322584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 749.323772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 749.324939] do_syscall_64+0x33/0x40 [ 749.325778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 749.326943] RIP: 0033:0x7fe1ce9abb19 [ 749.327785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.331961] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 749.333676] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 749.335306] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 749.336913] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 749.338522] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 749.340144] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 749.341860] device lo entered promiscuous mode [ 749.350021] device lo left promiscuous mode 22:58:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x9, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:58:19 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x29, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) (fail_nth: 14) [ 749.457001] device lo entered promiscuous mode [ 749.458103] device lo left promiscuous mode [ 749.471954] device lo entered promiscuous mode [ 749.472625] device lo left promiscuous mode 22:58:19 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 749.489088] FAULT_INJECTION: forcing a failure. [ 749.489088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.490727] CPU: 1 PID: 6633 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 749.491636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.492575] Call Trace: [ 749.492883] dump_stack+0x107/0x167 [ 749.493297] should_fail.cold+0x5/0xa [ 749.493735] _copy_to_user+0x2e/0x180 [ 749.494170] simple_read_from_buffer+0xcc/0x160 [ 749.494699] proc_fail_nth_read+0x198/0x230 [ 749.495207] ? proc_sessionid_read+0x230/0x230 [ 749.495733] ? security_file_permission+0xb1/0xe0 [ 749.496286] ? proc_sessionid_read+0x230/0x230 [ 749.496808] vfs_read+0x228/0x620 [ 749.497206] ksys_read+0x12d/0x260 [ 749.497609] ? vfs_write+0xb10/0xb10 [ 749.498033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 749.498634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 749.499234] do_syscall_64+0x33/0x40 [ 749.499656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 749.500242] RIP: 0033:0x7f86150ca69c [ 749.500664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 749.502739] RSP: 002b:00007f861268d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 749.503602] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f86150ca69c [ 749.504410] RDX: 000000000000000f RSI: 00007f861268d1e0 RDI: 0000000000000004 [ 749.505218] RBP: 00007f861268d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.506028] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 749.506846] R13: 00007ffc81cbd3ff R14: 00007f861268d300 R15: 0000000000022000 [ 749.544915] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0xa, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:58:31 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x125, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:58:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) 22:58:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:58:31 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:58:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) [ 762.227142] FAULT_INJECTION: forcing a failure. [ 762.227142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.228791] CPU: 0 PID: 6645 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 762.229710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 762.230824] Call Trace: [ 762.231194] dump_stack+0x107/0x167 [ 762.231681] should_fail.cold+0x5/0xa [ 762.232195] __alloc_pages_nodemask+0x182/0x600 [ 762.232820] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 762.233629] ? cap_capable+0x1cd/0x230 [ 762.234161] alloc_pages_current+0x187/0x280 [ 762.234762] __get_free_pages+0xc/0xa0 [ 762.235300] io_uring_setup+0xf9a/0x2980 [ 762.235850] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 762.236527] ? wait_for_completion_io+0x270/0x270 [ 762.237187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 762.237892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 762.238585] do_syscall_64+0x33/0x40 [ 762.239090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 762.239777] RIP: 0033:0x7fe1ce9abb19 [ 762.240280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 762.242764] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 762.243793] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 762.244753] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 762.245704] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 762.246658] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 762.247620] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:58:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 762.259244] device lo entered promiscuous mode [ 762.263344] device lo left promiscuous mode [ 762.269128] device lo entered promiscuous mode [ 762.269931] device lo left promiscuous mode [ 762.289281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:58:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:58:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) [ 762.368209] FAULT_INJECTION: forcing a failure. [ 762.368209] name failslab, interval 1, probability 0, space 0, times 0 [ 762.369659] CPU: 0 PID: 6667 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 762.370522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 762.371582] Call Trace: [ 762.371921] dump_stack+0x107/0x167 [ 762.372390] should_fail.cold+0x5/0xa [ 762.372877] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 762.373579] should_failslab+0x5/0x20 [ 762.374058] kmem_cache_alloc_trace+0x55/0x320 [ 762.374636] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 762.375329] io_uring_setup+0x14f6/0x2980 [ 762.375851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 762.376490] ? wait_for_completion_io+0x270/0x270 [ 762.377110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 762.377776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 762.378455] do_syscall_64+0x33/0x40 [ 762.379008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 762.379752] RIP: 0033:0x7fe1ce9abb19 [ 762.380217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 762.382525] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 762.383518] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 762.384406] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 762.385296] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 762.386185] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 762.387076] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:58:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0xc, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:32 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 762.451074] device lo entered promiscuous mode [ 762.465455] device lo left promiscuous mode [ 762.474841] device lo entered promiscuous mode [ 762.493341] device lo left promiscuous mode 22:58:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:58:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0xd, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:45 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:58:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:58:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) 22:58:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x3, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:58:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 775.620515] FAULT_INJECTION: forcing a failure. [ 775.620515] name failslab, interval 1, probability 0, space 0, times 0 [ 775.621150] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 775.623248] CPU: 0 PID: 6697 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 775.623261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.628321] Call Trace: [ 775.628959] dump_stack+0x107/0x167 [ 775.629833] should_fail.cold+0x5/0xa [ 775.630746] ? create_object.isra.0+0x3a/0xa20 [ 775.631852] should_failslab+0x5/0x20 [ 775.632763] kmem_cache_alloc+0x5b/0x310 [ 775.633737] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 775.635194] create_object.isra.0+0x3a/0xa20 [ 775.636245] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 775.637465] kmem_cache_alloc_trace+0x151/0x320 [ 775.638586] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 775.639891] io_uring_setup+0x14f6/0x2980 [ 775.640892] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 775.642103] ? wait_for_completion_io+0x270/0x270 [ 775.643291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 775.644548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 775.645791] do_syscall_64+0x33/0x40 [ 775.646685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 775.647919] RIP: 0033:0x7fe1ce9abb19 [ 775.648809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.653237] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 775.655067] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 775.656786] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 775.658503] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 775.660220] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 775.661941] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 775.671836] device lo entered promiscuous mode [ 775.681635] device lo left promiscuous mode 22:58:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:58:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0xe, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x5, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 775.856362] device lo entered promiscuous mode [ 775.857288] device lo left promiscuous mode 22:58:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:58:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) [ 775.924668] device lo entered promiscuous mode [ 775.925578] device lo left promiscuous mode 22:58:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0xf, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:58:45 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x7, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:58:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 775.981597] FAULT_INJECTION: forcing a failure. [ 775.981597] name failslab, interval 1, probability 0, space 0, times 0 [ 775.983185] CPU: 1 PID: 6718 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 775.984113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.985247] Call Trace: [ 775.985610] dump_stack+0x107/0x167 [ 775.986107] should_fail.cold+0x5/0xa [ 775.986626] ? create_object.isra.0+0x3a/0xa20 [ 775.987258] should_failslab+0x5/0x20 [ 775.987774] kmem_cache_alloc+0x5b/0x310 [ 775.988327] create_object.isra.0+0x3a/0xa20 [ 775.988926] kmemleak_alloc_percpu+0xa0/0x100 [ 775.989533] pcpu_alloc+0x4e2/0x1240 [ 775.990043] ? io_async_queue_proc+0x80/0x80 [ 775.990636] percpu_ref_init+0x31/0x3d0 [ 775.991180] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 775.991916] io_uring_setup+0x14f6/0x2980 [ 775.992479] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 775.993163] ? wait_for_completion_io+0x270/0x270 [ 775.993827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 775.994538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 775.995241] do_syscall_64+0x33/0x40 [ 775.995745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 775.996435] RIP: 0033:0x7fe1ce9abb19 [ 775.996936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.999432] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 776.000464] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 776.001430] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 776.002393] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 776.003363] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 776.004330] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:58:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 776.077678] device lo entered promiscuous mode [ 776.089488] device lo left promiscuous mode [ 776.102997] device lo entered promiscuous mode [ 776.108942] device lo left promiscuous mode 22:58:45 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 776.216352] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:59:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) 22:59:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x11, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:59:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x8, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:00 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:59:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 791.027860] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 791.035085] device lo entered promiscuous mode [ 791.037432] device lo left promiscuous mode [ 791.045543] device lo entered promiscuous mode [ 791.046836] device lo left promiscuous mode 22:59:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x12, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x9, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 791.118554] FAULT_INJECTION: forcing a failure. [ 791.118554] name failslab, interval 1, probability 0, space 0, times 0 [ 791.118692] device lo entered promiscuous mode [ 791.120142] CPU: 0 PID: 6741 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 791.122071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 791.123163] Call Trace: [ 791.123533] dump_stack+0x107/0x167 [ 791.124028] should_fail.cold+0x5/0xa [ 791.124547] ? create_object.isra.0+0x3a/0xa20 [ 791.125170] should_failslab+0x5/0x20 [ 791.125687] kmem_cache_alloc+0x5b/0x310 [ 791.126282] create_object.isra.0+0x3a/0xa20 [ 791.127004] kmemleak_alloc_percpu+0xa0/0x100 [ 791.127621] pcpu_alloc+0x4e2/0x1240 [ 791.128132] ? io_async_queue_proc+0x80/0x80 [ 791.128729] percpu_ref_init+0x31/0x3d0 [ 791.129270] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 791.130005] io_uring_setup+0x14f6/0x2980 [ 791.130575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 791.131264] ? wait_for_completion_io+0x270/0x270 [ 791.131954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 791.132671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 791.133373] do_syscall_64+0x33/0x40 [ 791.133877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 791.134577] RIP: 0033:0x7fe1ce9abb19 [ 791.135071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 791.137585] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 791.138583] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 791.139559] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 791.140505] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 791.141466] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 791.142414] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x18, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 791.167578] device lo left promiscuous mode [ 791.174958] device lo entered promiscuous mode [ 791.175859] device lo left promiscuous mode 22:59:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 803.520224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:59:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0xa, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:59:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x13, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:59:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x300, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) [ 803.543041] device lo entered promiscuous mode [ 803.544025] FAULT_INJECTION: forcing a failure. [ 803.544025] name failslab, interval 1, probability 0, space 0, times 0 [ 803.545803] CPU: 1 PID: 6781 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 803.546776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.547939] Call Trace: [ 803.548312] dump_stack+0x107/0x167 [ 803.548835] should_fail.cold+0x5/0xa [ 803.549382] ? percpu_ref_init+0xd8/0x3d0 [ 803.549967] should_failslab+0x5/0x20 [ 803.550499] kmem_cache_alloc_trace+0x55/0x320 [ 803.551135] ? io_async_queue_proc+0x80/0x80 [ 803.551752] percpu_ref_init+0xd8/0x3d0 [ 803.552339] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 803.553095] io_uring_setup+0x14f6/0x2980 [ 803.553677] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 803.554379] ? wait_for_completion_io+0x270/0x270 [ 803.555072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.555804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.556524] do_syscall_64+0x33/0x40 [ 803.557047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.557769] RIP: 0033:0x7fe1ce9abb19 [ 803.558284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.560863] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 803.561925] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 803.562942] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 803.563944] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 803.564934] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 803.565936] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 803.574814] device lo left promiscuous mode [ 803.594672] device lo entered promiscuous mode [ 803.596916] device lo left promiscuous mode 22:59:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x14, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 803.638001] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:59:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) 22:59:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x600, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 803.750860] FAULT_INJECTION: forcing a failure. [ 803.750860] name failslab, interval 1, probability 0, space 0, times 0 [ 803.752194] CPU: 1 PID: 6800 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 803.752967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.753903] Call Trace: [ 803.754217] dump_stack+0x107/0x167 [ 803.754636] should_fail.cold+0x5/0xa [ 803.755069] ? create_object.isra.0+0x3a/0xa20 [ 803.755602] should_failslab+0x5/0x20 [ 803.756033] kmem_cache_alloc+0x5b/0x310 [ 803.756495] create_object.isra.0+0x3a/0xa20 [ 803.756992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 803.757573] kmem_cache_alloc_trace+0x151/0x320 [ 803.758103] ? io_async_queue_proc+0x80/0x80 [ 803.758602] percpu_ref_init+0xd8/0x3d0 [ 803.759055] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 803.759674] io_uring_setup+0x14f6/0x2980 [ 803.760151] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 803.760725] ? wait_for_completion_io+0x270/0x270 [ 803.761283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.761883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.762469] do_syscall_64+0x33/0x40 [ 803.762891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.763480] RIP: 0033:0x7fe1ce9abb19 [ 803.763903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.765995] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 803.766855] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 803.767665] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 803.768477] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 803.769282] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 803.770090] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0xc, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 803.797498] device lo entered promiscuous mode [ 803.812385] device lo left promiscuous mode 22:59:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x16, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) [ 803.855219] device lo entered promiscuous mode [ 803.857703] FAULT_INJECTION: forcing a failure. [ 803.857703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.859151] CPU: 1 PID: 6813 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 803.859943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.861060] Call Trace: [ 803.861369] dump_stack+0x107/0x167 [ 803.861786] should_fail.cold+0x5/0xa [ 803.862224] _copy_to_user+0x2e/0x180 [ 803.862669] io_uring_setup+0x11b5/0x2980 [ 803.863149] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 803.863734] ? wait_for_completion_io+0x270/0x270 [ 803.864290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.864885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.865538] do_syscall_64+0x33/0x40 [ 803.866068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.866684] RIP: 0033:0x7fe1ce9abb19 [ 803.867224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.867575] device lo left promiscuous mode [ 803.869313] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 803.869326] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 803.869332] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 803.869338] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 803.869343] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 803.869349] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 803.884141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 816.590908] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 22:59:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0xd, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) 22:59:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:59:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:59:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xa00, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x17, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 816.633242] device lo entered promiscuous mode [ 816.634117] device lo left promiscuous mode [ 816.641074] device lo entered promiscuous mode [ 816.641767] device lo left promiscuous mode [ 816.644657] FAULT_INJECTION: forcing a failure. [ 816.644657] name failslab, interval 1, probability 0, space 0, times 0 [ 816.646015] CPU: 1 PID: 6837 Comm: syz-executor.4 Not tainted 5.10.238 #1 22:59:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 816.646795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.647913] Call Trace: [ 816.648228] dump_stack+0x107/0x167 [ 816.648647] should_fail.cold+0x5/0xa [ 816.649091] ? __d_alloc+0x2a/0x990 [ 816.649516] should_failslab+0x5/0x20 [ 816.649962] kmem_cache_alloc+0x5b/0x310 [ 816.650437] __d_alloc+0x2a/0x990 [ 816.650840] ? find_held_lock+0x2c/0x110 [ 816.651307] d_alloc_pseudo+0x19/0x70 [ 816.651756] alloc_file_pseudo+0xce/0x250 [ 816.652225] ? trace_hardirqs_on+0x5b/0x180 [ 816.652741] ? alloc_file+0x5a0/0x5a0 [ 816.653201] anon_inode_getfile+0xc8/0x1f0 [ 816.653706] io_uring_setup+0x138b/0x2980 [ 816.654198] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 816.654804] ? wait_for_completion_io+0x270/0x270 [ 816.655390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.656033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.656661] do_syscall_64+0x33/0x40 [ 816.657120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.657727] RIP: 0033:0x7fe1ce9abb19 [ 816.658175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.660402] RSP: 002b:00007fe1cbf00108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 816.661311] RAX: ffffffffffffffda RBX: 00007fe1ceabf020 RCX: 00007fe1ce9abb19 [ 816.662175] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 816.663021] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 816.663877] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 816.664729] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1800, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0xe, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x25, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 816.734688] device lo entered promiscuous mode [ 816.739432] device lo left promiscuous mode [ 816.762099] device lo entered promiscuous mode [ 816.763153] device lo left promiscuous mode 22:59:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1f00, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x32, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) 22:59:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0xf, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 816.855451] FAULT_INJECTION: forcing a failure. [ 816.855451] name failslab, interval 1, probability 0, space 0, times 0 [ 816.857025] CPU: 1 PID: 6858 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 816.858061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.858997] Call Trace: [ 816.859303] dump_stack+0x107/0x167 [ 816.859732] should_fail.cold+0x5/0xa [ 816.860168] ? create_object.isra.0+0x3a/0xa20 [ 816.860687] should_failslab+0x5/0x20 [ 816.861122] kmem_cache_alloc+0x5b/0x310 [ 816.861626] create_object.isra.0+0x3a/0xa20 [ 816.862218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 816.862794] kmem_cache_alloc+0x159/0x310 [ 816.863270] __d_alloc+0x2a/0x990 [ 816.863674] ? find_held_lock+0x2c/0x110 [ 816.864286] d_alloc_pseudo+0x19/0x70 [ 816.864742] alloc_file_pseudo+0xce/0x250 [ 816.865221] ? trace_hardirqs_on+0x5b/0x180 [ 816.865876] ? alloc_file+0x5a0/0x5a0 [ 816.866319] anon_inode_getfile+0xc8/0x1f0 [ 816.866802] io_uring_setup+0x138b/0x2980 [ 816.867279] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 816.867864] ? wait_for_completion_io+0x270/0x270 [ 816.868431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.869025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.869609] do_syscall_64+0x33/0x40 [ 816.870033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.870612] RIP: 0033:0x7fe1ce9abb19 [ 816.871036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.873133] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 816.873994] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 816.874802] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 816.875615] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 816.875981] device lo entered promiscuous mode [ 816.876422] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 816.876429] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 816.915299] device lo left promiscuous mode 22:59:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x3d5, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:59:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:59:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) 22:59:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x11, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 829.066094] device lo entered promiscuous mode [ 829.072190] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 829.079657] device lo left promiscuous mode [ 829.087393] device lo entered promiscuous mode [ 829.088828] device lo left promiscuous mode [ 829.137705] FAULT_INJECTION: forcing a failure. [ 829.137705] name failslab, interval 1, probability 0, space 0, times 0 [ 829.140474] CPU: 1 PID: 6878 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 829.141953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.143750] Call Trace: [ 829.144330] dump_stack+0x107/0x167 [ 829.145117] should_fail.cold+0x5/0xa [ 829.145938] ? __alloc_file+0x21/0x320 [ 829.146778] should_failslab+0x5/0x20 [ 829.147762] kmem_cache_alloc+0x5b/0x310 [ 829.148643] __alloc_file+0x21/0x320 [ 829.149444] alloc_empty_file+0x6d/0x170 [ 829.150317] alloc_file+0x5e/0x5a0 [ 829.151087] alloc_file_pseudo+0x16a/0x250 [ 829.152007] ? alloc_file+0x5a0/0x5a0 [ 829.152844] anon_inode_getfile+0xc8/0x1f0 [ 829.153904] io_uring_setup+0x138b/0x2980 [ 829.154807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 829.155919] ? wait_for_completion_io+0x270/0x270 [ 829.156979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.158114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.159228] do_syscall_64+0x33/0x40 [ 829.160046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.161151] RIP: 0033:0x7fe1ce9abb19 [ 829.161950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.165929] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 829.167588] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 829.169151] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 829.170698] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 829.172254] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 829.173787] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x500, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 22:59:38 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x12, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x4000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) [ 829.338655] device lo entered promiscuous mode [ 829.341105] device lo left promiscuous mode [ 829.364282] FAULT_INJECTION: forcing a failure. [ 829.364282] name failslab, interval 1, probability 0, space 0, times 0 [ 829.367272] CPU: 1 PID: 6900 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 829.369088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 829.371069] Call Trace: [ 829.371744] dump_stack+0x107/0x167 [ 829.372671] should_fail.cold+0x5/0xa [ 829.373550] ? create_object.isra.0+0x3a/0xa20 [ 829.374681] should_failslab+0x5/0x20 [ 829.375502] kmem_cache_alloc+0x5b/0x310 [ 829.376394] create_object.isra.0+0x3a/0xa20 [ 829.377449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 829.378557] kmem_cache_alloc+0x159/0x310 [ 829.379673] __alloc_file+0x21/0x320 [ 829.380693] alloc_empty_file+0x6d/0x170 [ 829.381577] alloc_file+0x5e/0x5a0 [ 829.382345] alloc_file_pseudo+0x16a/0x250 [ 829.383351] ? alloc_file+0x5a0/0x5a0 [ 829.384203] anon_inode_getfile+0xc8/0x1f0 [ 829.385131] io_uring_setup+0x138b/0x2980 [ 829.386043] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 829.387321] ? wait_for_completion_io+0x270/0x270 [ 829.388606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 829.389742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 829.390866] do_syscall_64+0x33/0x40 [ 829.391679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 829.392795] RIP: 0033:0x7fe1ce9abb19 [ 829.393595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.397950] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 829.399810] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 829.401501] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 829.403041] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 829.404841] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 829.406570] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x13, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 22:59:53 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x80000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r10, 0x0, r9, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x20d315) 22:59:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 22:59:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:53 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 22:59:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x7ffffff2, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 843.481777] device lo entered promiscuous mode [ 843.489235] device lo left promiscuous mode [ 843.530166] device lo entered promiscuous mode [ 843.531086] device lo left promiscuous mode [ 843.538031] FAULT_INJECTION: forcing a failure. [ 843.538031] name failslab, interval 1, probability 0, space 0, times 0 [ 843.540813] CPU: 1 PID: 6926 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 843.542298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.544093] Call Trace: [ 843.544664] dump_stack+0x107/0x167 [ 843.545443] should_fail.cold+0x5/0xa [ 843.546263] ? security_file_alloc+0x34/0x170 [ 843.547242] should_failslab+0x5/0x20 [ 843.548074] kmem_cache_alloc+0x5b/0x310 [ 843.548964] security_file_alloc+0x34/0x170 [ 843.549890] __alloc_file+0xb7/0x320 [ 843.550690] alloc_empty_file+0x6d/0x170 [ 843.551566] alloc_file+0x5e/0x5a0 [ 843.552344] alloc_file_pseudo+0x16a/0x250 [ 843.553248] ? alloc_file+0x5a0/0x5a0 [ 843.554082] anon_inode_getfile+0xc8/0x1f0 [ 843.554998] io_uring_setup+0x138b/0x2980 [ 843.555908] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 843.556994] ? wait_for_completion_io+0x270/0x270 [ 843.558062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.559188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.560293] do_syscall_64+0x33/0x40 [ 843.561099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.562218] RIP: 0033:0x7fe1ce9abb19 [ 843.563026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.567000] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 843.568652] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 843.570182] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 843.571706] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 843.573247] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 843.574780] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:53 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x400000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x14, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 843.626852] device lo entered promiscuous mode 22:59:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x7ffffff9, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 843.631589] device lo left promiscuous mode [ 843.642780] device lo entered promiscuous mode [ 843.643497] device lo left promiscuous mode 22:59:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 22:59:53 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 22:59:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) 22:59:53 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x80ffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 22:59:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x16, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 843.780210] FAULT_INJECTION: forcing a failure. [ 843.780210] name failslab, interval 1, probability 0, space 0, times 0 [ 843.781667] CPU: 0 PID: 6943 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 843.782615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.783854] Call Trace: [ 843.784202] dump_stack+0x107/0x167 [ 843.784651] should_fail.cold+0x5/0xa [ 843.785136] ? create_object.isra.0+0x3a/0xa20 [ 843.785719] should_failslab+0x5/0x20 [ 843.786203] kmem_cache_alloc+0x5b/0x310 [ 843.786722] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 843.787429] create_object.isra.0+0x3a/0xa20 [ 843.787993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 843.788620] kmem_cache_alloc+0x159/0x310 [ 843.789153] security_file_alloc+0x34/0x170 [ 843.789703] __alloc_file+0xb7/0x320 [ 843.790171] alloc_empty_file+0x6d/0x170 [ 843.790687] alloc_file+0x5e/0x5a0 [ 843.791141] alloc_file_pseudo+0x16a/0x250 [ 843.791677] ? alloc_file+0x5a0/0x5a0 [ 843.792162] anon_inode_getfile+0xc8/0x1f0 [ 843.792706] io_uring_setup+0x138b/0x2980 [ 843.793239] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 843.793870] ? wait_for_completion_io+0x270/0x270 [ 843.794463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 843.795130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 843.795786] do_syscall_64+0x33/0x40 [ 843.796268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 843.796920] RIP: 0033:0x7fe1ce9abb19 [ 843.797372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.799724] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 843.800682] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 843.801592] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 843.802460] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 843.803337] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 843.804256] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 22:59:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x2, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 843.842072] device lo entered promiscuous mode [ 843.846201] device lo left promiscuous mode [ 843.854736] device lo entered promiscuous mode [ 843.859132] device lo left promiscuous mode 22:59:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 858.208618] device lo entered promiscuous mode [ 858.212280] device lo left promiscuous mode 23:00:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x3, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:00:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:00:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:00:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) 23:00:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:07 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:00:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x17, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 858.240708] device lo entered promiscuous mode [ 858.270107] device lo left promiscuous mode [ 858.273948] device lo entered promiscuous mode [ 858.289754] device lo left promiscuous mode [ 858.303022] device lo entered promiscuous mode 23:00:07 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x300, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 858.319964] device lo left promiscuous mode [ 858.344975] FAULT_INJECTION: forcing a failure. [ 858.344975] name failslab, interval 1, probability 0, space 0, times 0 [ 858.347516] CPU: 0 PID: 6975 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 858.349012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.350904] Call Trace: [ 858.351533] dump_stack+0x107/0x167 [ 858.352335] should_fail.cold+0x5/0xa [ 858.353173] ? io_uring_alloc_task_context+0x99/0x6a0 [ 858.354292] should_failslab+0x5/0x20 [ 858.355117] kmem_cache_alloc_trace+0x55/0x320 [ 858.356129] io_uring_alloc_task_context+0x99/0x6a0 [ 858.357212] ? io_import_iovec+0x1120/0x1120 [ 858.358165] ? lock_downgrade+0x6d0/0x6d0 [ 858.359060] ? do_raw_spin_lock+0x121/0x260 [ 858.359991] ? rwlock_bug.part.0+0x90/0x90 [ 858.360918] __io_uring_add_tctx_node+0x2c6/0x520 [ 858.361957] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 858.363088] ? alloc_fd+0x2e7/0x670 [ 858.363881] io_uring_setup+0x1fbb/0x2980 [ 858.364792] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 858.365882] ? wait_for_completion_io+0x270/0x270 [ 858.366939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.368073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.369188] do_syscall_64+0x33/0x40 [ 858.369990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.371095] RIP: 0033:0x7fe1ce9abb19 [ 858.371897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.375887] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 858.377180] device lo entered promiscuous mode [ 858.377610] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 858.377634] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 858.381481] device lo left promiscuous mode [ 858.381988] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 858.381999] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 858.382008] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x5, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:00:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) [ 858.514937] device lo entered promiscuous mode [ 858.516699] device lo left promiscuous mode 23:00:08 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) 23:00:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x3000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 858.625403] device lo entered promiscuous mode [ 858.632749] device lo left promiscuous mode 23:00:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x7, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 858.646141] device lo entered promiscuous mode [ 858.651037] device lo left promiscuous mode 23:00:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) 23:00:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 858.747031] FAULT_INJECTION: forcing a failure. [ 858.747031] name failslab, interval 1, probability 0, space 0, times 0 [ 858.749360] CPU: 0 PID: 7004 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 858.750760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.752354] Call Trace: [ 858.752858] dump_stack+0x107/0x167 [ 858.753541] should_fail.cold+0x5/0xa [ 858.754261] ? create_object.isra.0+0x3a/0xa20 [ 858.755123] should_failslab+0x5/0x20 [ 858.755841] kmem_cache_alloc+0x5b/0x310 [ 858.756615] create_object.isra.0+0x3a/0xa20 [ 858.757443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.758411] kmem_cache_alloc_trace+0x151/0x320 [ 858.759299] io_uring_alloc_task_context+0x99/0x6a0 [ 858.760237] ? io_import_iovec+0x1120/0x1120 [ 858.761061] ? lock_downgrade+0x6d0/0x6d0 [ 858.761836] ? do_raw_spin_lock+0x121/0x260 [ 858.762641] ? rwlock_bug.part.0+0x90/0x90 [ 858.763446] __io_uring_add_tctx_node+0x2c6/0x520 [ 858.764356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 858.765334] ? alloc_fd+0x2e7/0x670 [ 858.766022] io_uring_setup+0x1fbb/0x2980 [ 858.766801] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 858.767757] ? wait_for_completion_io+0x270/0x270 [ 858.768684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.769663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.770692] do_syscall_64+0x33/0x40 [ 858.771434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.772455] RIP: 0033:0x7fe1ce9abb19 [ 858.773189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.776866] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 858.778376] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 858.779792] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 858.781231] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 858.782645] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 858.784079] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:00:22 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @local}, 0x10) 23:00:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:00:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x4000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:00:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) 23:00:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x8, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 873.304797] device lo entered promiscuous mode [ 873.307057] device lo left promiscuous mode 23:00:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 873.317113] device lo entered promiscuous mode [ 873.318667] device lo left promiscuous mode [ 873.321025] FAULT_INJECTION: forcing a failure. [ 873.321025] name failslab, interval 1, probability 0, space 0, times 0 [ 873.322654] CPU: 1 PID: 7016 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 873.323588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.324694] Call Trace: [ 873.325056] dump_stack+0x107/0x167 [ 873.325553] should_fail.cold+0x5/0xa [ 873.326067] ? create_object.isra.0+0x3a/0xa20 [ 873.326681] should_failslab+0x5/0x20 [ 873.327186] kmem_cache_alloc+0x5b/0x310 [ 873.327735] create_object.isra.0+0x3a/0xa20 [ 873.328336] kmemleak_alloc_percpu+0xa0/0x100 [ 873.328940] pcpu_alloc+0x4e2/0x1240 [ 873.329448] __percpu_counter_init+0x10d/0x2d0 [ 873.330056] io_uring_alloc_task_context+0xcc/0x6a0 [ 873.330718] ? io_import_iovec+0x1120/0x1120 [ 873.331315] ? lock_downgrade+0x6d0/0x6d0 [ 873.331871] ? do_raw_spin_lock+0x121/0x260 [ 873.332428] ? rwlock_bug.part.0+0x90/0x90 [ 873.332999] __io_uring_add_tctx_node+0x2c6/0x520 [ 873.333639] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 873.334300] ? alloc_fd+0x2e7/0x670 [ 873.334791] io_uring_setup+0x1fbb/0x2980 [ 873.335354] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 873.336038] ? wait_for_completion_io+0x270/0x270 [ 873.336709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 873.337405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 873.338071] do_syscall_64+0x33/0x40 [ 873.338565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 873.339249] RIP: 0033:0x7fe1ce9abb19 [ 873.339715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.342161] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 873.343137] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 873.344080] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 873.344995] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 873.345937] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 873.346878] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x9, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:00:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) 23:00:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10) 23:00:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x6000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:00:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) [ 873.529063] device lo entered promiscuous mode [ 873.532085] device lo left promiscuous mode [ 873.534768] FAULT_INJECTION: forcing a failure. [ 873.534768] name failslab, interval 1, probability 0, space 0, times 0 [ 873.536413] CPU: 1 PID: 7048 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 873.537361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.538682] Call Trace: [ 873.539097] dump_stack+0x107/0x167 [ 873.539545] should_fail.cold+0x5/0xa [ 873.540000] ? create_object.isra.0+0x3a/0xa20 [ 873.540540] should_failslab+0x5/0x20 [ 873.540996] kmem_cache_alloc+0x5b/0x310 [ 873.541474] create_object.isra.0+0x3a/0xa20 [ 873.541990] kmemleak_alloc_percpu+0xa0/0x100 [ 873.542513] pcpu_alloc+0x4e2/0x1240 [ 873.542962] __percpu_counter_init+0x10d/0x2d0 [ 873.543494] io_uring_alloc_task_context+0xcc/0x6a0 [ 873.544075] ? io_import_iovec+0x1120/0x1120 [ 873.544599] ? lock_downgrade+0x6d0/0x6d0 [ 873.545081] ? do_raw_spin_lock+0x121/0x260 [ 873.545586] ? rwlock_bug.part.0+0x90/0x90 [ 873.546082] __io_uring_add_tctx_node+0x2c6/0x520 [ 873.546645] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 873.547255] ? alloc_fd+0x2e7/0x670 [ 873.547685] io_uring_setup+0x1fbb/0x2980 [ 873.548171] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 873.548761] ? wait_for_completion_io+0x270/0x270 [ 873.549328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 873.549932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 873.550531] do_syscall_64+0x33/0x40 [ 873.550968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 873.551558] RIP: 0033:0x7fe1ce9abb19 [ 873.551993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.554117] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 873.555003] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 873.555833] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 873.556668] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 873.557499] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 873.558322] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 873.568294] device lo entered promiscuous mode [ 873.569808] device lo left promiscuous mode 23:00:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) 23:00:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xa000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0xa, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:00:36 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:00:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:00:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:00:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:36 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x7, 0x6, @local}, 0x10) [ 887.246059] FAULT_INJECTION: forcing a failure. [ 887.246059] name failslab, interval 1, probability 0, space 0, times 0 [ 887.247649] CPU: 0 PID: 7061 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 887.248483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.249485] Call Trace: [ 887.249812] dump_stack+0x107/0x167 [ 887.250258] should_fail.cold+0x5/0xa [ 887.250721] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 887.251357] should_failslab+0x5/0x20 [ 887.251814] kmem_cache_alloc_trace+0x55/0x320 [ 887.252377] io_uring_alloc_task_context+0x4a3/0x6a0 [ 887.252986] ? io_import_iovec+0x1120/0x1120 [ 887.253518] ? lock_downgrade+0x6d0/0x6d0 [ 887.254023] ? do_raw_spin_lock+0x121/0x260 [ 887.254542] ? rwlock_bug.part.0+0x90/0x90 [ 887.255060] __io_uring_add_tctx_node+0x2c6/0x520 [ 887.255641] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 887.256271] ? alloc_fd+0x2e7/0x670 [ 887.256727] io_uring_setup+0x1fbb/0x2980 [ 887.257235] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 887.257844] ? wait_for_completion_io+0x270/0x270 [ 887.258443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 887.259073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.259697] do_syscall_64+0x33/0x40 [ 887.260151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 887.260779] RIP: 0033:0x7fe1ce9abb19 [ 887.261232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.263435] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 887.264368] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 887.265229] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 887.266095] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 887.266958] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 887.267820] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 887.277558] device lo entered promiscuous mode [ 887.278530] device lo left promiscuous mode [ 887.300912] device lo entered promiscuous mode [ 887.306886] device lo left promiscuous mode 23:00:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) 23:00:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x18000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 887.349154] FAULT_INJECTION: forcing a failure. [ 887.349154] name failslab, interval 1, probability 0, space 0, times 0 [ 887.350750] CPU: 0 PID: 7078 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 887.351706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.352720] Call Trace: [ 887.353044] dump_stack+0x107/0x167 [ 887.353484] should_fail.cold+0x5/0xa [ 887.353945] ? create_object.isra.0+0x3a/0xa20 [ 887.354496] should_failslab+0x5/0x20 [ 887.354955] kmem_cache_alloc+0x5b/0x310 [ 887.355449] create_object.isra.0+0x3a/0xa20 [ 887.355973] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 887.356606] kmem_cache_alloc_trace+0x151/0x320 [ 887.357168] io_uring_alloc_task_context+0x4a3/0x6a0 [ 887.357776] ? io_import_iovec+0x1120/0x1120 [ 887.358302] ? lock_downgrade+0x6d0/0x6d0 [ 887.358800] ? do_raw_spin_lock+0x121/0x260 [ 887.359319] ? rwlock_bug.part.0+0x90/0x90 [ 887.359826] __io_uring_add_tctx_node+0x2c6/0x520 [ 887.360419] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 887.361050] ? alloc_fd+0x2e7/0x670 [ 887.361493] io_uring_setup+0x1fbb/0x2980 [ 887.361994] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 887.362601] ? wait_for_completion_io+0x270/0x270 [ 887.363189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 887.363821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.364451] do_syscall_64+0x33/0x40 [ 887.364896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 887.365511] RIP: 0033:0x7fe1ce9abb19 [ 887.365960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.368179] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 887.369104] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 887.369977] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 887.370837] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 887.371694] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 887.372564] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x8, 0x6, @local}, 0x10) 23:00:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 887.447681] device lo entered promiscuous mode [ 887.448899] device lo left promiscuous mode [ 887.454582] device lo entered promiscuous mode [ 887.455506] device lo left promiscuous mode 23:00:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1f000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x9, 0x6, @local}, 0x10) 23:00:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) 23:00:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:00:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) [ 901.111734] device lo entered promiscuous mode [ 901.112790] device lo left promiscuous mode [ 901.146099] device lo entered promiscuous mode [ 901.151206] device lo left promiscuous mode 23:00:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0xc, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:00:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x20000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:00:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0xa, 0x6, @local}, 0x10) 23:00:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 901.186964] FAULT_INJECTION: forcing a failure. [ 901.186964] name failslab, interval 1, probability 0, space 0, times 0 [ 901.188804] CPU: 0 PID: 7104 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 901.189863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 901.191158] Call Trace: [ 901.191571] dump_stack+0x107/0x167 [ 901.192137] should_fail.cold+0x5/0xa [ 901.192741] ? create_object.isra.0+0x3a/0xa20 [ 901.193454] should_failslab+0x5/0x20 [ 901.194042] kmem_cache_alloc+0x5b/0x310 [ 901.194678] create_object.isra.0+0x3a/0xa20 [ 901.195360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 901.196145] kmem_cache_alloc_trace+0x151/0x320 [ 901.196874] io_uring_alloc_task_context+0x4a3/0x6a0 [ 901.197656] ? io_import_iovec+0x1120/0x1120 [ 901.198334] ? lock_downgrade+0x6d0/0x6d0 [ 901.198969] ? do_raw_spin_lock+0x121/0x260 [ 901.199632] ? rwlock_bug.part.0+0x90/0x90 [ 901.200287] __io_uring_add_tctx_node+0x2c6/0x520 [ 901.201037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 901.201844] ? alloc_fd+0x2e7/0x670 [ 901.202411] io_uring_setup+0x1fbb/0x2980 [ 901.203054] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 901.203833] ? wait_for_completion_io+0x270/0x270 [ 901.204597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 901.205406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 901.206200] do_syscall_64+0x33/0x40 [ 901.206771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 901.207602] RIP: 0033:0x7fe1ce9abb19 [ 901.208298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.211139] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 901.212310] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 901.213423] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 901.214525] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 901.215625] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 901.216734] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xf5ffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 901.288376] device lo entered promiscuous mode 23:00:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0xd, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 901.291269] device lo left promiscuous mode 23:00:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 901.312659] device lo entered promiscuous mode [ 901.325422] device lo left promiscuous mode 23:00:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) [ 901.432881] FAULT_INJECTION: forcing a failure. [ 901.432881] name failslab, interval 1, probability 0, space 0, times 0 [ 901.435745] CPU: 1 PID: 7129 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 901.437356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 901.439534] Call Trace: [ 901.440337] dump_stack+0x107/0x167 [ 901.441206] should_fail.cold+0x5/0xa [ 901.442201] ? create_object.isra.0+0x3a/0xa20 [ 901.443261] should_failslab+0x5/0x20 [ 901.444236] kmem_cache_alloc+0x5b/0x310 [ 901.445401] create_object.isra.0+0x3a/0xa20 [ 901.446467] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 901.447697] __kmalloc+0x16e/0x390 [ 901.448608] io_wq_create+0xeb/0xc00 [ 901.449481] io_uring_alloc_task_context+0x1f1/0x6a0 [ 901.450812] ? io_import_iovec+0x1120/0x1120 [ 901.451983] ? io_apoll_task_func+0x2d0/0x2d0 [ 901.453121] ? __io_req_find_next+0x300/0x300 [ 901.454234] ? do_raw_spin_lock+0x121/0x260 [ 901.455456] ? rwlock_bug.part.0+0x90/0x90 [ 901.456452] __io_uring_add_tctx_node+0x2c6/0x520 [ 901.457671] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 901.459000] ? alloc_fd+0x2e7/0x670 [ 901.460050] io_uring_setup+0x1fbb/0x2980 [ 901.461146] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 901.462322] ? wait_for_completion_io+0x270/0x270 [ 901.463570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 901.465018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 901.466224] do_syscall_64+0x33/0x40 [ 901.467181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 901.468398] RIP: 0033:0x7fe1ce9abb19 [ 901.469479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.474203] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 901.476055] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 901.478070] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 901.479826] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 901.481676] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 901.483444] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:00:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0xc, 0x6, @local}, 0x10) 23:00:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xfeffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:00:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:00:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0xe, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 901.649788] device lo entered promiscuous mode [ 901.651456] device lo left promiscuous mode [ 901.658534] device lo entered promiscuous mode [ 901.710381] device lo left promiscuous mode 23:01:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) 23:01:04 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) 23:01:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xffff8000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:01:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0xf, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:04 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0xd, 0x6, @local}, 0x10) [ 915.352056] device lo entered promiscuous mode [ 915.353089] device lo left promiscuous mode [ 915.357016] FAULT_INJECTION: forcing a failure. [ 915.357016] name failslab, interval 1, probability 0, space 0, times 0 [ 915.358837] CPU: 0 PID: 7150 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 915.359901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.361206] Call Trace: [ 915.361615] dump_stack+0x107/0x167 [ 915.362188] should_fail.cold+0x5/0xa [ 915.362778] ? io_wq_create+0x6ef/0xc00 [ 915.363396] should_failslab+0x5/0x20 [ 915.363989] kmem_cache_alloc_node_trace+0x59/0x340 [ 915.364788] io_wq_create+0x6ef/0xc00 [ 915.365384] io_uring_alloc_task_context+0x1f1/0x6a0 [ 915.366168] ? io_import_iovec+0x1120/0x1120 [ 915.366849] ? io_apoll_task_func+0x2d0/0x2d0 [ 915.367541] ? __io_req_find_next+0x300/0x300 [ 915.368241] ? do_raw_spin_lock+0x121/0x260 [ 915.368941] ? rwlock_bug.part.0+0x90/0x90 [ 915.369604] __io_uring_add_tctx_node+0x2c6/0x520 [ 915.370356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 915.371167] ? alloc_fd+0x2e7/0x670 [ 915.371742] io_uring_setup+0x1fbb/0x2980 [ 915.372390] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 915.373186] ? wait_for_completion_io+0x270/0x270 [ 915.373954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 915.374767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 915.375563] do_syscall_64+0x33/0x40 [ 915.376144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 915.376957] RIP: 0033:0x7fe1ce9abb19 [ 915.377535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.380403] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 915.381583] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 915.382690] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 915.383804] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 915.384907] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 915.386010] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 915.390573] device lo entered promiscuous mode [ 915.395232] device lo left promiscuous mode 23:01:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xfffffff5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x11, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:05 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0xe, 0x6, @local}, 0x10) 23:01:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) [ 915.532923] device lo entered promiscuous mode [ 915.533966] device lo left promiscuous mode [ 915.540071] device lo entered promiscuous mode [ 915.541050] device lo left promiscuous mode 23:01:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:05 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0xf, 0x6, @local}, 0x10) 23:01:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x12, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 915.628567] FAULT_INJECTION: forcing a failure. [ 915.628567] name failslab, interval 1, probability 0, space 0, times 0 [ 915.630401] CPU: 0 PID: 7179 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 915.631458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.632760] Call Trace: [ 915.633172] dump_stack+0x107/0x167 [ 915.633737] should_fail.cold+0x5/0xa [ 915.634330] ? create_object.isra.0+0x3a/0xa20 [ 915.635036] should_failslab+0x5/0x20 [ 915.635622] kmem_cache_alloc+0x5b/0x310 [ 915.636255] ? io_wq_create+0x114/0xc00 [ 915.636879] create_object.isra.0+0x3a/0xa20 [ 915.637557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 915.638341] kmem_cache_alloc_node_trace+0x16d/0x340 [ 915.639126] io_wq_create+0x6ef/0xc00 [ 915.639719] io_uring_alloc_task_context+0x1f1/0x6a0 [ 915.640503] ? io_import_iovec+0x1120/0x1120 [ 915.641187] ? io_apoll_task_func+0x2d0/0x2d0 [ 915.641873] ? __io_req_find_next+0x300/0x300 [ 915.642560] ? do_raw_spin_lock+0x121/0x260 [ 915.643223] ? rwlock_bug.part.0+0x90/0x90 [ 915.643876] __io_uring_add_tctx_node+0x2c6/0x520 [ 915.644619] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 915.645443] ? alloc_fd+0x2e7/0x670 [ 915.646012] io_uring_setup+0x1fbb/0x2980 [ 915.646659] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 915.647441] ? wait_for_completion_io+0x270/0x270 [ 915.648196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 915.649009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 915.649804] do_syscall_64+0x33/0x40 [ 915.650377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 915.651165] RIP: 0033:0x7fe1ce9abb19 [ 915.651738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.654584] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 915.655762] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 915.656860] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 915.657958] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 915.659059] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 915.660158] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 915.705016] device lo entered promiscuous mode [ 915.706037] device lo left promiscuous mode [ 915.713956] device lo entered promiscuous mode [ 915.715004] device lo left promiscuous mode 23:01:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x13, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) 23:01:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:01:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x11, 0x6, @local}, 0x10) 23:01:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) 23:01:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xfffffffe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 928.773568] device lo entered promiscuous mode [ 928.777816] device lo left promiscuous mode [ 928.780983] Zero length message leads to an empty skb [ 928.786752] device lo entered promiscuous mode [ 928.788840] device lo left promiscuous mode 23:01:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 928.842541] FAULT_INJECTION: forcing a failure. [ 928.842541] name failslab, interval 1, probability 0, space 0, times 0 [ 928.846104] CPU: 1 PID: 7201 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 928.848006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 928.849871] Call Trace: [ 928.850434] dump_stack+0x107/0x167 [ 928.851204] should_fail.cold+0x5/0xa [ 928.852014] ? __io_uring_add_tctx_node+0x15c/0x520 [ 928.853085] should_failslab+0x5/0x20 [ 928.853893] kmem_cache_alloc_trace+0x55/0x320 [ 928.854963] __io_uring_add_tctx_node+0x15c/0x520 [ 928.856243] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 928.857703] ? alloc_fd+0x2e7/0x670 [ 928.858665] io_uring_setup+0x1fbb/0x2980 [ 928.859716] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 928.860989] ? wait_for_completion_io+0x270/0x270 [ 928.862217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 928.863394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 928.864683] do_syscall_64+0x33/0x40 [ 928.865627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 928.866994] RIP: 0033:0x7fe1ce9abb19 [ 928.867850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 928.872346] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 928.874442] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 928.876268] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 928.878051] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 928.879746] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 928.881760] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x12, 0x6, @local}, 0x10) [ 928.928795] device lo entered promiscuous mode [ 928.930105] device lo left promiscuous mode 23:01:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) 23:01:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x14, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:18 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x13, 0x6, @local}, 0x10) [ 928.992148] FAULT_INJECTION: forcing a failure. [ 928.992148] name failslab, interval 1, probability 0, space 0, times 0 [ 928.993885] CPU: 0 PID: 7219 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 928.994920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 928.996149] Call Trace: [ 928.996551] dump_stack+0x107/0x167 [ 928.997108] should_fail.cold+0x5/0xa [ 928.997683] ? create_object.isra.0+0x3a/0xa20 [ 928.998361] should_failslab+0x5/0x20 [ 928.998948] kmem_cache_alloc+0x5b/0x310 [ 928.999571] create_object.isra.0+0x3a/0xa20 [ 929.000239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 929.001004] kmem_cache_alloc_trace+0x151/0x320 [ 929.001718] __io_uring_add_tctx_node+0x15c/0x520 [ 929.002441] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 929.003211] ? alloc_fd+0x2e7/0x670 [ 929.003766] io_uring_setup+0x1fbb/0x2980 [ 929.004406] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.005190] ? wait_for_completion_io+0x270/0x270 [ 929.005950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.006748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.007537] do_syscall_64+0x33/0x40 [ 929.008094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.008875] RIP: 0033:0x7fe1ce9abb19 [ 929.009426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.012181] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.013356] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 929.014417] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 929.015488] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 929.016539] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 929.017627] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) [ 929.126822] device lo entered promiscuous mode [ 929.133051] device lo left promiscuous mode [ 929.215316] device lo entered promiscuous mode [ 929.216816] device lo left promiscuous mode 23:01:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 929.366004] FAULT_INJECTION: forcing a failure. [ 929.366004] name failslab, interval 1, probability 0, space 0, times 0 [ 929.367551] CPU: 0 PID: 7238 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 929.368378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.369420] Call Trace: [ 929.369803] dump_stack+0x107/0x167 [ 929.370305] should_fail.cold+0x5/0xa [ 929.370771] ? xas_alloc+0x336/0x440 [ 929.371229] should_failslab+0x5/0x20 [ 929.371688] kmem_cache_alloc+0x5b/0x310 [ 929.372183] ? stack_trace_consume_entry+0x160/0x160 [ 929.372810] xas_alloc+0x336/0x440 [ 929.373249] xas_create+0x34a/0x10d0 [ 929.373716] ? kernel_text_address+0xf2/0x120 [ 929.374274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 929.374909] xas_store+0x8c/0x1c40 [ 929.375344] __xa_store+0x164/0x2d0 [ 929.375786] ? xa_delete_node+0x280/0x280 [ 929.376296] ? trace_hardirqs_on+0x5b/0x180 [ 929.376830] xa_store+0x31/0x50 [ 929.377235] __io_uring_add_tctx_node+0x1cf/0x520 [ 929.377823] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 929.378452] ? alloc_fd+0x2e7/0x670 [ 929.378894] io_uring_setup+0x1fbb/0x2980 [ 929.379402] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 929.380014] ? wait_for_completion_io+0x270/0x270 [ 929.380612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.381253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.381875] do_syscall_64+0x33/0x40 [ 929.382329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.382953] RIP: 0033:0x7fe1ce9abb19 [ 929.383404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.385640] RSP: 002b:00007fe1cbf00108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 929.386565] RAX: ffffffffffffffda RBX: 00007fe1ceabf020 RCX: 00007fe1ce9abb19 [ 929.387434] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 929.388311] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 929.389194] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 929.390065] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x16, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:31 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x14, 0x6, @local}, 0x10) [ 941.666807] device lo entered promiscuous mode 23:01:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) 23:01:31 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:01:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) [ 941.674490] device lo left promiscuous mode [ 941.705135] device lo entered promiscuous mode [ 941.706128] device lo left promiscuous mode [ 941.710961] FAULT_INJECTION: forcing a failure. [ 941.710961] name failslab, interval 1, probability 0, space 0, times 0 [ 941.712586] CPU: 1 PID: 7255 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 941.713742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 941.715164] Call Trace: [ 941.715577] dump_stack+0x107/0x167 [ 941.716170] should_fail.cold+0x5/0xa [ 941.716782] ? ___slab_alloc+0x360/0x700 [ 941.717455] ? create_object.isra.0+0x3a/0xa20 [ 941.718216] should_failslab+0x5/0x20 [ 941.718819] kmem_cache_alloc+0x5b/0x310 [ 941.719490] create_object.isra.0+0x3a/0xa20 [ 941.720207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 941.721036] kmem_cache_alloc+0x159/0x310 [ 941.721705] xas_alloc+0x336/0x440 [ 941.722284] xas_create+0x34a/0x10d0 [ 941.722903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 941.723744] xas_store+0x8c/0x1c40 [ 941.724321] __xa_store+0x164/0x2d0 [ 941.724913] ? xa_delete_node+0x280/0x280 [ 941.725609] ? trace_hardirqs_on+0x5b/0x180 [ 941.726327] xa_store+0x31/0x50 [ 941.726877] __io_uring_add_tctx_node+0x1cf/0x520 [ 941.727661] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 941.728514] ? alloc_fd+0x2e7/0x670 [ 941.729127] io_uring_setup+0x1fbb/0x2980 [ 941.729804] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 941.730618] ? wait_for_completion_io+0x270/0x270 [ 941.731410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 941.732265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 941.733119] do_syscall_64+0x33/0x40 [ 941.733731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 941.734559] RIP: 0033:0x7fe1ce9abb19 [ 941.735162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 941.738000] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 941.738953] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 941.739843] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 941.740731] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 941.741625] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 941.742514] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) 23:01:31 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x16, 0x6, @local}, 0x10) 23:01:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 941.862221] FAULT_INJECTION: forcing a failure. [ 941.862221] name failslab, interval 1, probability 0, space 0, times 0 [ 941.863635] CPU: 1 PID: 7265 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 941.864452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 941.865449] Call Trace: [ 941.865773] dump_stack+0x107/0x167 [ 941.866208] should_fail.cold+0x5/0xa [ 941.866658] ? create_object.isra.0+0x3a/0xa20 [ 941.867204] should_failslab+0x5/0x20 [ 941.867653] kmem_cache_alloc+0x5b/0x310 [ 941.868133] create_object.isra.0+0x3a/0xa20 [ 941.868653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 941.869269] kmem_cache_alloc+0x159/0x310 [ 941.869761] xas_alloc+0x336/0x440 [ 941.870186] xas_create+0x34a/0x10d0 [ 941.870635] ? kernel_text_address+0xf2/0x120 [ 941.871171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 941.871797] xas_store+0x8c/0x1c40 [ 941.872226] __xa_store+0x164/0x2d0 [ 941.872663] ? xa_delete_node+0x280/0x280 [ 941.873173] ? trace_hardirqs_on+0x5b/0x180 [ 941.873691] xa_store+0x31/0x50 [ 941.874088] __io_uring_add_tctx_node+0x1cf/0x520 [ 941.874661] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 941.875274] ? alloc_fd+0x2e7/0x670 [ 941.875705] io_uring_setup+0x1fbb/0x2980 [ 941.876195] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 941.876786] ? wait_for_completion_io+0x270/0x270 [ 941.877375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 941.877997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 941.878606] do_syscall_64+0x33/0x40 [ 941.879049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 941.879658] RIP: 0033:0x7fe1ce9abb19 [ 941.880099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 941.882292] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 941.883187] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 941.884028] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 941.884886] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 941.885741] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 941.886590] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x17, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 941.921804] device lo entered promiscuous mode [ 941.922926] device lo left promiscuous mode [ 941.928116] device lo entered promiscuous mode [ 941.928998] device lo left promiscuous mode 23:01:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) [ 954.898848] FAULT_INJECTION: forcing a failure. [ 954.898848] name failslab, interval 1, probability 0, space 0, times 0 [ 954.901810] CPU: 0 PID: 7295 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 954.903559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 23:01:44 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x17, 0x6, @local}, 0x10) 23:01:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:01:44 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) 23:01:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 954.905962] Call Trace: [ 954.906690] dump_stack+0x107/0x167 [ 954.907606] should_fail.cold+0x5/0xa [ 954.908574] ? create_object.isra.0+0x3a/0xa20 [ 954.909746] should_failslab+0x5/0x20 [ 954.910703] kmem_cache_alloc+0x5b/0x310 [ 954.911712] ? mark_held_locks+0x9e/0xe0 [ 954.912721] create_object.isra.0+0x3a/0xa20 [ 954.913814] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 954.915077] kmem_cache_alloc+0x159/0x310 [ 954.916112] xas_alloc+0x336/0x440 [ 954.917003] xas_create+0x34a/0x10d0 [ 954.917945] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 954.919248] xas_store+0x8c/0x1c40 [ 954.920149] __xa_store+0x164/0x2d0 [ 954.921071] ? xa_delete_node+0x280/0x280 [ 954.922106] ? trace_hardirqs_on+0x5b/0x180 [ 954.923191] xa_store+0x31/0x50 [ 954.924013] __io_uring_add_tctx_node+0x1cf/0x520 [ 954.925216] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 954.926510] ? alloc_fd+0x2e7/0x670 [ 954.927425] io_uring_setup+0x1fbb/0x2980 [ 954.928459] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 954.929737] ? wait_for_completion_io+0x270/0x270 [ 954.930958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 954.932245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 954.933520] do_syscall_64+0x33/0x40 [ 954.934430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 954.935682] RIP: 0033:0x7fe1ce9abb19 [ 954.936589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.941118] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 954.942981] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 954.944739] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 954.946508] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 954.948262] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 954.950028] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 954.953834] device lo entered promiscuous mode 23:01:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) 23:01:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x25, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 954.954982] device lo left promiscuous mode [ 954.972602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7301 comm=syz-executor.5 [ 954.976678] device lo entered promiscuous mode [ 954.982408] device lo left promiscuous mode 23:01:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) 23:01:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x32, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:44 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x300, 0x6, @local}, 0x10) 23:01:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) [ 955.145155] FAULT_INJECTION: forcing a failure. [ 955.145155] name failslab, interval 1, probability 0, space 0, times 0 [ 955.146742] CPU: 1 PID: 7310 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 955.147662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.148774] Call Trace: [ 955.149141] dump_stack+0x107/0x167 [ 955.149629] should_fail.cold+0x5/0xa [ 955.150138] ? xas_alloc+0x336/0x440 [ 955.150638] should_failslab+0x5/0x20 [ 955.151146] kmem_cache_alloc+0x5b/0x310 [ 955.151689] xas_alloc+0x336/0x440 [ 955.152167] xas_create+0x34a/0x10d0 [ 955.152696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 955.153411] xas_store+0x8c/0x1c40 [ 955.153901] __xa_store+0x164/0x2d0 [ 955.154389] ? xa_delete_node+0x280/0x280 [ 955.154803] device lo entered promiscuous mode [ 955.154912] ? trace_hardirqs_on+0x5b/0x180 [ 955.156609] xa_store+0x31/0x50 [ 955.156979] __io_uring_add_tctx_node+0x1cf/0x520 [ 955.157504] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 955.158101] ? alloc_fd+0x2e7/0x670 [ 955.158499] io_uring_setup+0x1fbb/0x2980 [ 955.158956] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 955.159497] ? wait_for_completion_io+0x270/0x270 [ 955.160033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 955.160594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 955.161193] do_syscall_64+0x33/0x40 [ 955.161598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 955.162179] RIP: 0033:0x7fe1ce9abb19 [ 955.162583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.162616] device lo left promiscuous mode [ 955.164671] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 955.164684] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 955.164690] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 955.164696] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 955.164702] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 955.164708] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x3d5, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 955.281176] device lo entered promiscuous mode [ 955.282649] device lo left promiscuous mode 23:01:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:01:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) 23:01:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) 23:01:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x25, @local}, 0x10) [ 968.597619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7330 comm=syz-executor.5 23:01:58 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:01:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x500, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:01:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 968.617563] device lo entered promiscuous mode [ 968.627897] device lo left promiscuous mode [ 968.657026] device lo entered promiscuous mode [ 968.660676] device lo left promiscuous mode 23:01:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x5, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 968.705701] FAULT_INJECTION: forcing a failure. [ 968.705701] name failslab, interval 1, probability 0, space 0, times 0 [ 968.708534] CPU: 0 PID: 7343 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 968.710184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.712061] Call Trace: [ 968.712656] dump_stack+0x107/0x167 [ 968.713490] should_fail.cold+0x5/0xa [ 968.714345] ? create_object.isra.0+0x3a/0xa20 [ 968.715376] should_failslab+0x5/0x20 [ 968.716229] kmem_cache_alloc+0x5b/0x310 [ 968.717135] ? mark_held_locks+0x9e/0xe0 [ 968.718063] create_object.isra.0+0x3a/0xa20 [ 968.719044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 968.720190] kmem_cache_alloc+0x159/0x310 [ 968.721124] xas_alloc+0x336/0x440 [ 968.721933] xas_create+0x34a/0x10d0 [ 968.722781] ? kernel_text_address+0xf2/0x120 [ 968.723790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 968.724968] xas_store+0x8c/0x1c40 [ 968.725791] __xa_store+0x164/0x2d0 [ 968.726618] ? xa_delete_node+0x280/0x280 [ 968.727555] ? trace_hardirqs_on+0x5b/0x180 [ 968.728528] xa_store+0x31/0x50 [ 968.729279] __io_uring_add_tctx_node+0x1cf/0x520 [ 968.730362] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 968.731542] ? alloc_fd+0x2e7/0x670 [ 968.732370] io_uring_setup+0x1fbb/0x2980 [ 968.733322] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 968.734456] ? wait_for_completion_io+0x270/0x270 [ 968.735566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 968.736742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 968.737916] do_syscall_64+0x33/0x40 [ 968.738758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 968.739916] RIP: 0033:0x7fe1ce9abb19 [ 968.740755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 968.744899] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 968.746611] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 968.748213] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 968.749819] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 968.751421] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 968.753020] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:01:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0xe) 23:01:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:01:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:58 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 968.863123] device lo entered promiscuous mode [ 968.867444] device lo left promiscuous mode [ 968.875650] device lo entered promiscuous mode [ 968.876611] device lo left promiscuous mode [ 968.887487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7355 comm=syz-executor.5 23:01:58 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0xf) 23:01:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:01:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) [ 968.992524] device lo entered promiscuous mode [ 968.993847] device lo entered promiscuous mode [ 969.025333] device lo left promiscuous mode [ 969.026331] device lo left promiscuous mode [ 969.040121] FAULT_INJECTION: forcing a failure. [ 969.040121] name failslab, interval 1, probability 0, space 0, times 0 [ 969.041459] CPU: 1 PID: 7369 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 969.042399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 969.043428] Call Trace: [ 969.043798] dump_stack+0x107/0x167 [ 969.044310] should_fail.cold+0x5/0xa [ 969.044831] ? xas_alloc+0x336/0x440 [ 969.045362] should_failslab+0x5/0x20 [ 969.045893] kmem_cache_alloc+0x5b/0x310 [ 969.046462] xas_alloc+0x336/0x440 [ 969.046965] xas_create+0x34a/0x10d0 [ 969.047490] ? kernel_text_address+0xf2/0x120 [ 969.048128] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 969.048848] xas_store+0x8c/0x1c40 [ 969.049360] __xa_store+0x164/0x2d0 [ 969.049868] ? xa_delete_node+0x280/0x280 [ 969.050493] ? trace_hardirqs_on+0x5b/0x180 [ 969.051275] xa_store+0x31/0x50 [ 969.051740] __io_uring_add_tctx_node+0x1cf/0x520 [ 969.052400] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 969.053113] ? alloc_fd+0x2e7/0x670 [ 969.053635] io_uring_setup+0x1fbb/0x2980 [ 969.054228] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 969.054930] ? wait_for_completion_io+0x270/0x270 [ 969.055611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 969.056344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 969.057061] do_syscall_64+0x33/0x40 [ 969.057576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 969.058285] RIP: 0033:0x7fe1ce9abb19 [ 969.058792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 969.061328] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 969.062379] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 969.063379] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 969.064355] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 969.065339] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 969.066322] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 969.074609] device lo entered promiscuous mode [ 969.075508] device lo left promiscuous mode [ 969.076327] device lo entered promiscuous mode [ 969.077272] device lo left promiscuous mode 23:02:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x25) 23:02:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:02:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) 23:02:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x7, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) 23:02:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 984.166138] device lo entered promiscuous mode [ 984.167311] device lo left promiscuous mode 23:02:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 984.190452] device lo entered promiscuous mode [ 984.191572] device lo left promiscuous mode 23:02:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 984.231301] FAULT_INJECTION: forcing a failure. [ 984.231301] name failslab, interval 1, probability 0, space 0, times 0 [ 984.233184] CPU: 0 PID: 7392 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 984.234244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.235517] Call Trace: [ 984.235933] dump_stack+0x107/0x167 [ 984.236505] should_fail.cold+0x5/0xa [ 984.237113] ? create_object.isra.0+0x3a/0xa20 [ 984.237841] should_failslab+0x5/0x20 [ 984.238433] kmem_cache_alloc+0x5b/0x310 [ 984.239070] ? mark_held_locks+0x9e/0xe0 [ 984.239709] create_object.isra.0+0x3a/0xa20 [ 984.240370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.241141] kmem_cache_alloc+0x159/0x310 [ 984.241804] xas_alloc+0x336/0x440 [ 984.242347] xas_create+0x34a/0x10d0 [ 984.242939] ? kernel_text_address+0xf2/0x120 [ 984.243637] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 984.244458] xas_store+0x8c/0x1c40 [ 984.245018] __xa_store+0x164/0x2d0 [ 984.245590] ? xa_delete_node+0x280/0x280 [ 984.246241] ? trace_hardirqs_on+0x5b/0x180 [ 984.247085] xa_store+0x31/0x50 [ 984.247601] __io_uring_add_tctx_node+0x1cf/0x520 [ 984.248349] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 984.249160] ? alloc_fd+0x2e7/0x670 [ 984.249740] io_uring_setup+0x1fbb/0x2980 [ 984.250389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 984.251173] ? wait_for_completion_io+0x270/0x270 [ 984.251934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.252748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.253554] do_syscall_64+0x33/0x40 [ 984.254130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.254923] RIP: 0033:0x7fe1ce9abb19 [ 984.255498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.258358] RSP: 002b:00007fe1cbf00108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 984.259540] RAX: ffffffffffffffda RBX: 00007fe1ceabf020 RCX: 00007fe1ce9abb19 [ 984.260655] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 984.261770] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 984.262879] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 984.263989] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:02:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x9, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x20000110) [ 984.316931] device lo entered promiscuous mode [ 984.318083] device lo left promiscuous mode [ 984.323953] device lo entered promiscuous mode [ 984.332135] device lo left promiscuous mode 23:02:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:26 executing program 1: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:02:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x25, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:02:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:02:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) [ 996.620352] device lo entered promiscuous mode [ 996.635475] device lo left promiscuous mode [ 996.672185] device lo entered promiscuous mode 23:02:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 996.714873] device lo left promiscuous mode 23:02:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x32, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 996.758915] FAULT_INJECTION: forcing a failure. [ 996.758915] name failslab, interval 1, probability 0, space 0, times 0 [ 996.761667] CPU: 1 PID: 7421 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 996.763252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.765178] Call Trace: [ 996.765804] dump_stack+0x107/0x167 [ 996.766654] should_fail.cold+0x5/0xa [ 996.767557] ? create_object.isra.0+0x3a/0xa20 [ 996.768639] should_failslab+0x5/0x20 [ 996.769540] kmem_cache_alloc+0x5b/0x310 [ 996.770647] ? mark_held_locks+0x9e/0xe0 [ 996.771762] create_object.isra.0+0x3a/0xa20 [ 996.773118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.774626] kmem_cache_alloc+0x159/0x310 [ 996.775736] xas_alloc+0x336/0x440 [ 996.776812] xas_create+0x34a/0x10d0 [ 996.778012] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 996.779439] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 996.780843] xas_store+0x8c/0x1c40 [ 996.781982] __xa_store+0x164/0x2d0 [ 996.783048] ? xa_delete_node+0x280/0x280 [ 996.784307] ? trace_hardirqs_on+0x5b/0x180 [ 996.785566] xa_store+0x31/0x50 [ 996.786628] __io_uring_add_tctx_node+0x1cf/0x520 [ 996.788055] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 996.789405] ? alloc_fd+0x2e7/0x670 [ 996.790459] io_uring_setup+0x1fbb/0x2980 [ 996.791727] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 996.793320] ? wait_for_completion_io+0x270/0x270 [ 996.794634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.796126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.797671] do_syscall_64+0x33/0x40 [ 996.798735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.800100] RIP: 0033:0x7fe1ce9abb19 [ 996.801105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.805805] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 996.807827] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 996.809658] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 996.811572] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 996.813328] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 996.815286] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:02:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:26 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:02:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) [ 996.959037] FAULT_INJECTION: forcing a failure. [ 996.959037] name failslab, interval 1, probability 0, space 0, times 0 [ 996.960483] CPU: 0 PID: 7445 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 996.961420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.962427] Call Trace: [ 996.962752] dump_stack+0x107/0x167 [ 996.963191] should_fail.cold+0x5/0xa [ 996.963657] ? ___slab_alloc+0x155/0x700 [ 996.964149] ? create_object.isra.0+0x3a/0xa20 [ 996.964699] should_failslab+0x5/0x20 [ 996.965158] kmem_cache_alloc+0x5b/0x310 [ 996.965672] create_object.isra.0+0x3a/0xa20 [ 996.966201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.966817] kmem_cache_alloc+0x159/0x310 [ 996.967321] xas_alloc+0x336/0x440 [ 996.967748] xas_create+0x34a/0x10d0 [ 996.968203] ? kernel_text_address+0xf2/0x120 [ 996.968752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 996.969381] xas_store+0x8c/0x1c40 [ 996.969825] __xa_store+0x164/0x2d0 [ 996.970263] ? xa_delete_node+0x280/0x280 [ 996.970767] ? trace_hardirqs_on+0x5b/0x180 [ 996.971288] xa_store+0x31/0x50 [ 996.971692] __io_uring_add_tctx_node+0x1cf/0x520 [ 996.972275] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 996.972906] ? alloc_fd+0x2e7/0x670 [ 996.973350] io_uring_setup+0x1fbb/0x2980 [ 996.973862] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 996.974468] ? wait_for_completion_io+0x270/0x270 [ 996.975060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.975692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.976314] do_syscall_64+0x33/0x40 [ 996.976771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.977388] RIP: 0033:0x7fe1ce9abb19 [ 996.977844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.977859] device lo entered promiscuous mode [ 996.980052] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 996.980065] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 996.980070] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 996.980076] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 996.980092] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 996.985376] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 997.023815] device lo left promiscuous mode [ 997.047934] device lo entered promiscuous mode [ 997.048659] device lo left promiscuous mode 23:02:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x63, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) [ 997.122205] FAULT_INJECTION: forcing a failure. [ 997.122205] name failslab, interval 1, probability 0, space 0, times 0 [ 997.123614] CPU: 0 PID: 7452 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 997.124441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 997.125445] Call Trace: [ 997.125778] dump_stack+0x107/0x167 [ 997.126220] should_fail.cold+0x5/0xa [ 997.126682] ? xas_alloc+0x336/0x440 [ 997.127136] should_failslab+0x5/0x20 [ 997.127600] kmem_cache_alloc+0x5b/0x310 [ 997.128097] xas_alloc+0x336/0x440 [ 997.128526] xas_create+0x34a/0x10d0 [ 997.128991] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 997.129632] xas_store+0x8c/0x1c40 [ 997.130072] __xa_store+0x164/0x2d0 [ 997.130511] ? xa_delete_node+0x280/0x280 [ 997.131023] ? trace_hardirqs_on+0x5b/0x180 [ 997.131551] xa_store+0x31/0x50 [ 997.131956] __io_uring_add_tctx_node+0x1cf/0x520 [ 997.132540] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 997.133181] ? alloc_fd+0x2e7/0x670 [ 997.133637] io_uring_setup+0x1fbb/0x2980 [ 997.134145] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 997.134754] ? wait_for_completion_io+0x270/0x270 [ 997.135348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 997.135995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 997.136614] do_syscall_64+0x33/0x40 [ 997.137062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 997.137684] RIP: 0033:0x7fe1ce9abb19 [ 997.138133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 997.140352] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 997.141267] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 997.142138] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 997.143010] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 997.143875] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 997.144735] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:02:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:42 executing program 1: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:02:42 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:42 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x13, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) 23:02:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:02:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0xe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) [ 1012.475049] device lo entered promiscuous mode [ 1012.480450] netlink: 'syz-executor.6': attribute type 19 has an invalid length. [ 1012.486675] FAULT_INJECTION: forcing a failure. [ 1012.486675] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.490227] CPU: 0 PID: 7471 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1012.492130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1012.494452] Call Trace: [ 1012.495194] dump_stack+0x107/0x167 [ 1012.496206] should_fail.cold+0x5/0xa [ 1012.497272] ? create_object.isra.0+0x3a/0xa20 [ 1012.497300] should_failslab+0x5/0x20 [ 1012.497329] kmem_cache_alloc+0x5b/0x310 [ 1012.497352] ? mark_held_locks+0x9e/0xe0 [ 1012.501813] create_object.isra.0+0x3a/0xa20 [ 1012.503300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1012.505039] kmem_cache_alloc+0x159/0x310 [ 1012.506485] xas_alloc+0x336/0x440 [ 1012.507713] xas_create+0x34a/0x10d0 [ 1012.508909] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1012.510405] xas_store+0x8c/0x1c40 [ 1012.511344] __xa_store+0x164/0x2d0 [ 1012.512248] ? xa_delete_node+0x280/0x280 [ 1012.513291] ? trace_hardirqs_on+0x5b/0x180 [ 1012.514384] xa_store+0x31/0x50 [ 1012.515210] __io_uring_add_tctx_node+0x1cf/0x520 [ 1012.516411] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1012.517893] ? alloc_fd+0x2e7/0x670 [ 1012.518809] io_uring_setup+0x1fbb/0x2980 [ 1012.519844] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1012.521115] ? wait_for_completion_io+0x270/0x270 [ 1012.522348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1012.523639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1012.524948] do_syscall_64+0x33/0x40 [ 1012.525891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1012.527162] RIP: 0033:0x7fe1ce9abb19 [ 1012.528094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1012.532648] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1012.534543] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1012.536315] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1012.538097] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1012.539852] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1012.541646] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1012.597964] device lo left promiscuous mode [ 1012.613643] device lo entered promiscuous mode [ 1012.623993] device lo left promiscuous mode 23:02:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0xf) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) 23:02:42 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @local}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x3}, 0x40, r8}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:02:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1012.838823] device lo entered promiscuous mode [ 1012.870967] FAULT_INJECTION: forcing a failure. [ 1012.870967] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.874059] CPU: 0 PID: 7492 Comm: syz-executor.4 Not tainted 5.10.238 #1 23:02:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x25) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 1012.875762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1012.878035] Call Trace: [ 1012.878682] dump_stack+0x107/0x167 [ 1012.879600] should_fail.cold+0x5/0xa [ 1012.880549] ? xas_alloc+0x336/0x440 [ 1012.881472] should_failslab+0x5/0x20 [ 1012.882432] kmem_cache_alloc+0x5b/0x310 [ 1012.883450] xas_alloc+0x336/0x440 [ 1012.884333] xas_create+0x34a/0x10d0 [ 1012.885265] ? kernel_text_address+0xf2/0x120 [ 1012.886387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1012.887686] xas_store+0x8c/0x1c40 [ 1012.888583] __xa_store+0x164/0x2d0 [ 1012.889487] ? xa_delete_node+0x280/0x280 [ 1012.890538] ? trace_hardirqs_on+0x5b/0x180 [ 1012.891620] xa_store+0x31/0x50 [ 1012.892446] __io_uring_add_tctx_node+0x1cf/0x520 [ 1012.893651] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1012.894962] ? alloc_fd+0x2e7/0x670 [ 1012.895870] io_uring_setup+0x1fbb/0x2980 [ 1012.896913] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1012.898181] ? wait_for_completion_io+0x270/0x270 [ 1012.899403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1012.900699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1012.902009] do_syscall_64+0x33/0x40 [ 1012.902949] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1012.904217] RIP: 0033:0x7fe1ce9abb19 [ 1012.905136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1012.909712] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1012.911714] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1012.913914] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1012.916110] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1012.917968] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1012.919734] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1012.959559] device lo entered promiscuous mode [ 1012.963936] device lo left promiscuous mode 23:02:42 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:02:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1012.996329] device lo left promiscuous mode [ 1012.999797] device lo entered promiscuous mode [ 1013.018170] device lo entered promiscuous mode [ 1013.027997] device lo left promiscuous mode 23:02:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1013.038448] device lo left promiscuous mode 23:02:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x2f) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:02:56 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) 23:02:56 executing program 1: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:02:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:56 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0xffffffffffffff39) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0x1) 23:02:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1027.099833] device lo entered promiscuous mode 23:02:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) [ 1027.113155] device lo entered promiscuous mode [ 1027.121466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1027.125888] FAULT_INJECTION: forcing a failure. [ 1027.125888] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.128563] CPU: 1 PID: 7528 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1027.130097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.131946] Call Trace: [ 1027.132537] dump_stack+0x107/0x167 [ 1027.133351] should_fail.cold+0x5/0xa [ 1027.134211] ? ___slab_alloc+0x360/0x700 [ 1027.135113] ? create_object.isra.0+0x3a/0xa20 [ 1027.136132] should_failslab+0x5/0x20 [ 1027.136976] kmem_cache_alloc+0x5b/0x310 [ 1027.137896] create_object.isra.0+0x3a/0xa20 [ 1027.138873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.140005] kmem_cache_alloc+0x159/0x310 [ 1027.140939] xas_alloc+0x336/0x440 [ 1027.141733] xas_create+0x34a/0x10d0 [ 1027.142583] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1027.143753] xas_store+0x8c/0x1c40 [ 1027.144560] __xa_store+0x164/0x2d0 [ 1027.145377] ? xa_delete_node+0x280/0x280 [ 1027.146318] ? trace_hardirqs_on+0x5b/0x180 [ 1027.147284] xa_store+0x31/0x50 [ 1027.148025] __io_uring_add_tctx_node+0x1cf/0x520 [ 1027.149298] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1027.150479] ? alloc_fd+0x2e7/0x670 [ 1027.151505] io_uring_setup+0x1fbb/0x2980 [ 1027.152666] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1027.154074] ? wait_for_completion_io+0x270/0x270 [ 1027.155441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.156885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.158320] do_syscall_64+0x33/0x40 [ 1027.159363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.160776] RIP: 0033:0x7fe1ce9abb19 [ 1027.161808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.166858] RSP: 002b:00007fe1cbf00108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1027.168968] RAX: ffffffffffffffda RBX: 00007fe1ceabf020 RCX: 00007fe1ce9abb19 [ 1027.170941] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1027.172911] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1027.174890] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1027.176851] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1027.191981] device lo left promiscuous mode [ 1027.202620] device lo entered promiscuous mode [ 1027.214949] device lo left promiscuous mode 23:02:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:02:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x32) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 1027.306444] device lo left promiscuous mode [ 1027.312101] device lo entered promiscuous mode 23:02:56 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) [ 1027.385038] device lo left promiscuous mode [ 1027.390490] device lo entered promiscuous mode [ 1027.415516] device lo left promiscuous mode [ 1027.428955] device lo entered promiscuous mode 23:02:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) [ 1027.451352] device lo left promiscuous mode 23:02:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:02:57 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1027.520023] FAULT_INJECTION: forcing a failure. [ 1027.520023] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.523057] CPU: 0 PID: 7551 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1027.524861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.527077] Call Trace: [ 1027.527791] dump_stack+0x107/0x167 [ 1027.528761] should_fail.cold+0x5/0xa [ 1027.529781] ? xas_alloc+0x336/0x440 [ 1027.530815] should_failslab+0x5/0x20 [ 1027.531844] kmem_cache_alloc+0x5b/0x310 [ 1027.532845] xas_alloc+0x336/0x440 [ 1027.533804] xas_create+0x34a/0x10d0 [ 1027.534802] ? kernel_text_address+0xf2/0x120 [ 1027.536001] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1027.537395] xas_store+0x8c/0x1c40 [ 1027.538225] __xa_store+0x164/0x2d0 [ 1027.539219] ? xa_delete_node+0x280/0x280 [ 1027.540335] ? trace_hardirqs_on+0x5b/0x180 [ 1027.541500] xa_store+0x31/0x50 [ 1027.542396] __io_uring_add_tctx_node+0x1cf/0x520 [ 1027.543681] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1027.545078] ? alloc_fd+0x2e7/0x670 [ 1027.546079] io_uring_setup+0x1fbb/0x2980 [ 1027.547187] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1027.548525] ? wait_for_completion_io+0x270/0x270 [ 1027.549857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.551249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.552622] do_syscall_64+0x33/0x40 [ 1027.553611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.554975] RIP: 0033:0x7fe1ce9abb19 [ 1027.555958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.560853] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1027.562890] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1027.564776] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1027.566673] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1027.568565] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1027.570470] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1027.606513] device lo entered promiscuous mode [ 1027.627459] device lo left promiscuous mode [ 1027.640398] device lo entered promiscuous mode [ 1027.648559] device lo left promiscuous mode 23:03:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:03:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:03:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:03:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:03:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) 23:03:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x5, 0x5, 0x29, @mcast2, @local, 0x7fef, 0x700, 0x3fdeaa93, 0x8}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bond_slave_0\x00', 0x10) 23:03:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x20000050) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 1040.990254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1041.002464] device lo entered promiscuous mode [ 1041.011336] FAULT_INJECTION: forcing a failure. [ 1041.011336] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.012646] device lo left promiscuous mode [ 1041.012944] CPU: 1 PID: 7576 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1041.014573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.015740] Call Trace: [ 1041.016111] dump_stack+0x107/0x167 [ 1041.016626] should_fail.cold+0x5/0xa [ 1041.017158] ? xas_alloc+0x336/0x440 [ 1041.017683] should_failslab+0x5/0x20 [ 1041.018227] kmem_cache_alloc+0x5b/0x310 [ 1041.018799] xas_alloc+0x336/0x440 [ 1041.019294] xas_create+0x34a/0x10d0 [ 1041.019820] ? kernel_text_address+0xf2/0x120 [ 1041.020443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1041.021178] xas_store+0x8c/0x1c40 [ 1041.021686] __xa_store+0x164/0x2d0 [ 1041.022204] ? xa_delete_node+0x280/0x280 [ 1041.022789] ? trace_hardirqs_on+0x5b/0x180 [ 1041.023399] xa_store+0x31/0x50 [ 1041.023863] __io_uring_add_tctx_node+0x1cf/0x520 [ 1041.024541] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1041.025272] ? alloc_fd+0x2e7/0x670 [ 1041.025792] io_uring_setup+0x1fbb/0x2980 [ 1041.026392] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1041.027106] ? wait_for_completion_io+0x270/0x270 [ 1041.027803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.028532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.029251] do_syscall_64+0x33/0x40 [ 1041.029776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.030499] RIP: 0033:0x7fe1ce9abb19 [ 1041.031022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.033584] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1041.034658] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1041.035649] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1041.036647] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1041.037640] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1041.038651] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1041.048189] device lo entered promiscuous mode [ 1041.051077] device lo left promiscuous mode 23:03:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) 23:03:10 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'geneve1\x00', {0x7fff}, 0x7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:03:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1041.109462] FAULT_INJECTION: forcing a failure. [ 1041.109462] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.111269] CPU: 0 PID: 7583 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1041.112282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.113329] Call Trace: [ 1041.113672] dump_stack+0x107/0x167 [ 1041.114160] should_fail.cold+0x5/0xa [ 1041.114648] ? xas_alloc+0x336/0x440 [ 1041.115130] should_failslab+0x5/0x20 [ 1041.115613] kmem_cache_alloc+0x5b/0x310 [ 1041.116132] xas_alloc+0x336/0x440 [ 1041.116584] xas_create+0x34a/0x10d0 [ 1041.117062] ? kernel_text_address+0xf2/0x120 [ 1041.117633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1041.118315] xas_store+0x8c/0x1c40 [ 1041.118775] __xa_store+0x164/0x2d0 [ 1041.119240] ? xa_delete_node+0x280/0x280 [ 1041.119770] ? trace_hardirqs_on+0x5b/0x180 [ 1041.120323] xa_store+0x31/0x50 [ 1041.120751] __io_uring_add_tctx_node+0x1cf/0x520 [ 1041.121367] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1041.122053] ? alloc_fd+0x2e7/0x670 [ 1041.122522] io_uring_setup+0x1fbb/0x2980 [ 1041.123053] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1041.123692] ? wait_for_completion_io+0x270/0x270 [ 1041.124323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.124992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.125647] do_syscall_64+0x33/0x40 [ 1041.126138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.126786] RIP: 0033:0x7fe1ce9abb19 [ 1041.127258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.129564] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1041.130545] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1041.131445] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1041.132349] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1041.133251] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1041.134175] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1041.205308] device lo entered promiscuous mode [ 1041.236594] device lo left promiscuous mode [ 1041.237334] device lo entered promiscuous mode [ 1041.242940] device lo entered promiscuous mode [ 1041.254238] device lo left promiscuous mode 23:03:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x3, 0x6d, 0x8000000000000000, 0x5, 0x6, 0x67, 0x2c3, 0x40, 0x2ef, 0x5, 0x2, 0x38, 0x1, 0x0, 0x6f, 0xffff}, [{0x6, 0x4, 0x8, 0x0, 0x1, 0xea, 0x8000, 0x9}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1778) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:03:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) 23:03:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1041.337826] FAULT_INJECTION: forcing a failure. [ 1041.337826] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.339383] CPU: 0 PID: 7597 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1041.340301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.341350] Call Trace: [ 1041.341685] dump_stack+0x107/0x167 [ 1041.342161] should_fail.cold+0x5/0xa [ 1041.342644] ? create_object.isra.0+0x3a/0xa20 [ 1041.343222] should_failslab+0x5/0x20 [ 1041.343706] kmem_cache_alloc+0x5b/0x310 [ 1041.344221] ? mark_held_locks+0x9e/0xe0 [ 1041.344734] create_object.isra.0+0x3a/0xa20 [ 1041.345287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1041.345943] kmem_cache_alloc+0x159/0x310 [ 1041.346471] xas_alloc+0x336/0x440 [ 1041.346920] xas_create+0x34a/0x10d0 [ 1041.347396] ? kernel_text_address+0xf2/0x120 [ 1041.347962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1041.348620] xas_store+0x8c/0x1c40 [ 1041.349077] __xa_store+0x164/0x2d0 [ 1041.349536] ? xa_delete_node+0x280/0x280 [ 1041.350083] ? trace_hardirqs_on+0x5b/0x180 [ 1041.350659] xa_store+0x31/0x50 [ 1041.351078] __io_uring_add_tctx_node+0x1cf/0x520 [ 1041.351683] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1041.352339] ? alloc_fd+0x2e7/0x670 [ 1041.352800] io_uring_setup+0x1fbb/0x2980 [ 1041.353326] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1041.353981] ? wait_for_completion_io+0x270/0x270 [ 1041.354606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.355272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.355925] do_syscall_64+0x33/0x40 [ 1041.356397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.357045] RIP: 0033:0x7fe1ce9abb19 [ 1041.357512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.359852] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1041.360810] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1041.361707] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1041.362625] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1041.363524] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1041.364424] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1041.367412] device lo left promiscuous mode [ 1041.385429] device lo entered promiscuous mode [ 1041.412854] device lo left promiscuous mode [ 1041.414938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1041.425811] device lo entered promiscuous mode [ 1041.427647] device lo left promiscuous mode [ 1041.428629] device lo entered promiscuous mode [ 1041.447311] device lo left promiscuous mode 23:03:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) 23:03:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:03:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:03:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1054.027950] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:23 executing program 6: semctl$SEM_INFO(0x0, 0x5, 0x13, &(0x7f0000000180)=""/245) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r1, &(0x7f0000002980)=[{{&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="15a99c45e3304600b85302e93a4aa92aaf1011d65e0183ce146fa9f017f66ae78bc6a888bc5127efc2c1ecb33a51d21054b390c25f5ce84747cb099660baf9685a89796941cf0828aee45376b1d8522a144937ee96b1252ed47d4840672f680ee79def3c7c20599fa2b053b0a7", 0x6d}], 0x1, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbd8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x5, [{@multicast2, 0x10001}]}, @ssrr={0x89, 0xf, 0x6a, [@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x19}, @local]}, @timestamp_prespec={0x44, 0x3c, 0x26, 0x3, 0xc, [{@broadcast, 0x1}, {@rand_addr=0x64010102, 0x200}, {@multicast1, 0x3}, {@empty, 0x37}, {@rand_addr=0x64010100, 0x6}, {@remote, 0x8}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0xf3, 0x3, 0x5, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7fffffff}, {@broadcast, 0x81}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}, {@remote, 0x7f}]}, @cipso={0x86, 0x3c, 0x0, [{0x6, 0xb, "ffaef4b1c4e0b68903"}, {0x2, 0x5, "f269ea"}, {0x6, 0xd, "9132fc958aacc4968bb820"}, {0x0, 0xb, "11b81b2b3518e2d43b"}, {0x7, 0x2}, {0xd5c5114abcfe33bd, 0x8, "904253fbc5b6"}, {0x7, 0x4, "4eac"}]}, @timestamp={0x44, 0x20, 0x24, 0x0, 0x2, [0x9, 0x8, 0x8a93, 0x10000, 0xb4, 0x1, 0x2]}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="5a7c6eb3e7fea8798fbaf69188a661d9c8a59e3cbd83c5996da943ed3d7b89b619852b643b67058d190bf8d7d4de7abe982570517dcfe3d772413f147c57d0684795fc9fb0a703e87b2e0859b1c17e8ed90d6b4e0e189567272f7f88985f52d15be2ad79a74861e98e5bb3dd3ea5205e906c51a442f4475f55b2ad7714c0291f5945afad05c7caf0d3ad1559621eb515d94c936ec818ff975276daf5b0950d58db584304531eb0d0db7ed5eb3f48e3068bfae2c9ddc1", 0xb6}, {&(0x7f0000000640)="124a2fc4434143b636da7d549e49e0d83fba579c33b44d3bb9550a9ec395b5dbe912b45a303a8b297020bf2187460a87bc14dd233649fe1f90bf0418fb1e9a14054a807f2a695786858dd0e31f9631c82880f08b21164e623d1301e8999fb5ab95926c58973e3eb2cec201cfc28b0de60b1c1097f4eb9d640179ba861e12d0097aa2f6cd64a75340fb4fc8e1f1ea2a5c0f2c3fc43ac70da7c1c6f655ff5560d3e2b5b3b2f462a89950e36b80d9fc830d5e7b122d9176b048961cf4c1ef674e393686512fb5b3a8b673264d137f7ec9940444107bec486d355f039b882de1709c1f465eb38842ab5a2833731dc32450fa", 0xf0}, {&(0x7f0000000400)="042fe3fc83b01765669509579161051c60b0e34ba1a10e8dfaadbca9cb517d6f13ff6b41f1abe89f5e0a274dcb8292c836530b7d129412c4181e1fa1a844d3ff39f6ba6bdf6b0252bbb711f2cf1d48ccfeca655a99a0a278204430377ce94014578111970955f6d8a31220", 0x6b}, {&(0x7f0000000740)="7c7cb641aba975985f8e57", 0xb}, {&(0x7f0000000780)="b97852d36a689f55bfcf3ff69732ca0c808363c473f485a06f01144b5ae66a1f", 0x20}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000008c0)="946187fbbcf3a4312f062d4679817e2424ce7a0c714b0c30cd501468ee35d84e675b5763f633545f9d175d4794b2257aad37cdd5985280f910395c63795258764961e3ad7854ac92af2e81766d9687fafc28dbbfd8fdb5471eefa6950721b3013713defb2e59fb51c92854b398ece94054592aec82dab16c9c31f61b883638aafc8c44bb400749d5fb26ecae1516b9ce39966ef97429c5e7de4058d0010ba116a089457e78aa54238a3ce01b4898981a413f8f7e2997c30dfd1a209f0168afffa9ed3eb47843d246", 0xc8}], 0x7, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="05c2dab673b68230559f3abe7b5744996cbbe8a17b758fbb1b708e9366ddcb67a3be0fd334c8324b188fd00d", 0x2c}, {&(0x7f0000000b00)="5f5261178c45d4a8267177b0fe67653826fb1e09556126a6f3268873f7e4cae311990ea0a8ecbe2b6e938db46c9dcc81a13574ee124f3906d18f2d85d2dcda0ed4d83219c3ada6fa8968e18c70d5f6de30cf44823c34786646aaa52d071ecd79f4", 0x61}], 0x2, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @private=0xa010102}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000c40)="f8ecac835d4f27f316753060f191d307ac86223e7f6c30a6373d923a60c1954550898340a5d3c94de92916d2b895b5b723047199369f6a11765d8dba82ea476ce566d8b48ba63b09d7163c5a666924876057cca4e958519a359f574c2b84d6a0b2487e516bd3d0e2a616a06160aef354d3f7a41da4b79f7c41b17999774123536c08af54e2f84398fac6806b90bfbfe6d73933711de01880377346e3937b28f503748ebb7d5b7fafbe38cb798545293db4f2df9a83afcd7f4e673d610990cbd7", 0xc0}, {&(0x7f0000000d00)="d34102ea60b194a470eba21b51b20a848cce35e07d7b6f7924dceaf541af802823bfb20452f7b5eb83684c903aa7372355a0998ee669acead963924faf63ecec53cbef49b2906d14b7539f15220716db52196570dbf44d890e5b1febcf5876ae76f218591ae78b96bc26e29b47b1edbb7a5c2e0902f7e5b65a8df99cff8d1e2a5d484bb623e0aff4fbb3f6130c54c3a731848cb1dd20779f81d8df1378aaeb93acc032f0e9b477dfe6ca541b9aaeaf629ef06c", 0xb3}, {&(0x7f0000000dc0)="4f03de15d9f2c69bae807b081f7ab8cab872e3d1706e96e6cf111382da73e00bc1fdad715399755a8ebb64c7bc1bd7fc8fb7e0504f64ca7179034ad7edea12159b04331d4355fc717c252ab3137fdaef5fc89db46ba7571c1f9bda44b8b3e8c817cccb6b09ac70b2d9b178b257a8d76145538abeeb8b9e2d6eab96b64d6670efc4368db8dd3aa38ae03ef5e5ce1f60c243babeb196ac135c09e675bcac7cb988864b4586982252577f7d22fdbe9278f9c2c77ed04870cee11fedccc71f9661ce9c1e4afbe190c230aa2adab6ea216c8bed9acf5591cad9bc5e72ac1073e1270fbc43", 0xe2}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="a8ba597cd09a062eb9bf011d4c", 0xd}, {&(0x7f0000001f00)="aba76be97470009efaade4b1ed63439aa864d544891a1b2d5de58e81ac81e8e34e0657fc5703cb1d1cc8bcddc931ab5ab641b06b253722633dbecfb34ee654739c5ff4fc0149848d98660cbd23bf0c", 0x4f}, {&(0x7f0000001f80)="65ba94e7fdd1f2415af32a23c8ea723f4ddc6bd806bf6bdc8ae09e698602c76dbfa49f3001e1a4a2317e7f95e0f630281412ecf3f1de867b4f51c075559507d4ba49f767674438119c4733224269c9b0d595106a053207b81b88866869db276d07277e9880f2773b7b1ac7e03241c5ddfc7563a78bdb845e284e8cf234a982fa284f9333efd45eb0ed8cd9da53de49f5ba61d77944755b7126b443012c82127cc7a99690777ad4ac95456e60bec001e161d23364cc2222c4680f5e8b0596bd8767c956342bc3b2bbceab35a2272ebdd94c4b0151c6d3ed0e64acfd46107ad8411fe285520dd19878657d3dee755325ca949b9daf95", 0xf5}, {&(0x7f0000002080)="f637890edd1c29af69f704cd607973ec53683c7db237e0414ab58d89c6b5af73e3c93a880ea682c243e03d9875015de3219c58a1a479b19186002d692553c4c3550f1200454e45edb02b7f0354af6fdd99ef84cdba25d76a6ac31bab5f74ed6210d23d5ead8d38f8cb4c6c616cd91108108d2bde2ce3c9df03a5ea6285194c6765d72bf6c5a359e190e45e10155d8fa95eebcd6a8a7f3f14180aeef9d8b3b54543e0f69f6817ff95c4c8a394c485b54ef4ccbc7ced510037f86f9d626db19297540d367d92ebd0f302e8e0413a6b73c8fcaf6dfed03c16", 0xd7}, {&(0x7f0000002180)="582fdbdb7547f3e32b3b53c8f76aa7c7716f48143be29aaf407e77ba766e69a40beaabdee1255ce62d3ffc1e0e7e476536a3de4e8271f543b0e45d89c39498dd67056c5a27579d40cc7f185a9bb686d3cfa8b7249a3df5904a226c5caddabf9ae408b691ca1ac0eacd03fb5bbb62fcac384fcc63119476a4f56674e1ad3aeab1750390ed167c9bbcaf9124c81a3c25feab197c52b547553bf5054920cd85d436", 0xa0}], 0x9, &(0x7f0000002300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x7a, 0x0, 0xc, [0x6, 0x3, 0x1000, 0x10000, 0xc656, 0x0, 0x1, 0x6]}, @noop, @ssrr={0x89, 0x1f, 0x73, [@private=0xa010100, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0xd0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @rr={0x7, 0xb, 0x1f, [@remote, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x108}}, {{&(0x7f0000002440)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002480)="459eccbd44edf1da4e0a3097fed8435720264ffe995cce133c3b08cc00b2d3839d911731ee7fd57c04d969e5d73a62c8040965f1b28872ce2cc599108fc403accce2106612ce9a747fbbd63741509c2b9285d789b10bfb3f08ec118df8e5b25a32e37c9a73802cff5e7972cf7fec1b47d6fcbebd79bbd1ca2b72d523cad6b0c5412a932196369f82d7d34e5f0259610921f4c1ad49d98d36a04d52e5", 0x9c}, {&(0x7f0000002540)="0c183959b1c875a5c9ac682887e4f22c21e7674e49bd01abfbba80cf42ca6c2697193281796f14053b9af27a2e535a9ebd01c22fadb462a334f617df83a248dad8d0f2025830bc046e3aca0f9aef529ff2929b84cbb71fee6d3e660ad92f0f37bca53fdcb073f76dabb787cdae2a704e1612b30871c82e98d0bb746616c53dd561669e6db5343d3a1c96ad304b7ce5105c463229f598f4ec30a45c77aab15752bd64bb9038c15b3f96686aba2a5bb130605a", 0xb2}, {&(0x7f0000002600)="4a1a842b3f9a7cc005454bf7e6f58183c101d85e519c63b5835f5993086cce2e0f76101915da142f7e1110e3621321bd689238237f72c81119d01fd093c6feca460958773873bdfd57b43b5559a9786483361cb7f21e333651e9ffa9d8872dd688186442a28b6447e807f2be76e1c55ebb133fbcc00c0d464502755860ef5d56ad18dad0796bcaf56379b1b27b0a21a6b5d2b6882005c9fb710a0832a19d5b68e99cd9c338d7e1983c91fa", 0xab}, {&(0x7f00000026c0)="6a8b9ffe2328f9a03ad797ae29d379560b5bf129db1031191eab5f9671d94d50ca08a74b93195b31df325eb13ed361d6efe87e37043c2f812f841a32602b6c729119072bbc0b47995f4b8da50528f14cbd185d57d7e4c96754ad00b74e76fe2664e6983bf5d2356f317a99489c6c1d36f31ae08f1514995968636756e2f7251f9dbdaee5f314f37fbfec69e0d915edc704d345db6165e9198358d61c7cecb2a32c1098e07ed7320eaafe4ef3dfcedb31322a707e7524a403ac2b1c0343318d5421a056b418c3bb155ae433034ec9bb349f", 0xd1}, {&(0x7f00000027c0)="dd6b2f962fd81cf5c8b682f411f48c4c9bb2a4c8cbcd4fc482d2a73db76a7f420857d672eaa60d2317206bfb4e24de8e66852c615ec58b68b3e159781b288c4bfadea9c9e30444be464306fbd07a6ff6647603ac477105fd54739b7dfd7f6b4a7f8a303bb5817a38890ec5632f1fa482a63e063f1b1ed6ba24f2c6f13d4838f599fa7151738e5ac462aa67ce", 0x8c}], 0x5, &(0x7f0000002900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x48}}], 0x5, 0x4004) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002ac0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000e000000011ebc6c6530002f8471c9cfa443de0a077cd693544f772b1d0cbd72aeceb04399ebc5c35cb4f42b48ddc7c107b82f8a76974b9e5b83301767ce2e9dd044d9f543e6b1dcddf108d152b05ddef8a749a83cc55b7d80be58fee4c4d32561c622818b1adc7c1fa13ba09cfafb7609a93c900ccdefd73c42d1091191a846cd7e2729c31ed6d63bcc07baeab7102906b916a73263517d934ac7dee2cea2abebb6b0d07ebd23b35122d3a08ffa36268c826a2aac21cb"]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) 23:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) openat(r1, 0x0, 0x38b082, 0x24) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:03:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:03:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1054.075239] device lo entered promiscuous mode [ 1054.094857] device lo left promiscuous mode [ 1054.110188] device lo entered promiscuous mode 23:03:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) sendfile(r1, r0, 0x0, 0x5) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) [ 1054.124215] device lo left promiscuous mode [ 1054.137307] FAULT_INJECTION: forcing a failure. [ 1054.137307] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.140259] CPU: 0 PID: 7617 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1054.142045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.144066] Call Trace: [ 1054.144722] dump_stack+0x107/0x167 [ 1054.145615] should_fail.cold+0x5/0xa [ 1054.146553] ? xas_alloc+0x336/0x440 [ 1054.147469] should_failslab+0x5/0x20 [ 1054.148391] kmem_cache_alloc+0x5b/0x310 [ 1054.149398] xas_alloc+0x336/0x440 [ 1054.150286] xas_create+0x34a/0x10d0 [ 1054.151208] ? kernel_text_address+0xf2/0x120 [ 1054.152312] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1054.153566] xas_store+0x8c/0x1c40 [ 1054.154435] __xa_store+0x164/0x2d0 [ 1054.155307] ? xa_delete_node+0x280/0x280 [ 1054.156314] ? trace_hardirqs_on+0x5b/0x180 [ 1054.157347] xa_store+0x31/0x50 [ 1054.158163] __io_uring_add_tctx_node+0x1cf/0x520 [ 1054.159347] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1054.160631] ? alloc_fd+0x2e7/0x670 [ 1054.161536] io_uring_setup+0x1fbb/0x2980 [ 1054.162544] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1054.163775] ? wait_for_completion_io+0x270/0x270 [ 1054.164965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.166241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.167487] do_syscall_64+0x33/0x40 [ 1054.168397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.169649] RIP: 0033:0x7fe1ce9abb19 [ 1054.170566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.175080] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1054.176925] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1054.178680] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1054.180437] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1054.182182] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1054.183941] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x8, 0x51, 0x20, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x0, 0xfffffff9, 0x81}}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @nfc={0x27, 0x1, 0x1, 0x2}, @xdp={0x2c, 0x1, r6, 0x3e}, 0xfe0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000100)='gretap0\x00', 0x8, 0x7, 0x9}) 23:03:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:03:23 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1054.371409] device lo entered promiscuous mode [ 1054.415264] device lo left promiscuous mode [ 1054.437356] device lo entered promiscuous mode [ 1054.454926] device lo left promiscuous mode 23:03:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:03:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:03:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:03:37 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:03:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) 23:03:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3f, 0x3, 0x6, 0x6, 0x0, 0x9, 0x40000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x101}, 0x20, 0x4, 0x4, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xb, r4, 0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000180)={0x1, 0x2, @start={0x0, 0x1, "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", "e8d5dfa3a5dce47d10bbb0e0f4f719609397d151fd0950e525cc46ed703ac543816f3231df2978a935a2001523386e6f7e64d6b46d33ff76d39e4073957e71c75334f61e6a80854c019cd77089101b50211e10049aa1f9a03cb0f8b401f85711259c94e38b7d1ddd23254f29e7d2b35a1b3a97da87112a01515142e186cee2d40577a20024bc97ede34b9c81185ca78415e84b54e6c79af20cc654fa1bef1b9cb5ecfe7364f9df2658dbf1a7360ef028baf16e791b2f74ba7ddae3d53699bcdc069ba47a72e80cf6d0a6be96e68cac4099d838c9f4985847780ae31c0bc91853dd45923f21949b985688bdf0d0868fe04b265b766468a7cd632d012995cae2ca883be38291c3c688cd684e68bc89a0f23c8f3d65e01e405c4941aeff5e2b57565f3d97f7cee02226cb49e03ed7ec2d2ee90b54b6b075c618cc188ccd56ff366096ebe5da76b754dd60408310d0a1027218d7bc990a200f9e055d94f51d96a516f8aaeb4140676bd5c5533030556d0a4fbd483cbcedba53a90d3aef315591b83a8d2d98d5364ef22e783595ae19b2600de914f84c7b5ed7672109008d64d9538d69fec4510a8e455515a42d2931d58b7875852414b166407892fcbbb409190c25bb29106402d6dd28df58ccfa6f0a077f1de87f02642e53bf86d57b367aeef47422a7d21be61aa9da4ccc7ab98cd052b7b88715326f981d4372f2da28e7727b859600485aaa4296980775a433d3b17f2f0e1dc59c284eb0b3a41900158c9a7e262ef3315db8d46d5daa7e3ffa5fbd21960d47204c99802b88def20ad3e32f2deea9ab065f369989f872e295da133222601fd2972338526091dcc33e7fd9e7c8eb48f87a6175ee9d2059b53d88ec36f639aec9fce84a914c91a20c40a06a1bb18cbfef791be56563884c0d50126ac301379f64e2060836c5c5cdb8a92a2d8a7ab342df3263cc01abd803f97a8a9e802a75ac7a025ff2042f82060e592f2189e6b1150968b092ce44639de126a386bc742860520398752cd72f7a223a52c952df0df7c0e9a4bffc1b370a225793922173095c6dfcb8e3810cb5a1a1c795a9a76c07a4b7fb7a2c4ebe751f639a1136d89b3576047964891efd1373eb4adacc8f8e86cbb39837843544805962afe7a239db17fe67bc25f6111ce6678e9a4bc37711ffdca08642e1341882109be3da597310781504226ac8de66ed26730c2ba4f5fcaa9b035528e6fedb2dfa2b2cfb097ada057b865e5a80b64ae66108b49cb4448d567645c1cac96db718da824a188c97499a9813a62991ab7e30a1d8dba612a0249723843e59be5c13260650c979cc30fd928bfe793c83dc9fb03697ee97204396231f98bb43c65dd9f5d5363eae9d2cd8a4f951c6566ae578519e8c137b343ff70156f8273ae7685b50650fd053052a5fc821ef0c640396633c400bb0bb6de5afdc07"}, [0x7ff, 0x4c9, 0xfae, 0xff, 0x10001, 0x100000000, 0x401, 0x80000000, 0xfff, 0x7f, 0xff, 0xbd, 0x8001, 0x6, 0x53, 0x0, 0xfffffffffffff000, 0x3, 0xffffffffffffff7f, 0x6, 0x55, 0x7, 0x100000000, 0x9, 0x4, 0x5c1, 0x1000, 0x5, 0x318, 0x10001, 0xc51, 0x1ff, 0x101, 0x8001, 0x5, 0xfffffffffffff2c0, 0xc469, 0x8, 0xffb, 0xffffffffffffffff, 0xbf, 0x3, 0x1267a0000000, 0x1ff, 0x7fffffff, 0x8, 0x100, 0x80000001, 0x66c, 0x7, 0x3, 0x4, 0x4, 0x3, 0x9, 0xfffffffffffffffa, 0x4, 0x23b, 0x100000001, 0x7, 0x200, 0x9, 0x7, 0x6ba9]}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000bc0)={r6, 0xffffffffe29976ba, 0x100000000, 0x1}) 23:03:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1067.547855] device lo entered promiscuous mode [ 1067.550230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1067.571015] device lo left promiscuous mode [ 1067.579939] device lo entered promiscuous mode [ 1067.593962] device lo left promiscuous mode 23:03:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1067.648930] FAULT_INJECTION: forcing a failure. [ 1067.648930] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.650576] CPU: 1 PID: 7668 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1067.651404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.652402] Call Trace: [ 1067.652730] dump_stack+0x107/0x167 [ 1067.653172] should_fail.cold+0x5/0xa [ 1067.653634] ? create_object.isra.0+0x3a/0xa20 [ 1067.654190] should_failslab+0x5/0x20 [ 1067.654656] kmem_cache_alloc+0x5b/0x310 [ 1067.655148] ? mark_held_locks+0x9e/0xe0 [ 1067.655637] create_object.isra.0+0x3a/0xa20 [ 1067.656168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.656783] kmem_cache_alloc+0x159/0x310 [ 1067.657283] xas_alloc+0x336/0x440 [ 1067.657711] xas_create+0x34a/0x10d0 [ 1067.658166] ? kernel_text_address+0xf2/0x120 [ 1067.658758] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1067.659391] xas_store+0x8c/0x1c40 [ 1067.659826] __xa_store+0x164/0x2d0 [ 1067.660266] ? xa_delete_node+0x280/0x280 [ 1067.660766] ? trace_hardirqs_on+0x5b/0x180 [ 1067.661288] xa_store+0x31/0x50 [ 1067.661689] __io_uring_add_tctx_node+0x1cf/0x520 [ 1067.662274] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1067.662901] ? alloc_fd+0x2e7/0x670 [ 1067.663344] io_uring_setup+0x1fbb/0x2980 [ 1067.663845] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1067.664453] ? wait_for_completion_io+0x270/0x270 [ 1067.665042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.665673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.666302] do_syscall_64+0x33/0x40 [ 1067.666752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.667365] RIP: 0033:0x7fe1ce9abb19 [ 1067.667812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.670019] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1067.670942] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1067.671798] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1067.672654] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1067.673509] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1067.674390] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x80, 0x0, 0x3, 0x0, 0x2a95, 0x220, 0xbad21b1f65108455, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp, 0x8806, 0x5, 0x5, 0x4, 0x756, 0xcdf, 0x0, 0x0, 0x8001, 0x0, 0x1f}, r4, 0xffffffffffffffff, r5, 0x0) 23:03:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1067.752161] device lo entered promiscuous mode [ 1067.760990] device lo left promiscuous mode [ 1067.763200] device lo entered promiscuous mode [ 1067.774885] device lo left promiscuous mode 23:03:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) 23:03:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@rc={0x1f, @fixed}, 0x0, 0x80400, 0x1}, 0x7) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:03:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:03:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 23:03:37 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) 23:03:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1067.873957] device lo entered promiscuous mode [ 1067.877594] device lo entered promiscuous mode [ 1067.880365] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1067.887078] device lo left promiscuous mode [ 1067.893980] device lo left promiscuous mode [ 1067.896010] device lo entered promiscuous mode [ 1067.906815] device lo left promiscuous mode [ 1067.908155] device lo entered promiscuous mode [ 1067.909453] device lo left promiscuous mode [ 1068.029951] FAULT_INJECTION: forcing a failure. [ 1068.029951] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.031354] CPU: 1 PID: 7699 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1068.032341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.033274] Call Trace: [ 1068.033580] dump_stack+0x107/0x167 [ 1068.033993] should_fail.cold+0x5/0xa [ 1068.034431] ? xas_alloc+0x336/0x440 [ 1068.034855] should_failslab+0x5/0x20 [ 1068.035283] kmem_cache_alloc+0x5b/0x310 [ 1068.035749] xas_alloc+0x336/0x440 [ 1068.036150] xas_create+0x34a/0x10d0 [ 1068.036579] ? kernel_text_address+0xf2/0x120 [ 1068.037085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1068.037673] xas_store+0x8c/0x1c40 [ 1068.038077] __xa_store+0x164/0x2d0 [ 1068.038500] ? xa_delete_node+0x280/0x280 [ 1068.038966] ? trace_hardirqs_on+0x5b/0x180 [ 1068.039454] xa_store+0x31/0x50 [ 1068.039828] __io_uring_add_tctx_node+0x1cf/0x520 [ 1068.040368] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1068.040959] ? alloc_fd+0x2e7/0x670 [ 1068.041374] io_uring_setup+0x1fbb/0x2980 [ 1068.041844] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1068.042419] ? wait_for_completion_io+0x270/0x270 [ 1068.042969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.043561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.044142] do_syscall_64+0x33/0x40 [ 1068.044562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.045132] RIP: 0033:0x7fe1ce9abb19 [ 1068.045551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.047622] RSP: 002b:00007fe1cbf21108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1068.048476] RAX: ffffffffffffffda RBX: 00007fe1ceabef60 RCX: 00007fe1ce9abb19 [ 1068.049271] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1068.050077] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1068.050879] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1068.051678] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) 23:03:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:03:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1080.681461] device lo entered promiscuous mode [ 1080.683173] device lo left promiscuous mode 23:03:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 23:03:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:03:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) [ 1080.705810] device lo entered promiscuous mode [ 1080.707163] device lo left promiscuous mode [ 1080.721946] FAULT_INJECTION: forcing a failure. [ 1080.721946] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.724531] CPU: 1 PID: 7716 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1080.726109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1080.726649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1080.727906] Call Trace: [ 1080.727932] dump_stack+0x107/0x167 [ 1080.727957] should_fail.cold+0x5/0xa [ 1080.731252] ? create_object.isra.0+0x3a/0xa20 [ 1080.732252] should_failslab+0x5/0x20 [ 1080.733081] kmem_cache_alloc+0x5b/0x310 [ 1080.733968] ? mark_held_locks+0x9e/0xe0 [ 1080.734861] create_object.isra.0+0x3a/0xa20 [ 1080.735808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1080.736908] kmem_cache_alloc+0x159/0x310 [ 1080.737808] xas_alloc+0x336/0x440 [ 1080.738579] xas_create+0x34a/0x10d0 [ 1080.739385] ? kernel_text_address+0xf2/0x120 [ 1080.740349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1080.741472] xas_store+0x8c/0x1c40 [ 1080.742245] __xa_store+0x164/0x2d0 [ 1080.743038] ? xa_delete_node+0x280/0x280 [ 1080.743934] ? trace_hardirqs_on+0x5b/0x180 [ 1080.744864] xa_store+0x31/0x50 [ 1080.745574] __io_uring_add_tctx_node+0x1cf/0x520 [ 1080.746613] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1080.747732] ? alloc_fd+0x2e7/0x670 [ 1080.748522] io_uring_setup+0x1fbb/0x2980 [ 1080.749417] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1080.750510] ? wait_for_completion_io+0x270/0x270 [ 1080.751563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1080.752685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1080.753789] do_syscall_64+0x33/0x40 [ 1080.754592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1080.755691] RIP: 0033:0x7fe1ce9abb19 [ 1080.756486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1080.760794] RSP: 002b:00007fe1cbf00108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1080.762648] RAX: ffffffffffffffda RBX: 00007fe1ceabf020 RCX: 00007fe1ce9abb19 [ 1080.764377] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1080.766108] RBP: 0000000020000080 R08: 0000000020000140 R09: 0000000020000140 [ 1080.767829] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1080.769550] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:03:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x24000}, 0x10000, 0x0, 0x8663, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x1, 0x5, 0x7, 0x0, 0xde6b, 0x20048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x7fff, 0x3f}, 0x0, 0x9, 0x7, 0x4, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0x20}, 0xffffffffffffffff, 0xc, r5, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000200)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001000000180000001f234f02aa4e954edcce6c59d20e9aeacbe4f334216fe51e845e158a16abed09a04e65f2fc0a33831cd4bbe12e5e5d3163d5d906b0603f4119e3a9147c22468d2391e459bbea4989e796fab558bb00abfd720260e07b9c60dfaf163ac6ad12929a6408ffb6515b9c23491463d13bab55f5e0c04154bd9f17a84d711ce051a88d10e5e3edfd3e", @ANYRES32=r6, @ANYBLOB="00010000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x38, 0x0, 0xb7, 0xf4, 0x0, 0x0, 0x10090, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4, 0x3}, 0x6812, 0x0, 0x80000000, 0x9, 0x4, 0x8, 0x800, 0x0, 0x3, 0x0, 0x7f}, r8, 0x2, r9, 0xa) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:03:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ftruncate(r1, 0x6) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6, &(0x7f00000016c0)=""/127, 0x7f}, 0x3}], 0x1, 0x1, &(0x7f0000001740)={0x0, 0x3938700}) 23:03:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1080.892312] device lo entered promiscuous mode [ 1080.906211] device lo entered promiscuous mode [ 1080.910666] device lo left promiscuous mode [ 1080.941829] device lo entered promiscuous mode 23:03:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1080.951057] device lo left promiscuous mode 23:03:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) 23:03:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1080.993327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x6, 0x6, 0x6, 0x0, 0x7, 0x5084c, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000100)}, 0x2, 0x0, 0x2, 0x1, 0x10000, 0x3f, 0x8001, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x63, 0x4, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8714, 0xfffffff7, 0x8}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) dup2(r6, r7) fcntl$setown(0xffffffffffffffff, 0x8, r5) [ 1081.018235] device lo left promiscuous mode [ 1081.076308] device lo entered promiscuous mode [ 1081.078804] device lo left promiscuous mode [ 1081.091364] FAULT_INJECTION: forcing a failure. [ 1081.091364] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.092892] CPU: 0 PID: 7741 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1081.093722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.094739] Call Trace: [ 1081.095060] dump_stack+0x107/0x167 [ 1081.095509] should_fail.cold+0x5/0xa [ 1081.095964] ? vm_area_dup+0x78/0x290 [ 1081.096436] should_failslab+0x5/0x20 [ 1081.096890] kmem_cache_alloc+0x5b/0x310 [ 1081.097380] vm_area_dup+0x78/0x290 [ 1081.097819] ? lock_release+0x680/0x680 [ 1081.098292] ? mark_lock+0xf5/0x2df0 [ 1081.098759] ? lock_chain_count+0x20/0x20 [ 1081.099254] ? mark_lock+0xf5/0x2df0 [ 1081.099709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1081.100337] ? lock_chain_count+0x20/0x20 [ 1081.100835] ? mark_lock+0xf5/0x2df0 [ 1081.101286] ? vm_area_alloc+0x110/0x110 [ 1081.101772] ? __lock_acquire+0x1657/0x5b00 [ 1081.102303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1081.102943] ? vmacache_find+0x55/0x2a0 [ 1081.103424] __split_vma+0xa8/0x4e0 [ 1081.103863] __do_munmap+0x365/0x1260 [ 1081.104333] ? arch_get_unmapped_area+0x450/0x450 [ 1081.104908] ? lock_release+0x680/0x680 [ 1081.105379] mmap_region+0x7c8/0x1500 [ 1081.105844] do_mmap+0xcdb/0x11e0 [ 1081.106262] vm_mmap_pgoff+0x198/0x1f0 [ 1081.106744] ? randomize_page+0xb0/0xb0 [ 1081.107234] ksys_mmap_pgoff+0x41c/0x560 [ 1081.107720] ? find_mergeable_anon_vma+0x250/0x250 [ 1081.108311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1081.108952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1081.109578] do_syscall_64+0x33/0x40 [ 1081.110022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.110656] RIP: 0033:0x7fe1ce9abb62 [ 1081.111107] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1081.113327] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1081.114232] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1081.115122] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1081.115979] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1081.116841] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1081.117698] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:03:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1081.184591] device lo entered promiscuous mode [ 1081.195508] device lo left promiscuous mode [ 1081.208795] device lo entered promiscuous mode [ 1081.209889] device lo left promiscuous mode 23:04:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:04:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) 23:04:03 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:04:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1094.173604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1094.186824] device lo entered promiscuous mode 23:04:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x101800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400ee943686c5344f00", @ANYRES16=r2, @ANYBLOB="020025bd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44850) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) 23:04:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_pts(r0, 0xc0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000000)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 1094.202924] device lo left promiscuous mode 23:04:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:04:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1094.209028] device lo entered promiscuous mode [ 1094.218923] device lo left promiscuous mode [ 1094.240335] FAULT_INJECTION: forcing a failure. [ 1094.240335] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.241881] CPU: 0 PID: 7753 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1094.242798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.243893] Call Trace: [ 1094.244246] dump_stack+0x107/0x167 [ 1094.244725] should_fail.cold+0x5/0xa [ 1094.245228] ? create_object.isra.0+0x3a/0xa20 [ 1094.245833] should_failslab+0x5/0x20 [ 1094.246336] kmem_cache_alloc+0x5b/0x310 [ 1094.246885] create_object.isra.0+0x3a/0xa20 [ 1094.247471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1094.248147] kmem_cache_alloc+0x159/0x310 [ 1094.248807] vm_area_dup+0x78/0x290 [ 1094.249403] ? lock_release+0x680/0x680 [ 1094.249930] ? mark_lock+0xf5/0x2df0 [ 1094.250424] ? lock_chain_count+0x20/0x20 [ 1094.250982] ? mark_lock+0xf5/0x2df0 [ 1094.251472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1094.252158] ? lock_chain_count+0x20/0x20 [ 1094.252714] ? mark_lock+0xf5/0x2df0 [ 1094.253210] ? vm_area_alloc+0x110/0x110 [ 1094.253736] ? __lock_acquire+0x1657/0x5b00 [ 1094.254313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1094.255007] ? vmacache_find+0x55/0x2a0 [ 1094.255527] __split_vma+0xa8/0x4e0 [ 1094.256008] __do_munmap+0x365/0x1260 [ 1094.256508] ? arch_get_unmapped_area+0x450/0x450 [ 1094.257137] ? lock_release+0x680/0x680 [ 1094.257659] mmap_region+0x7c8/0x1500 [ 1094.258159] do_mmap+0xcdb/0x11e0 [ 1094.258624] vm_mmap_pgoff+0x198/0x1f0 [ 1094.259145] ? randomize_page+0xb0/0xb0 [ 1094.259685] ksys_mmap_pgoff+0x41c/0x560 [ 1094.260220] ? find_mergeable_anon_vma+0x250/0x250 [ 1094.260877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.261562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.262246] do_syscall_64+0x33/0x40 [ 1094.262751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.263424] RIP: 0033:0x7fe1ce9abb62 [ 1094.263912] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1094.266375] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1094.267390] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1094.268334] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1094.269259] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1094.270202] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1094.271138] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:04:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50086}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x0, 0x80, 0x7, 0x1f, 0x1, 0xe0, 0x0, 0x1000, 0x80004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x40008, 0xd45, 0xfff, 0x1, 0x1, 0x6, 0x2, 0x0, 0x5, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2}) 23:04:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:04 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:04:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:04:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:04 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1094.537635] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1094.559093] device lo entered promiscuous mode [ 1094.571581] device lo entered promiscuous mode [ 1094.574421] device lo left promiscuous mode [ 1094.584122] device lo left promiscuous mode [ 1094.593661] device lo entered promiscuous mode [ 1094.610145] device lo left promiscuous mode [ 1094.611134] device lo entered promiscuous mode [ 1094.618853] device lo left promiscuous mode 23:04:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000180), 0x2, 0x0) sendfile(r3, r0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) pwrite64(r7, &(0x7f0000000080)="b094260912174e1417746c092246170824ed9273f9d4839f2d8d098f590c7f502e61d24a6ade1b13a7ae", 0x2a, 0xffffffffffffffea) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:04:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) 23:04:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:17 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1107.461007] device lo entered promiscuous mode [ 1107.472414] device lo left promiscuous mode 23:04:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:04:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:04:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="189065727370616e3000000000d80c000000", @ANYRES32=r2, @ANYRES64]}) r3 = mq_open(&(0x7f0000000180)='\xff\xff\xff\xff\xff\xff', 0x2, 0x42, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x20000810) sendfile(r3, r0, &(0x7f0000000200)=0x9, 0x101) [ 1107.476598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1107.485692] FAULT_INJECTION: forcing a failure. [ 1107.485692] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.488183] CPU: 1 PID: 7808 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1107.489657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1107.491447] Call Trace: [ 1107.492018] dump_stack+0x107/0x167 [ 1107.492806] should_fail.cold+0x5/0xa [ 1107.493630] ? anon_vma_clone+0xdc/0x590 [ 1107.494508] should_failslab+0x5/0x20 [ 1107.495339] kmem_cache_alloc+0x5b/0x310 [ 1107.496222] anon_vma_clone+0xdc/0x590 [ 1107.497076] __split_vma+0x17c/0x4e0 [ 1107.497886] __do_munmap+0x365/0x1260 [ 1107.498724] ? arch_get_unmapped_area+0x450/0x450 [ 1107.499770] ? lock_release+0x680/0x680 [ 1107.500632] mmap_region+0x7c8/0x1500 [ 1107.501476] do_mmap+0xcdb/0x11e0 [ 1107.502235] vm_mmap_pgoff+0x198/0x1f0 [ 1107.503098] ? randomize_page+0xb0/0xb0 [ 1107.503975] ksys_mmap_pgoff+0x41c/0x560 [ 1107.504853] ? find_mergeable_anon_vma+0x250/0x250 [ 1107.505921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1107.507063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1107.508188] do_syscall_64+0x33/0x40 [ 1107.508997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1107.510106] RIP: 0033:0x7fe1ce9abb62 [ 1107.510919] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1107.514901] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1107.516549] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1107.518397] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1107.519965] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1107.521713] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1107.523601] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1107.530124] device lo entered promiscuous mode [ 1107.536971] device lo left promiscuous mode [ 1107.540882] device lo entered promiscuous mode [ 1107.544503] device lo entered promiscuous mode [ 1107.548106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:04:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1107.568578] device lo left promiscuous mode [ 1107.574387] device lo left promiscuous mode 23:04:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x20000000, 0x0, 0x6d65}, 0x0, 0x5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:04:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="0ecffc4f5886"}, 0x10) 23:04:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1107.809222] device lo entered promiscuous mode [ 1107.811111] device lo left promiscuous mode [ 1107.945591] device lo entered promiscuous mode [ 1107.947177] device lo left promiscuous mode 23:04:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:04:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="0ecffc4f5886"}, 0x10) 23:04:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) 23:04:32 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:04:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9c, 0xff, 0x4, 0x5, 0x0, 0x8, 0x61, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x140, 0x3, 0x1, 0x1, 0x7, 0x0, 0x9, 0x0, 0x200, 0x0, 0xffffffffffff0a1c}, 0x0, 0x4, r1, 0x7) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xffff) openat(r7, &(0x7f0000000180)='./file0\x00', 0x400000, 0x45) 23:04:32 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1123.332465] device lo entered promiscuous mode [ 1123.365909] FAULT_INJECTION: forcing a failure. [ 1123.365909] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.368639] CPU: 0 PID: 7852 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1123.370344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.372276] Call Trace: 23:04:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1123.372883] dump_stack+0x107/0x167 [ 1123.373854] should_fail.cold+0x5/0xa [ 1123.374713] ? create_object.isra.0+0x3a/0xa20 [ 1123.375766] should_failslab+0x5/0x20 [ 1123.376618] kmem_cache_alloc+0x5b/0x310 [ 1123.377565] create_object.isra.0+0x3a/0xa20 [ 1123.378608] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.379774] kmem_cache_alloc+0x159/0x310 [ 1123.380745] anon_vma_clone+0xdc/0x590 [ 1123.381646] __split_vma+0x17c/0x4e0 [ 1123.382517] __do_munmap+0x365/0x1260 [ 1123.383412] ? arch_get_unmapped_area+0x450/0x450 [ 1123.384515] ? lock_release+0x680/0x680 [ 1123.385423] mmap_region+0x7c8/0x1500 [ 1123.386305] do_mmap+0xcdb/0x11e0 [ 1123.387109] vm_mmap_pgoff+0x198/0x1f0 [ 1123.388016] ? randomize_page+0xb0/0xb0 [ 1123.388937] ksys_mmap_pgoff+0x41c/0x560 [ 1123.389873] ? find_mergeable_anon_vma+0x250/0x250 [ 1123.390995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.392176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.393366] do_syscall_64+0x33/0x40 [ 1123.394207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.395386] RIP: 0033:0x7fe1ce9abb62 [ 1123.396267] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1123.400530] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1123.402264] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1123.403899] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1123.405554] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1123.407179] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1123.408835] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1123.417152] device lo left promiscuous mode [ 1123.423062] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1123.434108] device lo entered promiscuous mode [ 1123.435119] device lo entered promiscuous mode [ 1123.438097] device lo left promiscuous mode [ 1123.442535] device lo left promiscuous mode [ 1123.449375] device lo entered promiscuous mode [ 1123.452906] device lo left promiscuous mode 23:04:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) 23:04:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:04:33 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0xffff) bind$packet(r9, &(0x7f0000000000)={0x11, 0xf6, r7, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0xfedd) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1123.581977] device lo entered promiscuous mode [ 1123.644937] device lo entered promiscuous mode [ 1123.654658] device lo left promiscuous mode [ 1123.666633] device lo left promiscuous mode 23:04:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1123.676047] device lo entered promiscuous mode [ 1123.684373] device lo entered promiscuous mode [ 1123.696937] FAULT_INJECTION: forcing a failure. [ 1123.696937] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.698428] CPU: 1 PID: 7870 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1123.699572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.700748] Call Trace: [ 1123.701092] dump_stack+0x107/0x167 [ 1123.701565] should_fail.cold+0x5/0xa [ 1123.702057] ? vm_area_dup+0x78/0x290 [ 1123.702562] should_failslab+0x5/0x20 [ 1123.703079] kmem_cache_alloc+0x5b/0x310 [ 1123.703622] ? SOFTIRQ_verbose+0x10/0x10 [ 1123.704152] vm_area_dup+0x78/0x290 [ 1123.704631] ? find_held_lock+0x2c/0x110 [ 1123.705163] ? __vma_adjust+0x612/0x24b0 [ 1123.705694] ? lock_downgrade+0x6d0/0x6d0 [ 1123.706233] ? find_held_lock+0x2c/0x110 [ 1123.706766] ? up_write+0x191/0x550 [ 1123.707254] ? downgrade_write+0x3a0/0x3a0 [ 1123.707802] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1123.708505] ? vm_area_alloc+0x110/0x110 [ 1123.709035] ? __vma_adjust+0xb5c/0x24b0 [ 1123.709576] ? vmacache_find+0x55/0x2a0 [ 1123.710086] __split_vma+0xa8/0x4e0 [ 1123.710563] __do_munmap+0xf40/0x1260 [ 1123.711068] ? arch_get_unmapped_area+0x450/0x450 [ 1123.711688] ? lock_release+0x680/0x680 [ 1123.712213] mmap_region+0x7c8/0x1500 [ 1123.712713] do_mmap+0xcdb/0x11e0 [ 1123.713175] vm_mmap_pgoff+0x198/0x1f0 [ 1123.713686] ? randomize_page+0xb0/0xb0 [ 1123.714217] ksys_mmap_pgoff+0x41c/0x560 [ 1123.714741] ? find_mergeable_anon_vma+0x250/0x250 [ 1123.715378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.716049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.716713] do_syscall_64+0x33/0x40 [ 1123.717190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.717844] RIP: 0033:0x7fe1ce9abb62 [ 1123.718317] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1123.720664] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1123.721642] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1123.722552] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1123.723463] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1123.724371] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1123.725285] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1123.749827] device lo left promiscuous mode [ 1123.755143] device lo left promiscuous mode 23:04:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 66) 23:04:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) bind$packet(r2, &(0x7f0000000000)={0x11, 0x2, 0x0, 0x1, 0x20, 0x6, @broadcast}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) [ 1123.964480] FAULT_INJECTION: forcing a failure. [ 1123.964480] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.965979] CPU: 1 PID: 7886 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1123.966762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.967819] Call Trace: [ 1123.968170] dump_stack+0x107/0x167 [ 1123.968590] should_fail.cold+0x5/0xa [ 1123.969034] ? create_object.isra.0+0x3a/0xa20 [ 1123.969552] should_failslab+0x5/0x20 [ 1123.969984] kmem_cache_alloc+0x5b/0x310 [ 1123.970451] create_object.isra.0+0x3a/0xa20 [ 1123.970957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.971541] kmem_cache_alloc+0x159/0x310 [ 1123.972020] vm_area_dup+0x78/0x290 [ 1123.972432] ? find_held_lock+0x2c/0x110 [ 1123.972900] ? __vma_adjust+0x612/0x24b0 [ 1123.973359] ? lock_downgrade+0x6d0/0x6d0 [ 1123.973851] ? find_held_lock+0x2c/0x110 [ 1123.974425] ? up_write+0x191/0x550 [ 1123.974845] ? downgrade_write+0x3a0/0x3a0 [ 1123.975327] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1123.975937] ? vm_area_alloc+0x110/0x110 [ 1123.976403] ? __vma_adjust+0xb5c/0x24b0 [ 1123.976869] ? vmacache_find+0x55/0x2a0 [ 1123.977321] __split_vma+0xa8/0x4e0 [ 1123.977737] __do_munmap+0xf40/0x1260 [ 1123.978169] ? arch_get_unmapped_area+0x450/0x450 [ 1123.978714] ? lock_release+0x680/0x680 [ 1123.979175] mmap_region+0x7c8/0x1500 [ 1123.979623] do_mmap+0xcdb/0x11e0 [ 1123.980023] vm_mmap_pgoff+0x198/0x1f0 [ 1123.980466] ? randomize_page+0xb0/0xb0 [ 1123.980923] ksys_mmap_pgoff+0x41c/0x560 [ 1123.981391] ? find_mergeable_anon_vma+0x250/0x250 [ 1123.981959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1123.982552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1123.983144] do_syscall_64+0x33/0x40 [ 1123.983574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.984168] RIP: 0033:0x7fe1ce9abb62 [ 1123.984590] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1123.986828] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1123.987689] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1123.988497] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1123.989303] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1123.990109] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1123.990918] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1124.006497] device lo entered promiscuous mode [ 1124.007603] device lo left promiscuous mode [ 1124.014411] device lo entered promiscuous mode [ 1124.015419] device lo left promiscuous mode 23:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) 23:04:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:04:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:04:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 67) 23:04:47 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x8e, 0x1, 0x8, 0xa, @local, @local, 0x1, 0x700, 0x101, 0x8}}) sendto$packet(r0, &(0x7f0000000180)="b4d1758274761856428b910f068a980895c179e93dba2bd8792761329e7cf3195da9d4f643cc545cbb51a47f6ecedb63102c07cb0c23d794eec96df0cec7dd15a5c2989614ced4c1fc8226c58e0db8019a0484cc6b6ad995ee83a6e1242c9c8bc4145c3e517ec63eed5affdcae11156ebfd31db422fdccd6bf753d59daaaf1c29fedec55612ccdd74f84edd6b068ed9c248895d5e2d0340bdc73286131801576b45de64fee5dffc826051b04acda0f0fbfc1c535", 0xb4, 0x40000, &(0x7f0000000000)={0x11, 0x6, r1, 0x1, 0x7, 0x6, @local}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @random="fa4bc3c16e9b"}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @local}, 0x10) 23:04:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0x10001, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r10, r12, 0x0, 0x20d315) 23:04:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = epoll_create(0xfffffffd) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) epoll_create1(0x80000) r6 = open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x88800) r7 = accept$unix(r1, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) tee(r7, r6, 0x1000, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r8 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f00000000c0)={0x10000001}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0x4, 0x1) [ 1137.472658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1137.480062] FAULT_INJECTION: forcing a failure. [ 1137.480062] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.482856] CPU: 1 PID: 7901 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1137.484475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.486647] Call Trace: [ 1137.487288] dump_stack+0x107/0x167 [ 1137.488256] should_fail.cold+0x5/0xa [ 1137.489130] ? anon_vma_clone+0xdc/0x590 [ 1137.490246] should_failslab+0x5/0x20 [ 1137.491191] kmem_cache_alloc+0x5b/0x310 [ 1137.492201] anon_vma_clone+0xdc/0x590 [ 1137.493406] __split_vma+0x17c/0x4e0 [ 1137.494377] __do_munmap+0xf40/0x1260 [ 1137.495382] ? arch_get_unmapped_area+0x450/0x450 [ 1137.496618] ? lock_release+0x680/0x680 [ 1137.497670] mmap_region+0x7c8/0x1500 [ 1137.498828] do_mmap+0xcdb/0x11e0 [ 1137.499737] vm_mmap_pgoff+0x198/0x1f0 [ 1137.500699] ? randomize_page+0xb0/0xb0 [ 1137.501606] ksys_mmap_pgoff+0x41c/0x560 [ 1137.502706] ? find_mergeable_anon_vma+0x250/0x250 [ 1137.503881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1137.505019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1137.506272] do_syscall_64+0x33/0x40 [ 1137.507337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1137.508694] RIP: 0033:0x7fe1ce9abb62 23:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1137.509741] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1137.514197] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1137.515952] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1137.517927] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1137.519470] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1137.521000] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1137.522531] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1137.556139] device lo entered promiscuous mode 23:04:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 68) [ 1137.606132] device lo left promiscuous mode [ 1137.613172] device lo entered promiscuous mode [ 1137.621099] device lo left promiscuous mode 23:04:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000001980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000100)}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/80, 0x50}, {&(0x7f0000001400)=""/187, 0xbb}, {&(0x7f00000014c0)=""/150, 0x96}, {&(0x7f0000001580)=""/72, 0x48}], 0x9, &(0x7f00000018c0)=ANY=[@ANYBLOB="02b6847576b7b5cb88d66af2bb02f554ff5867", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESDEC=r0], 0x38}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/63, 0x3f}, {&(0x7f00000017c0)=""/156, 0x9c}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="38000008000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000100000052a6aa3280a89c40ff5b34c5b050ebbeba13f440da9b74269c448a74ffe2c71b0ed211bdd5f61a507547985841b8f82a17af12d14dd11ad2c9e4c71a2252b4e4214a1b15c483c34727b0cd5c10a57dcc21f0e623dcb3ead0d8316a67ee2d3b6be59477e3167e", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="e30000001c000000000002050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}], 0x2, 0x40000040, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x7f, 0x6, 0x7, 0x0, 0x1, 0x120, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x3}, 0x424, 0x1, 0x3ff, 0x2, 0xd8c, 0x9, 0x400, 0x0, 0x81, 0x0, 0x800}, r3, 0x10, r2, 0xb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:04:47 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = socket(0x27, 0x800, 0x5410078) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x4) bind$packet(r1, &(0x7f0000000300)={0x11, 0x8, r2, 0x1, 0x77, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = eventfd(0x6) sendfile(r6, r0, &(0x7f00000000c0)=0x8, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x6, 0x5, 0x9, 0x3, 0x7f}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000e2c3ee9847281aee001d00210c0000000000000000040002000a001680"], 0x20}}, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r8, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8001}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8080000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) [ 1137.706516] FAULT_INJECTION: forcing a failure. [ 1137.706516] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.708031] CPU: 0 PID: 7922 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1137.708893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.709904] Call Trace: [ 1137.710236] dump_stack+0x107/0x167 [ 1137.710688] should_fail.cold+0x5/0xa [ 1137.711169] ? create_object.isra.0+0x3a/0xa20 [ 1137.711742] should_failslab+0x5/0x20 [ 1137.712218] kmem_cache_alloc+0x5b/0x310 [ 1137.712727] create_object.isra.0+0x3a/0xa20 [ 1137.713255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1137.713871] kmem_cache_alloc+0x159/0x310 [ 1137.714395] anon_vma_clone+0xdc/0x590 [ 1137.714875] __split_vma+0x17c/0x4e0 [ 1137.715346] __do_munmap+0xf40/0x1260 [ 1137.715807] ? arch_get_unmapped_area+0x450/0x450 [ 1137.716412] ? lock_release+0x680/0x680 [ 1137.716901] mmap_region+0x7c8/0x1500 [ 1137.717383] do_mmap+0xcdb/0x11e0 [ 1137.717820] vm_mmap_pgoff+0x198/0x1f0 [ 1137.718292] ? randomize_page+0xb0/0xb0 [ 1137.718802] ksys_mmap_pgoff+0x41c/0x560 [ 1137.719303] ? find_mergeable_anon_vma+0x250/0x250 [ 1137.719926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1137.720561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1137.721214] do_syscall_64+0x33/0x40 [ 1137.721660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1137.722296] RIP: 0033:0x7fe1ce9abb62 [ 1137.722769] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1137.724999] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1137.725952] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1137.726847] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1137.727739] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1137.728612] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1137.729507] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 23:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1137.745250] device lo entered promiscuous mode [ 1137.746170] device lo left promiscuous mode [ 1137.761249] device lo entered promiscuous mode [ 1137.762179] device lo left promiscuous mode 23:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:04:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc2}) [ 1137.843612] device lo entered promiscuous mode 23:04:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 69) [ 1137.891217] device lo left promiscuous mode [ 1137.906494] device lo entered promiscuous mode [ 1137.922664] FAULT_INJECTION: forcing a failure. [ 1137.922664] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.924326] CPU: 0 PID: 7940 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1137.925353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.926378] Call Trace: [ 1137.926715] dump_stack+0x107/0x167 [ 1137.927180] should_fail.cold+0x5/0xa [ 1137.927642] ? vm_area_alloc+0x1c/0x110 [ 1137.928150] should_failslab+0x5/0x20 [ 1137.928611] kmem_cache_alloc+0x5b/0x310 [ 1137.929121] vm_area_alloc+0x1c/0x110 [ 1137.929596] mmap_region+0x97e/0x1500 [ 1137.930063] do_mmap+0xcdb/0x11e0 [ 1137.930502] vm_mmap_pgoff+0x198/0x1f0 [ 1137.930991] ? randomize_page+0xb0/0xb0 [ 1137.931493] ksys_mmap_pgoff+0x41c/0x560 [ 1137.932002] ? find_mergeable_anon_vma+0x250/0x250 [ 1137.932621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1137.933277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1137.933907] do_syscall_64+0x33/0x40 [ 1137.934373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1137.934998] RIP: 0033:0x7fe1ce9abb62 [ 1137.935469] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1137.937692] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1137.938651] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1137.939527] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1137.940382] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1137.941245] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1137.942112] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1137.952439] device lo left promiscuous mode [ 1150.729452] device lo entered promiscuous mode [ 1150.763953] device lo left promiscuous mode 23:05:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = socket(0x27, 0x800, 0x5410078) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x4) bind$packet(r1, &(0x7f0000000300)={0x11, 0x8, r2, 0x1, 0x77, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r6 = eventfd(0x6) sendfile(r6, r0, &(0x7f00000000c0)=0x8, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x6, 0x5, 0x9, 0x3, 0x7f}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000e2c3ee9847281aee001d00210c0000000000000000040002000a001680"], 0x20}}, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="f7107f46f5c6"]}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r8, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8001}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8080000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 23:05:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:05:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, r11, 0x0, 0x10001, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x20d315) 23:05:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 70) 23:05:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 23:05:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0x8}) 23:05:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = geteuid() r4 = syz_open_dev$loop(&(0x7f0000000080), 0x1f, 0x218100) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) [ 1150.794349] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1150.797468] FAULT_INJECTION: forcing a failure. [ 1150.797468] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.800529] CPU: 0 PID: 7965 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1150.802332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.804572] Call Trace: [ 1150.805282] dump_stack+0x107/0x167 [ 1150.806261] should_fail.cold+0x5/0xa [ 1150.807293] ? create_object.isra.0+0x3a/0xa20 [ 1150.808522] should_failslab+0x5/0x20 [ 1150.809548] kmem_cache_alloc+0x5b/0x310 [ 1150.810643] create_object.isra.0+0x3a/0xa20 [ 1150.811827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1150.813191] kmem_cache_alloc+0x159/0x310 [ 1150.814309] vm_area_alloc+0x1c/0x110 [ 1150.815345] mmap_region+0x97e/0x1500 [ 1150.816387] do_mmap+0xcdb/0x11e0 [ 1150.817334] vm_mmap_pgoff+0x198/0x1f0 [ 1150.818382] ? randomize_page+0xb0/0xb0 [ 1150.819641] ksys_mmap_pgoff+0x41c/0x560 [ 1150.820811] ? find_mergeable_anon_vma+0x250/0x250 [ 1150.822124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1150.823529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1150.824895] do_syscall_64+0x33/0x40 [ 1150.825877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1150.827246] RIP: 0033:0x7fe1ce9abb62 [ 1150.828232] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1150.833133] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1150.835182] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1150.837087] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1150.838984] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1150.840941] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1150.842840] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1150.851828] device lo entered promiscuous mode [ 1150.859892] device lo left promiscuous mode sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001200", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x16d0}, 0x1, 0x0, 0x0, 0x80}, 0x4044) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:05:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40004, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffd, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) [ 1150.899603] device lo entered promiscuous mode 23:05:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1150.953052] device lo left promiscuous mode 23:05:00 executing program 6: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1151.019738] device lo entered promiscuous mode [ 1151.021199] device lo entered promiscuous mode [ 1151.023483] device lo left promiscuous mode [ 1151.031011] device lo left promiscuous mode 23:05:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1f, 0x1, 0x3f, 0x1, 0x0, 0x5, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0xee1, 0x4, 0x5, 0xaf7, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x1}, r1, 0x5, r3, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) 23:05:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}]}, 0x20}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r4, 0xffffffffffffffff, r2, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1151.079900] device lo entered promiscuous mode [ 1151.095506] device lo left promiscuous mode [ 1151.167967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:05:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 71) 23:05:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 23:05:00 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) 23:05:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x80, 0x3, 0x9, 0x0, 0x61cd9c67, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x2002, 0x1ff, 0x3285, 0x4, 0xf98e, 0x10002, 0x101, 0x0, 0x364e}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b48d19e", @ANYRES16=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x820, 0x0, 0x5, 0x8, 0x5, 0x7d6, 0x5, 0x0, 0xfffffffa, 0x0, 0x9}, r3, 0xffffffffffffffff, r1, 0x1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1151.290266] FAULT_INJECTION: forcing a failure. [ 1151.290266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1151.293268] CPU: 0 PID: 7995 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1151.294971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1151.296883] Call Trace: [ 1151.297487] dump_stack+0x107/0x167 [ 1151.298314] should_fail.cold+0x5/0xa [ 1151.299192] __alloc_pages_nodemask+0x182/0x600 [ 1151.300252] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1151.301638] ? walk_mem_res+0x170/0x170 [ 1151.302557] alloc_pages_current+0x187/0x280 [ 1151.303581] pte_alloc_one+0x16/0x1a0 [ 1151.304452] __pte_alloc+0x1d/0x330 [ 1151.305286] remap_pfn_range_internal+0x9a3/0xf60 [ 1151.306385] ? lookup_memtype+0x5b/0x200 [ 1151.307333] ? apply_to_existing_page_range+0x40/0x40 [ 1151.308516] remap_pfn_range+0xcd/0x160 [ 1151.309429] ? remap_pfn_range_notrack+0x70/0x70 [ 1151.310506] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1151.310621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1151.311687] io_uring_mmap+0x398/0x530 [ 1151.311802] mmap_file+0x5e/0xe0 [ 1151.311820] mmap_region+0xc49/0x1500 [ 1151.311851] do_mmap+0xcdb/0x11e0 [ 1151.311877] vm_mmap_pgoff+0x198/0x1f0 [ 1151.317844] ? randomize_page+0xb0/0xb0 [ 1151.318763] ksys_mmap_pgoff+0x41c/0x560 [ 1151.319698] ? find_mergeable_anon_vma+0x250/0x250 [ 1151.320826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1151.322031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1151.323219] do_syscall_64+0x33/0x40 [ 1151.324058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1151.325211] RIP: 0033:0x7fe1ce9abb62 [ 1151.326043] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1151.330182] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1151.331892] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1151.333493] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1151.335112] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1151.336720] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1151.338320] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1151.363227] device lo entered promiscuous mode [ 1151.368848] device lo left promiscuous mode [ 1151.381438] device lo entered promiscuous mode [ 1151.382912] device lo left promiscuous mode 23:05:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x19, 0x0, 0xfffffffe, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) [ 1151.439932] device lo entered promiscuous mode [ 1151.448070] device lo left promiscuous mode [ 1151.491438] device lo entered promiscuous mode [ 1151.493265] device lo left promiscuous mode [ 1151.558241] ------------[ cut here ]------------ [ 1151.559548] WARNING: CPU: 1 PID: 7995 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1151.561718] Modules linked in: [ 1151.562482] CPU: 1 PID: 7995 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 1151.564110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1151.566079] RIP: 0010:get_pat_info+0x216/0x270 [ 1151.567182] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 65 8f 5a 00 e9 [ 1151.577493] RSP: 0018:ffff88804767f898 EFLAGS: 00010212 [ 1151.578809] RAX: 0000000000017b21 RBX: ffff888015852d00 RCX: ffffc900027f7000 [ 1151.580554] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 1151.582284] RBP: ffff88804767f950 R08: 0000000000000000 R09: ffff88804767f820 [ 1151.584025] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1151.585757] R13: 1ffff11008ecff13 R14: 0000000000000000 R15: ffff888015852d50 [ 1151.587542] FS: 00007fe1cbf21700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1151.589566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1151.591037] CR2: 0000001b2de2f000 CR3: 0000000019636000 CR4: 0000000000350ee0 [ 1151.592847] Call Trace: [ 1151.593496] ? pgprot_writethrough+0xc0/0xc0 [ 1151.594601] ? finish_task_switch+0x126/0x5d0 [ 1151.595744] ? finish_task_switch+0xef/0x5d0 [ 1151.596867] untrack_pfn+0xdc/0x240 [ 1151.597793] ? track_pfn_insert+0x150/0x150 [ 1151.598883] ? lock_downgrade+0x6d0/0x6d0 [ 1151.599938] ? uprobe_munmap+0x1c/0x560 [ 1151.600948] unmap_single_vma+0x1bc/0x300 [ 1151.602004] zap_page_range_single+0x2ce/0x450 [ 1151.603181] ? unmap_single_vma+0x300/0x300 [ 1151.604272] ? remap_pfn_range_internal+0xc56/0xf60 [ 1151.605557] ? lookup_memtype+0x5b/0x200 [ 1151.606603] ? apply_to_existing_page_range+0x40/0x40 [ 1151.607934] remap_pfn_range+0x139/0x160 [ 1151.608964] ? remap_pfn_range_notrack+0x70/0x70 [ 1151.610172] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1151.611477] io_uring_mmap+0x398/0x530 [ 1151.612457] mmap_file+0x5e/0xe0 [ 1151.613324] mmap_region+0xc49/0x1500 [ 1151.614305] do_mmap+0xcdb/0x11e0 [ 1151.615205] vm_mmap_pgoff+0x198/0x1f0 [ 1151.616189] ? randomize_page+0xb0/0xb0 [ 1151.617205] ksys_mmap_pgoff+0x41c/0x560 [ 1151.618227] ? find_mergeable_anon_vma+0x250/0x250 [ 1151.619469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1151.620778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1151.622063] do_syscall_64+0x33/0x40 [ 1151.623000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1151.624279] RIP: 0033:0x7fe1ce9abb62 [ 1151.625212] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1151.629720] RSP: 002b:00007fe1cbf210f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1151.631582] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe1ce9abb62 [ 1151.633316] RDX: 0000000000000003 RSI: 00000000000001d0 RDI: 0000000020ffe000 [ 1151.635062] RBP: 0000000020ffe000 R08: 0000000000000006 R09: 0000000000000000 [ 1151.636824] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1151.638558] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffe000 [ 1151.640332] irq event stamp: 1369 [ 1151.641207] hardirqs last enabled at (1379): [] console_unlock+0x92d/0xb40 [ 1151.643300] hardirqs last disabled at (1388): [] console_unlock+0x839/0xb40 [ 1151.645378] softirqs last enabled at (800): [] asm_call_irq_on_stack+0x12/0x20 [ 1151.647535] softirqs last disabled at (787): [] asm_call_irq_on_stack+0x12/0x20 [ 1151.649675] ---[ end trace 7230062747960020 ]--- VM DIAGNOSIS: 23:05:01 Registers: info registers vcpu 0 RAX=ffff888048ee0500 RBX=ffff88800da8ff58 RCX=ffffffff81280fbf RDX=0000000000000000 RSI=ffffffff8178b121 RDI=ffff88800fac4fc0 RBP=ffff888048ee0500 RSP=ffff88800da8ff10 R8 =0000000000000000 R9 =ffff88800fac4fc3 R10=ffffed1001f589f8 R11=0000000000000001 R12=ffff88800fac4f00 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8140cfd4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd34abcb8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcdd4ef7430 CR3=000000000f4fc000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000011060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffff00000000000000000000 XMM02=000000000000307570632f302f716d2f XMM03=7269762f736563697665642f7379732f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055dccebf29d0000055dccec00740 XMM06=0000000000000000ffffffff00000004 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e169c RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff88804767f1d0 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3ea75 R14=fffffbfff0f3ea2a R15=dffffc0000000000 RIP=ffffffff822e16f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe1cbf21700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2de2f000 CR3=0000000019636000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007fe1cea927c800007fe1cea927c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000