etlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:40 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) 10:51:40 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 10:51:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2143.429570] __alloc_pages_nodemask+0x182/0x600 [ 2143.430718] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2143.431979] ? cap_capable+0x1cd/0x230 [ 2143.432129] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2143.432794] alloc_pages_current+0x187/0x280 [ 2143.435458] __get_free_pages+0xc/0xa0 [ 2143.435844] FAULT_INJECTION: forcing a failure. [ 2143.435844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2143.436271] io_uring_setup+0xe27/0x2980 [ 2143.436306] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2143.440621] ? wait_for_completion_io+0x270/0x270 [ 2143.441648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.442745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.443823] do_syscall_64+0x33/0x40 [ 2143.444609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.445681] RIP: 0033:0x7fc09be8ab19 [ 2143.446461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.450321] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2143.451917] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2143.453418] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2143.454905] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2143.456410] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2143.457900] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2143.459427] CPU: 0 PID: 21006 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2143.460899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.462409] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2143.462642] Call Trace: [ 2143.462672] dump_stack+0x107/0x167 [ 2143.465715] should_fail.cold+0x5/0xa [ 2143.466524] __alloc_pages_nodemask+0x182/0x600 [ 2143.467507] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2143.468786] ? cap_capable+0x1cd/0x230 [ 2143.469615] alloc_pages_current+0x187/0x280 [ 2143.470557] __get_free_pages+0xc/0xa0 [ 2143.471378] io_uring_setup+0xe27/0x2980 [ 2143.472235] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2143.473266] ? wait_for_completion_io+0x270/0x270 [ 2143.474293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.475373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.476437] do_syscall_64+0x33/0x40 [ 2143.477212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.478246] RIP: 0033:0x7fb414601b19 [ 2143.479020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.481057] FAULT_INJECTION: forcing a failure. [ 2143.481057] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.482880] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2143.482899] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2143.482909] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2143.482919] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2143.482929] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2143.482939] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2143.486273] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2143.487250] CPU: 1 PID: 20997 Comm: syz-executor.7 Not tainted 5.10.239 #1 [ 2143.497909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.499656] Call Trace: [ 2143.500228] dump_stack+0x107/0x167 [ 2143.500996] should_fail.cold+0x5/0xa [ 2143.501800] ? create_user_ns+0x1b4/0xab0 [ 2143.502676] should_failslab+0x5/0x20 [ 2143.503475] kmem_cache_alloc+0x5b/0x310 [ 2143.504345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2143.505423] create_user_ns+0x1b4/0xab0 [ 2143.506269] copy_creds+0x409/0x580 [ 2143.507043] copy_process+0xfef/0x78b0 [ 2143.507865] ? mark_lock+0xf5/0x2df0 [ 2143.508668] ? lock_acquire+0x197/0x470 [ 2143.509506] ? find_held_lock+0x2c/0x110 [ 2143.510377] ? __cleanup_sighand+0xb0/0xb0 [ 2143.511294] ? _copy_from_user+0xfb/0x1b0 [ 2143.512179] kernel_clone+0xe7/0x980 [ 2143.512973] ? lock_acquire+0x197/0x470 [ 2143.513809] ? create_io_thread+0xf0/0xf0 [ 2143.514699] ? ksys_write+0x21a/0x260 [ 2143.515502] ? lock_downgrade+0x6d0/0x6d0 [ 2143.516398] __do_sys_clone3+0x1e5/0x320 [ 2143.517249] ? __do_sys_clone+0x110/0x110 [ 2143.518140] ? rcu_read_lock_any_held+0x75/0xa0 [ 2143.519117] ? vfs_write+0x354/0xb10 [ 2143.519901] ? fput_many+0x2f/0x1a0 [ 2143.520682] ? ksys_write+0x1a9/0x260 [ 2143.521498] ? __ia32_sys_read+0xb0/0xb0 [ 2143.522357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.523466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.524564] ? trace_hardirqs_on+0x5b/0x180 [ 2143.525482] do_syscall_64+0x33/0x40 [ 2143.526266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.527343] RIP: 0033:0x7f1840ad2b19 [ 2143.528142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.532014] RSP: 002b:00007f183e048188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2143.533617] RAX: ffffffffffffffda RBX: 00007f1840be5f60 RCX: 00007f1840ad2b19 [ 2143.535120] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000ac0 [ 2143.536629] RBP: 00007f183e0481d0 R08: 0000000000000000 R09: 0000000000000000 [ 2143.538125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.539624] R13: 00007ffc219c6edf R14: 00007f183e048300 R15: 0000000000022000 [ 2157.989750] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2157.997360] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2158.000361] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2158.006553] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2158.015346] FAULT_INJECTION: forcing a failure. [ 2158.015346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2158.016873] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2158.017821] CPU: 1 PID: 21326 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2158.017843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.023453] Call Trace: [ 2158.024081] dump_stack+0x107/0x167 [ 2158.024940] should_fail.cold+0x5/0xa [ 2158.025836] __alloc_pages_nodemask+0x182/0x600 [ 2158.026927] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2158.028343] ? cap_capable+0x1cd/0x230 [ 2158.029262] alloc_pages_current+0x187/0x280 [ 2158.030294] __get_free_pages+0xc/0xa0 [ 2158.031205] io_uring_setup+0xf9a/0x2980 [ 2158.032169] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.033408] ? wait_for_completion_io+0x270/0x270 [ 2158.034565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.035792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.037009] do_syscall_64+0x33/0x40 [ 2158.037878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.039072] RIP: 0033:0x7fc09be8ab19 [ 2158.039937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.044241] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.046019] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2158.047686] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.049352] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.051020] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.052682] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:54 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 10:51:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:54 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:51:54 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:54 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 10:51:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:54 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) [ 2158.056583] FAULT_INJECTION: forcing a failure. [ 2158.056583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2158.059625] CPU: 0 PID: 21325 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2158.061079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.062840] Call Trace: [ 2158.063397] dump_stack+0x107/0x167 [ 2158.064173] should_fail.cold+0x5/0xa [ 2158.064972] __alloc_pages_nodemask+0x182/0x600 [ 2158.065951] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2158.067211] ? cap_capable+0x1cd/0x230 [ 2158.068036] alloc_pages_current+0x187/0x280 [ 2158.068973] __get_free_pages+0xc/0xa0 [ 2158.069790] io_uring_setup+0xf9a/0x2980 [ 2158.070654] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.071713] ? wait_for_completion_io+0x270/0x270 [ 2158.072763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.073857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.074944] do_syscall_64+0x33/0x40 [ 2158.075734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.076816] RIP: 0033:0x7fb414601b19 [ 2158.077589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.081436] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.083036] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2158.084530] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.086015] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.087511] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.089003] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2158.095055] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:51:55 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) 10:51:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:55 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) 10:51:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:51:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:55 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2158.254894] FAULT_INJECTION: forcing a failure. [ 2158.254894] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.257335] CPU: 0 PID: 21533 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2158.258775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.260502] Call Trace: [ 2158.261055] dump_stack+0x107/0x167 [ 2158.261813] should_fail.cold+0x5/0xa [ 2158.262786] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.263957] should_failslab+0x5/0x20 [ 2158.264760] kmem_cache_alloc_trace+0x55/0x320 [ 2158.265716] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.266190] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2158.266844] io_uring_setup+0x14f6/0x2980 [ 2158.269485] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.270529] ? wait_for_completion_io+0x270/0x270 [ 2158.271543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.272637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.273706] do_syscall_64+0x33/0x40 [ 2158.274475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.275534] RIP: 0033:0x7fb414601b19 [ 2158.276325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.280135] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.281704] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2158.283188] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.283784] FAULT_INJECTION: forcing a failure. [ 2158.283784] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.284679] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.284690] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.284699] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2158.291711] CPU: 1 PID: 21537 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2158.293146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.294861] Call Trace: [ 2158.295413] dump_stack+0x107/0x167 [ 2158.296179] should_fail.cold+0x5/0xa [ 2158.296978] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.298144] should_failslab+0x5/0x20 [ 2158.298934] kmem_cache_alloc_trace+0x55/0x320 [ 2158.299886] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.301021] io_uring_setup+0x14f6/0x2980 [ 2158.301886] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.302943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.304050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.305144] do_syscall_64+0x33/0x40 [ 2158.305924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.306817] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2158.306991] RIP: 0033:0x7fc09be8ab19 [ 2158.307014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.313436] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.315008] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2158.315033] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2158.315051] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.319792] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.321285] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.322775] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:55 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:55 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124502, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2158.381845] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:51:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:51:55 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) 10:51:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:51:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:51:55 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) 10:51:55 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124502, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2158.564254] FAULT_INJECTION: forcing a failure. [ 2158.564254] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.566690] CPU: 1 PID: 21739 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2158.568152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.569914] Call Trace: [ 2158.570479] dump_stack+0x107/0x167 [ 2158.571251] should_fail.cold+0x5/0xa [ 2158.572054] ? create_object.isra.0+0x3a/0xa20 [ 2158.573016] should_failslab+0x5/0x20 [ 2158.573806] kmem_cache_alloc+0x5b/0x310 [ 2158.574649] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2158.575903] create_object.isra.0+0x3a/0xa20 [ 2158.576820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2158.577885] kmem_cache_alloc_trace+0x151/0x320 [ 2158.578858] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.579995] io_uring_setup+0x14f6/0x2980 [ 2158.580875] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.581923] ? wait_for_completion_io+0x270/0x270 [ 2158.582956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.584057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.585146] do_syscall_64+0x33/0x40 [ 2158.585926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.586989] RIP: 0033:0x7fc09be8ab19 [ 2158.587767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.591615] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.593216] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2158.594715] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.596217] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.597716] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.599202] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2158.618799] FAULT_INJECTION: forcing a failure. [ 2158.618799] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.621243] CPU: 0 PID: 21768 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2158.622703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.624436] Call Trace: [ 2158.624998] dump_stack+0x107/0x167 [ 2158.625768] should_fail.cold+0x5/0xa [ 2158.626568] ? create_object.isra.0+0x3a/0xa20 10:51:55 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2158.627543] should_failslab+0x5/0x20 [ 2158.628545] kmem_cache_alloc+0x5b/0x310 [ 2158.629413] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2158.630703] create_object.isra.0+0x3a/0xa20 [ 2158.631639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2158.632739] kmem_cache_alloc_trace+0x151/0x320 [ 2158.633746] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2158.634899] io_uring_setup+0x14f6/0x2980 [ 2158.635786] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2158.636867] ? wait_for_completion_io+0x270/0x270 [ 2158.637917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 10:51:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2158.639034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.640216] do_syscall_64+0x33/0x40 [ 2158.641012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.642107] RIP: 0033:0x7fb414601b19 [ 2158.642901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.646868] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2158.648502] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2158.650035] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2158.651581] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2158.653124] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2158.654656] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124503, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124503, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2173.129966] __nla_validate_parse: 9 callbacks suppressed [ 2173.129977] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2173.136129] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2173.137342] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:52:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 10:52:10 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 10:52:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2173.161128] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2173.165999] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2173.169596] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2173.173157] FAULT_INJECTION: forcing a failure. [ 2173.173157] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.175571] CPU: 1 PID: 22016 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2173.177072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.178867] Call Trace: [ 2173.179435] dump_stack+0x107/0x167 [ 2173.180217] should_fail.cold+0x5/0xa [ 2173.181047] ? create_object.isra.0+0x3a/0xa20 [ 2173.182037] should_failslab+0x5/0x20 [ 2173.182857] kmem_cache_alloc+0x5b/0x310 [ 2173.183735] create_object.isra.0+0x3a/0xa20 [ 2173.183924] FAULT_INJECTION: forcing a failure. [ 2173.183924] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.184700] kmemleak_alloc_percpu+0xa0/0x100 [ 2173.184726] pcpu_alloc+0x4e2/0x1240 [ 2173.187815] ? io_async_queue_proc+0x80/0x80 [ 2173.188768] percpu_ref_init+0x31/0x3d0 [ 2173.189631] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2173.190794] io_uring_setup+0x14f6/0x2980 [ 2173.191689] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2173.192785] ? wait_for_completion_io+0x270/0x270 [ 2173.193849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.194973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.196084] do_syscall_64+0x33/0x40 [ 2173.196892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.197990] RIP: 0033:0x7fc09be8ab19 [ 2173.198794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.202776] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2173.204416] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2173.205956] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2173.207493] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2173.209033] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2173.210568] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2173.212127] CPU: 0 PID: 22014 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2173.213118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.214290] Call Trace: [ 2173.214662] dump_stack+0x107/0x167 [ 2173.215172] should_fail.cold+0x5/0xa [ 2173.215705] ? create_object.isra.0+0x3a/0xa20 [ 2173.216356] should_failslab+0x5/0x20 [ 2173.216887] kmem_cache_alloc+0x5b/0x310 [ 2173.217463] create_object.isra.0+0x3a/0xa20 [ 2173.218115] kmemleak_alloc_percpu+0xa0/0x100 [ 2173.218750] pcpu_alloc+0x4e2/0x1240 [ 2173.219279] ? io_async_queue_proc+0x80/0x80 [ 2173.219814] percpu_ref_init+0x31/0x3d0 [ 2173.220285] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2173.220941] io_uring_setup+0x14f6/0x2980 [ 2173.221436] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2173.222044] ? wait_for_completion_io+0x270/0x270 [ 2173.222627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.223252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.223859] do_syscall_64+0x33/0x40 [ 2173.224296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.224910] RIP: 0033:0x7fb414601b19 [ 2173.225346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.227518] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2173.228425] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2173.229269] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2173.230109] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2173.230959] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2173.231799] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124504, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2173.276410] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2173.291273] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:52:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:10 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) [ 2173.359948] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:52:10 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2173.376583] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2173.385763] FAULT_INJECTION: forcing a failure. [ 2173.385763] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.387209] CPU: 0 PID: 22308 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2173.388026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.389015] Call Trace: [ 2173.389328] dump_stack+0x107/0x167 [ 2173.389758] should_fail.cold+0x5/0xa [ 2173.390221] ? create_object.isra.0+0x3a/0xa20 [ 2173.390750] should_failslab+0x5/0x20 [ 2173.391299] kmem_cache_alloc+0x5b/0x310 [ 2173.391784] create_object.isra.0+0x3a/0xa20 [ 2173.392331] kmemleak_alloc_percpu+0xa0/0x100 [ 2173.392867] pcpu_alloc+0x4e2/0x1240 [ 2173.393306] ? io_async_queue_proc+0x80/0x80 [ 2173.393823] percpu_ref_init+0x31/0x3d0 [ 2173.394286] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2173.394930] io_uring_setup+0x14f6/0x2980 [ 2173.395416] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2173.396024] ? wait_for_completion_io+0x270/0x270 [ 2173.396613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.397228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.397835] do_syscall_64+0x33/0x40 [ 2173.398267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2173.398865] RIP: 0033:0x7fc09be8ab19 [ 2173.399297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.401453] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2173.402342] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2173.403178] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2173.404059] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2173.405098] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2173.406108] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2186.423858] FAULT_INJECTION: forcing a failure. [ 2186.423858] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.423935] FAULT_INJECTION: forcing a failure. [ 2186.423935] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.425269] CPU: 0 PID: 22425 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2186.425285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.429403] Call Trace: [ 2186.429726] dump_stack+0x107/0x167 [ 2186.430161] should_fail.cold+0x5/0xa [ 2186.430613] ? percpu_ref_init+0xd8/0x3d0 [ 2186.431106] should_failslab+0x5/0x20 [ 2186.431557] kmem_cache_alloc_trace+0x55/0x320 [ 2186.432105] ? io_async_queue_proc+0x80/0x80 [ 2186.432631] percpu_ref_init+0xd8/0x3d0 [ 2186.433106] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2186.433747] io_uring_setup+0x14f6/0x2980 [ 2186.434239] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.434834] ? wait_for_completion_io+0x270/0x270 [ 2186.435423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.436039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.436668] do_syscall_64+0x33/0x40 [ 2186.437109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.437714] RIP: 0033:0x7fc09be8ab19 [ 2186.438159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.440320] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.441219] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2186.442064] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2186.442905] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2186.443743] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2186.444595] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2186.445460] CPU: 1 PID: 22424 Comm: syz-executor.1 Not tainted 5.10.239 #1 10:52:23 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 10:52:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:23 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124508, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:23 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) [ 2186.446928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.448943] Call Trace: [ 2186.449510] dump_stack+0x107/0x167 [ 2186.450276] should_fail.cold+0x5/0xa [ 2186.451074] ? create_object.isra.0+0x3a/0xa20 [ 2186.452044] should_failslab+0x5/0x20 [ 2186.452851] kmem_cache_alloc+0x5b/0x310 [ 2186.453710] create_object.isra.0+0x3a/0xa20 [ 2186.454646] kmemleak_alloc_percpu+0xa0/0x100 10:52:23 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124504, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:23 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:23 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:23 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2186.455735] pcpu_alloc+0x4e2/0x1240 [ 2186.456651] ? io_async_queue_proc+0x80/0x80 [ 2186.457564] percpu_ref_init+0x31/0x3d0 [ 2186.458402] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2186.459538] io_uring_setup+0x14f6/0x2980 [ 2186.460414] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.461481] ? wait_for_completion_io+0x270/0x270 [ 2186.462508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.463599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.464706] do_syscall_64+0x33/0x40 [ 2186.465492] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.466570] RIP: 0033:0x7fb414601b19 [ 2186.467355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.471220] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.472822] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2186.474317] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2186.475804] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2186.477303] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2186.478783] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:23 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) [ 2186.493025] __nla_validate_parse: 3 callbacks suppressed [ 2186.493040] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2186.496139] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2186.504500] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2186.512902] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2186.514816] FAULT_INJECTION: forcing a failure. [ 2186.514816] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.516171] CPU: 0 PID: 22436 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2186.516976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.517085] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2186.517932] Call Trace: [ 2186.517950] dump_stack+0x107/0x167 [ 2186.517968] should_fail.cold+0x5/0xa [ 2186.520845] ? create_object.isra.0+0x3a/0xa20 [ 2186.521366] should_failslab+0x5/0x20 [ 2186.521797] kmem_cache_alloc+0x5b/0x310 [ 2186.522265] create_object.isra.0+0x3a/0xa20 [ 2186.522766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2186.523350] kmem_cache_alloc_trace+0x151/0x320 [ 2186.523879] ? io_async_queue_proc+0x80/0x80 [ 2186.524379] percpu_ref_init+0xd8/0x3d0 [ 2186.524839] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2186.525455] io_uring_setup+0x14f6/0x2980 [ 2186.525926] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.526502] ? wait_for_completion_io+0x270/0x270 [ 2186.527061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.527662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.528254] do_syscall_64+0x33/0x40 [ 2186.528685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.529279] RIP: 0033:0x7fc09be8ab19 [ 2186.529706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.531820] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.532753] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2186.533569] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2186.534396] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2186.535214] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2186.536026] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2186.540267] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:52:23 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2186.571618] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:52:23 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) [ 2186.616928] FAULT_INJECTION: forcing a failure. [ 2186.616928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2186.618363] CPU: 0 PID: 22592 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2186.619145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.620093] Call Trace: [ 2186.620394] dump_stack+0x107/0x167 [ 2186.620815] should_fail.cold+0x5/0xa [ 2186.621253] _copy_to_user+0x2e/0x180 [ 2186.621683] io_uring_setup+0x11b5/0x2980 [ 2186.622155] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.622723] ? wait_for_completion_io+0x270/0x270 [ 2186.623280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.623869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.624453] do_syscall_64+0x33/0x40 [ 2186.624882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.625459] RIP: 0033:0x7fc09be8ab19 [ 2186.625880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.627942] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.628811] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2186.629614] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2186.630423] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2186.631225] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2186.632027] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 10:52:37 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) 10:52:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124508, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2200.658040] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:52:37 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2200.674315] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2200.678281] FAULT_INJECTION: forcing a failure. [ 2200.678281] name failslab, interval 1, probability 0, space 0, times 0 10:52:37 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124578, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2200.681192] CPU: 0 PID: 22654 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2200.683092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2200.685197] Call Trace: [ 2200.685874] dump_stack+0x107/0x167 [ 2200.686805] should_fail.cold+0x5/0xa [ 2200.687255] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2200.687782] ? __d_alloc+0x2a/0x990 [ 2200.687811] should_failslab+0x5/0x20 [ 2200.691328] kmem_cache_alloc+0x5b/0x310 [ 2200.692363] __d_alloc+0x2a/0x990 [ 2200.693258] ? find_held_lock+0x2c/0x110 [ 2200.694224] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.694307] d_alloc_pseudo+0x19/0x70 [ 2200.696898] alloc_file_pseudo+0xce/0x250 [ 2200.697948] ? trace_hardirqs_on+0x5b/0x180 [ 2200.699045] ? alloc_file+0x5a0/0x5a0 [ 2200.700030] anon_inode_getfile+0xc8/0x1f0 [ 2200.701122] io_uring_setup+0x138b/0x2980 [ 2200.702177] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2200.703440] ? wait_for_completion_io+0x270/0x270 [ 2200.704688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2200.706232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2200.707603] do_syscall_64+0x33/0x40 [ 2200.708545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2200.709871] RIP: 0033:0x7fc09be8ab19 [ 2200.710807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2200.715062] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2200.716672] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2200.718175] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2200.719681] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2200.721178] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2200.722682] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2200.736684] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2200.739534] FAULT_INJECTION: forcing a failure. [ 2200.739534] name failslab, interval 1, probability 0, space 0, times 0 [ 2200.739825] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2200.742012] CPU: 0 PID: 22731 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2200.744979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2200.746712] Call Trace: [ 2200.747268] dump_stack+0x107/0x167 [ 2200.748025] should_fail.cold+0x5/0xa [ 2200.748833] ? percpu_ref_init+0xd8/0x3d0 [ 2200.749707] should_failslab+0x5/0x20 [ 2200.750501] kmem_cache_alloc_trace+0x55/0x320 [ 2200.751464] ? io_async_queue_proc+0x80/0x80 [ 2200.752380] percpu_ref_init+0xd8/0x3d0 [ 2200.753239] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2200.754374] io_uring_setup+0x14f6/0x2980 [ 2200.755256] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2200.756303] ? wait_for_completion_io+0x270/0x270 [ 2200.757358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2200.758465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2200.759546] do_syscall_64+0x33/0x40 [ 2200.760321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2200.761405] RIP: 0033:0x7fb414601b19 [ 2200.762184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2200.766047] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2200.767647] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2200.769144] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2200.770645] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2200.772142] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2200.773643] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:37 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:37 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) 10:52:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124578, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:37 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x1341245bc, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2200.896048] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2200.908840] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2200.929726] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:52:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) [ 2200.943529] FAULT_INJECTION: forcing a failure. [ 2200.943529] name failslab, interval 1, probability 0, space 0, times 0 [ 2200.946320] CPU: 0 PID: 22879 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2200.947787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2200.949540] Call Trace: [ 2200.950106] dump_stack+0x107/0x167 [ 2200.950873] should_fail.cold+0x5/0xa [ 2200.951690] ? create_object.isra.0+0x3a/0xa20 [ 2200.952662] should_failslab+0x5/0x20 [ 2200.953475] kmem_cache_alloc+0x5b/0x310 [ 2200.954326] create_object.isra.0+0x3a/0xa20 [ 2200.955238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2200.956296] kmem_cache_alloc_trace+0x151/0x320 [ 2200.956656] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.957280] ? io_async_queue_proc+0x80/0x80 [ 2200.957301] percpu_ref_init+0xd8/0x3d0 [ 2200.957326] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2200.961594] io_uring_setup+0x14f6/0x2980 [ 2200.962459] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2200.963516] ? wait_for_completion_io+0x270/0x270 [ 2200.964537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2200.965644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2200.966725] do_syscall_64+0x33/0x40 [ 2200.967507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2200.968584] RIP: 0033:0x7fb414601b19 [ 2200.969371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2200.973236] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2200.974847] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2200.976340] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2200.977834] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2200.979321] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2200.980822] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) [ 2201.011716] FAULT_INJECTION: forcing a failure. [ 2201.011716] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.014241] CPU: 0 PID: 22948 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2201.015687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.017430] Call Trace: [ 2201.017983] dump_stack+0x107/0x167 [ 2201.018746] should_fail.cold+0x5/0xa [ 2201.019550] ? create_object.isra.0+0x3a/0xa20 [ 2201.020502] should_failslab+0x5/0x20 [ 2201.021286] kmem_cache_alloc+0x5b/0x310 [ 2201.022145] create_object.isra.0+0x3a/0xa20 [ 2201.023057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2201.024120] kmem_cache_alloc+0x159/0x310 [ 2201.025010] __d_alloc+0x2a/0x990 [ 2201.025737] ? find_held_lock+0x2c/0x110 [ 2201.026587] d_alloc_pseudo+0x19/0x70 [ 2201.027372] alloc_file_pseudo+0xce/0x250 [ 2201.028233] ? trace_hardirqs_on+0x5b/0x180 [ 2201.029143] ? alloc_file+0x5a0/0x5a0 [ 2201.029954] anon_inode_getfile+0xc8/0x1f0 [ 2201.030839] io_uring_setup+0x138b/0x2980 [ 2201.031710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2201.032793] ? wait_for_completion_io+0x270/0x270 [ 2201.033818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.034895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.035969] do_syscall_64+0x33/0x40 [ 2201.036754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2201.037823] RIP: 0033:0x7fc09be8ab19 [ 2201.038602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.042391] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2201.043991] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2201.045505] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2201.047003] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2201.048492] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2201.049980] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) 10:52:54 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:54 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) 10:52:54 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:54 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x1341245bc, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2217.738333] __nla_validate_parse: 2 callbacks suppressed [ 2217.738345] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2217.744195] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:52:54 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) [ 2217.751581] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2217.754500] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2217.756944] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2217.759377] FAULT_INJECTION: forcing a failure. [ 2217.759377] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.761984] CPU: 1 PID: 23105 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2217.763554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.764267] FAULT_INJECTION: forcing a failure. [ 2217.764267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2217.765444] Call Trace: [ 2217.765472] dump_stack+0x107/0x167 [ 2217.765495] should_fail.cold+0x5/0xa [ 2217.765521] ? __alloc_file+0x21/0x320 [ 2217.771535] should_failslab+0x5/0x20 [ 2217.772618] kmem_cache_alloc+0x5b/0x310 [ 2217.773795] __alloc_file+0x21/0x320 [ 2217.774854] alloc_empty_file+0x6d/0x170 [ 2217.775994] alloc_file+0x5e/0x5a0 [ 2217.777023] alloc_file_pseudo+0x16a/0x250 [ 2217.778233] ? alloc_file+0x5a0/0x5a0 [ 2217.779350] anon_inode_getfile+0xc8/0x1f0 [ 2217.780376] io_uring_setup+0x138b/0x2980 [ 2217.781580] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2217.783010] ? wait_for_completion_io+0x270/0x270 [ 2217.784425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.785931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.787395] do_syscall_64+0x33/0x40 [ 2217.788458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.789876] RIP: 0033:0x7fc09be8ab19 [ 2217.790788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.795228] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2217.797064] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2217.798731] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2217.800372] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2217.802022] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2217.803662] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2217.805343] CPU: 0 PID: 23106 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2217.805587] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2217.806837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.806844] Call Trace: [ 2217.806870] dump_stack+0x107/0x167 [ 2217.806895] should_fail.cold+0x5/0xa [ 2217.812710] _copy_to_user+0x2e/0x180 [ 2217.813547] io_uring_setup+0x11b5/0x2980 [ 2217.814443] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2217.815510] ? wait_for_completion_io+0x270/0x270 [ 2217.816556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.817668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.818752] do_syscall_64+0x33/0x40 [ 2217.819533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.820607] RIP: 0033:0x7fb414601b19 [ 2217.821405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.825286] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2217.826884] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2217.828389] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2217.829902] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2217.831405] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2217.832911] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:54 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 10:52:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) 10:52:54 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:54 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 10:52:54 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:54 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2217.999895] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2218.010008] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2218.033755] FAULT_INJECTION: forcing a failure. [ 2218.033755] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.036250] CPU: 0 PID: 23514 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2218.037715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.039451] Call Trace: [ 2218.040009] dump_stack+0x107/0x167 [ 2218.040774] should_fail.cold+0x5/0xa [ 2218.041584] ? __d_alloc+0x2a/0x990 [ 2218.042370] should_failslab+0x5/0x20 [ 2218.043163] kmem_cache_alloc+0x5b/0x310 [ 2218.044018] __d_alloc+0x2a/0x990 [ 2218.044741] ? find_held_lock+0x2c/0x110 [ 2218.045599] d_alloc_pseudo+0x19/0x70 [ 2218.046388] alloc_file_pseudo+0xce/0x250 [ 2218.047239] ? trace_hardirqs_on+0x5b/0x180 [ 2218.048117] ? alloc_file+0x5a0/0x5a0 [ 2218.048947] anon_inode_getfile+0xc8/0x1f0 [ 2218.049841] io_uring_setup+0x138b/0x2980 [ 2218.050715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.051749] ? wait_for_completion_io+0x270/0x270 [ 2218.052763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.053900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.054972] do_syscall_64+0x33/0x40 [ 2218.055745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.056755] FAULT_INJECTION: forcing a failure. [ 2218.056755] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.056805] RIP: 0033:0x7fb414601b19 [ 2218.056841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.063787] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.065398] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2218.066867] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2218.068343] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2218.069834] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2218.071318] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2218.072847] CPU: 1 PID: 23517 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2218.074385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.076098] Call Trace: [ 2218.076673] dump_stack+0x107/0x167 [ 2218.077454] should_fail.cold+0x5/0xa [ 2218.078252] ? create_object.isra.0+0x3a/0xa20 [ 2218.079218] should_failslab+0x5/0x20 [ 2218.080045] kmem_cache_alloc+0x5b/0x310 [ 2218.080994] create_object.isra.0+0x3a/0xa20 [ 2218.081899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2218.082955] kmem_cache_alloc+0x159/0x310 [ 2218.083830] __alloc_file+0x21/0x320 [ 2218.084589] alloc_empty_file+0x6d/0x170 [ 2218.085453] alloc_file+0x5e/0x5a0 [ 2218.086180] alloc_file_pseudo+0x16a/0x250 [ 2218.087072] ? alloc_file+0x5a0/0x5a0 [ 2218.087870] anon_inode_getfile+0xc8/0x1f0 [ 2218.088759] io_uring_setup+0x138b/0x2980 [ 2218.089645] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.090733] ? wait_for_completion_io+0x270/0x270 [ 2218.091944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.093075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.094408] do_syscall_64+0x33/0x40 [ 2218.095232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.096447] RIP: 0033:0x7fc09be8ab19 [ 2218.097374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.101215] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.103163] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2218.104843] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2218.106324] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2218.107806] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2218.109291] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:55 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:52:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:52:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2218.128374] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2218.153856] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2235.163719] __nla_validate_parse: 2 callbacks suppressed [ 2235.163730] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:53:12 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 10:53:12 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) [ 2235.177862] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2235.182213] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2235.204486] FAULT_INJECTION: forcing a failure. [ 2235.204486] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.206968] CPU: 0 PID: 23838 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2235.208431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.210207] Call Trace: [ 2235.210765] dump_stack+0x107/0x167 [ 2235.211533] should_fail.cold+0x5/0xa [ 2235.212333] ? create_object.isra.0+0x3a/0xa20 [ 2235.213321] should_failslab+0x5/0x20 [ 2235.214128] kmem_cache_alloc+0x5b/0x310 [ 2235.214985] create_object.isra.0+0x3a/0xa20 [ 2235.215903] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2235.216971] kmem_cache_alloc+0x159/0x310 [ 2235.217883] __d_alloc+0x2a/0x990 [ 2235.218612] ? find_held_lock+0x2c/0x110 [ 2235.219466] d_alloc_pseudo+0x19/0x70 [ 2235.220266] alloc_file_pseudo+0xce/0x250 [ 2235.221166] ? trace_hardirqs_on+0x5b/0x180 [ 2235.222067] ? alloc_file+0x5a0/0x5a0 [ 2235.222874] anon_inode_getfile+0xc8/0x1f0 [ 2235.223765] io_uring_setup+0x138b/0x2980 [ 2235.224637] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.225719] ? wait_for_completion_io+0x270/0x270 [ 2235.226749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.227853] FAULT_INJECTION: forcing a failure. [ 2235.227853] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.227874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.227896] do_syscall_64+0x33/0x40 [ 2235.231588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.232660] RIP: 0033:0x7fb414601b19 [ 2235.233481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.237373] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.238967] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2235.240466] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2235.241983] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2235.243482] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2235.244968] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2235.246517] CPU: 1 PID: 23932 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2235.247650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.249023] Call Trace: [ 2235.249457] dump_stack+0x107/0x167 [ 2235.250052] should_fail.cold+0x5/0xa [ 2235.250326] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2235.250669] ? security_file_alloc+0x34/0x170 [ 2235.250687] should_failslab+0x5/0x20 [ 2235.250709] kmem_cache_alloc+0x5b/0x310 [ 2235.254426] security_file_alloc+0x34/0x170 [ 2235.255031] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2235.255127] __alloc_file+0xb7/0x320 [ 2235.255141] alloc_empty_file+0x6d/0x170 [ 2235.255159] alloc_file+0x5e/0x5a0 [ 2235.258727] alloc_file_pseudo+0x16a/0x250 [ 2235.259414] ? alloc_file+0x5a0/0x5a0 [ 2235.260042] anon_inode_getfile+0xc8/0x1f0 [ 2235.260727] io_uring_setup+0x138b/0x2980 [ 2235.261413] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.262229] ? wait_for_completion_io+0x270/0x270 [ 2235.263017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.263855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.264675] do_syscall_64+0x33/0x40 [ 2235.265283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.266107] RIP: 0033:0x7fc09be8ab19 [ 2235.266703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.269655] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.270870] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2235.272013] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2235.273158] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2235.274306] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2235.275448] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2235.286324] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:53:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2235.351218] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:53:12 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) [ 2235.385458] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:53:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2235.424374] FAULT_INJECTION: forcing a failure. [ 2235.424374] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.426486] CPU: 1 PID: 23995 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2235.427484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.428673] Call Trace: [ 2235.429068] dump_stack+0x107/0x167 [ 2235.429590] should_fail.cold+0x5/0xa [ 2235.430139] ? __alloc_file+0x21/0x320 [ 2235.430701] should_failslab+0x5/0x20 [ 2235.431261] kmem_cache_alloc+0x5b/0x310 [ 2235.431851] __alloc_file+0x21/0x320 [ 2235.432388] alloc_empty_file+0x6d/0x170 [ 2235.432970] alloc_file+0x5e/0x5a0 [ 2235.433489] alloc_file_pseudo+0x16a/0x250 [ 2235.434089] ? alloc_file+0x5a0/0x5a0 [ 2235.434652] anon_inode_getfile+0xc8/0x1f0 [ 2235.435259] io_uring_setup+0x138b/0x2980 [ 2235.435854] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.436574] ? wait_for_completion_io+0x270/0x270 [ 2235.437282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.438028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.438764] do_syscall_64+0x33/0x40 [ 2235.439293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.440024] RIP: 0033:0x7fb414601b19 [ 2235.440560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.443212] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.444303] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2235.445334] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2235.446353] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2235.447365] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2235.448382] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2235.472937] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2235.489459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:53:12 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2250.014171] FAULT_INJECTION: forcing a failure. [ 2250.014171] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.016995] CPU: 1 PID: 24476 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2250.018736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.020798] Call Trace: [ 2250.021474] dump_stack+0x107/0x167 [ 2250.022385] should_fail.cold+0x5/0xa [ 2250.023339] ? create_object.isra.0+0x3a/0xa20 [ 2250.024476] should_failslab+0x5/0x20 [ 2250.025432] kmem_cache_alloc+0x5b/0x310 [ 2250.026444] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2250.027810] create_object.isra.0+0x3a/0xa20 [ 2250.028902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.030185] kmem_cache_alloc+0x159/0x310 [ 2250.031224] security_file_alloc+0x34/0x170 [ 2250.032332] __alloc_file+0xb7/0x320 [ 2250.033300] alloc_empty_file+0x6d/0x170 [ 2250.034347] alloc_file+0x5e/0x5a0 [ 2250.035264] alloc_file_pseudo+0x16a/0x250 [ 2250.036352] ? alloc_file+0x5a0/0x5a0 [ 2250.037360] anon_inode_getfile+0xc8/0x1f0 [ 2250.038829] io_uring_setup+0x138b/0x2980 [ 2250.039943] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.041243] ? wait_for_completion_io+0x270/0x270 10:53:26 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 10:53:26 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:26 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:26 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x78}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:26 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:26 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 10:53:26 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:26 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2250.042498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.043881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.045203] do_syscall_64+0x33/0x40 [ 2250.046153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.047461] RIP: 0033:0x7fc09be8ab19 [ 2250.048405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.048496] __nla_validate_parse: 2 callbacks suppressed [ 2250.048507] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2250.053090] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.053116] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2250.053129] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2250.053150] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.053163] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2250.053176] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2250.072228] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2250.075407] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2250.079448] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2250.082324] FAULT_INJECTION: forcing a failure. [ 2250.082324] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.084695] CPU: 1 PID: 24488 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2250.086170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.087600] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2250.087925] Call Trace: [ 2250.087957] dump_stack+0x107/0x167 [ 2250.090999] should_fail.cold+0x5/0xa [ 2250.091804] ? create_object.isra.0+0x3a/0xa20 [ 2250.092774] should_failslab+0x5/0x20 [ 2250.093594] kmem_cache_alloc+0x5b/0x310 [ 2250.094456] create_object.isra.0+0x3a/0xa20 [ 2250.095384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.096462] kmem_cache_alloc+0x159/0x310 [ 2250.097348] __alloc_file+0x21/0x320 [ 2250.098133] alloc_empty_file+0x6d/0x170 [ 2250.098991] alloc_file+0x5e/0x5a0 [ 2250.099748] alloc_file_pseudo+0x16a/0x250 [ 2250.100644] ? alloc_file+0x5a0/0x5a0 [ 2250.101473] anon_inode_getfile+0xc8/0x1f0 [ 2250.102368] io_uring_setup+0x138b/0x2980 [ 2250.103273] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.104341] ? wait_for_completion_io+0x270/0x270 [ 2250.105401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.106519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.107618] do_syscall_64+0x33/0x40 [ 2250.108405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.109506] RIP: 0033:0x7fb414601b19 [ 2250.110298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.114201] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.115811] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2250.117328] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2250.118837] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.120349] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2250.121867] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2250.124790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:27 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:27 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:27 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:27 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 10:53:27 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2250.296982] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2250.301227] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2250.304941] FAULT_INJECTION: forcing a failure. [ 2250.304941] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.307333] CPU: 0 PID: 24801 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2250.308752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.310467] Call Trace: [ 2250.311024] dump_stack+0x107/0x167 [ 2250.311780] should_fail.cold+0x5/0xa [ 2250.312173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2250.312569] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2250.312598] should_failslab+0x5/0x20 [ 2250.316515] kmem_cache_alloc_trace+0x55/0x320 [ 2250.317481] io_uring_alloc_task_context+0x99/0x6a0 [ 2250.318516] ? io_import_iovec+0x1120/0x1120 [ 2250.319417] ? lock_downgrade+0x6d0/0x6d0 [ 2250.320261] ? do_raw_spin_lock+0x121/0x260 [ 2250.321148] ? rwlock_bug.part.0+0x90/0x90 [ 2250.322026] __io_uring_add_tctx_node+0x2c6/0x520 [ 2250.323017] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2250.324094] ? alloc_fd+0x2e7/0x670 [ 2250.324849] io_uring_setup+0x1fbb/0x2980 [ 2250.325715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.326758] ? wait_for_completion_io+0x270/0x270 [ 2250.327994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.329073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.330154] do_syscall_64+0x33/0x40 [ 2250.330917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.331968] RIP: 0033:0x7fc09be8ab19 [ 2250.332730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.336479] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.338061] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2250.339554] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2250.341029] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.342523] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2250.344004] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:27 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) [ 2250.354843] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:53:27 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:27 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:27 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2250.449672] FAULT_INJECTION: forcing a failure. [ 2250.449672] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.452527] CPU: 1 PID: 24882 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2250.454216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.456160] Call Trace: [ 2250.456722] dump_stack+0x107/0x167 [ 2250.457499] should_fail.cold+0x5/0xa [ 2250.458392] ? security_file_alloc+0x34/0x170 [ 2250.459493] should_failslab+0x5/0x20 [ 2250.460420] kmem_cache_alloc+0x5b/0x310 [ 2250.461433] security_file_alloc+0x34/0x170 [ 2250.462487] __alloc_file+0xb7/0x320 [ 2250.463316] alloc_empty_file+0x6d/0x170 [ 2250.464242] alloc_file+0x5e/0x5a0 [ 2250.465123] alloc_file_pseudo+0x16a/0x250 [ 2250.466176] ? alloc_file+0x5a0/0x5a0 [ 2250.467141] anon_inode_getfile+0xc8/0x1f0 [ 2250.468131] io_uring_setup+0x138b/0x2980 [ 2250.469007] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.470151] ? wait_for_completion_io+0x270/0x270 [ 2250.471382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.472551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.473822] do_syscall_64+0x33/0x40 [ 2250.474754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.475851] RIP: 0033:0x7fb414601b19 [ 2250.476780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.480679] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.482289] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2250.483801] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2250.485310] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2250.486812] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2250.488316] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:27 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:27 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2264.965942] FAULT_INJECTION: forcing a failure. [ 2264.965942] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.968590] CPU: 1 PID: 25127 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2264.970145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.972023] Call Trace: [ 2264.972619] dump_stack+0x107/0x167 [ 2264.973476] should_fail.cold+0x5/0xa [ 2264.974374] ? create_object.isra.0+0x3a/0xa20 [ 2264.975541] should_failslab+0x5/0x20 [ 2264.976505] kmem_cache_alloc+0x5b/0x310 [ 2264.977563] create_object.isra.0+0x3a/0xa20 [ 2264.978676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2264.979976] kmem_cache_alloc_trace+0x151/0x320 [ 2264.981169] io_uring_alloc_task_context+0x99/0x6a0 [ 2264.982244] __nla_validate_parse: 5 callbacks suppressed [ 2264.982250] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2264.982441] ? io_import_iovec+0x1120/0x1120 [ 2264.986352] ? lock_downgrade+0x6d0/0x6d0 [ 2264.987427] ? do_raw_spin_lock+0x121/0x260 [ 2264.988538] ? rwlock_bug.part.0+0x90/0x90 [ 2264.989630] __io_uring_add_tctx_node+0x2c6/0x520 10:53:41 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) 10:53:41 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 10:53:41 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:41 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:41 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:41 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:41 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2264.991263] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2264.992676] ? alloc_fd+0x2e7/0x670 [ 2264.993617] io_uring_setup+0x1fbb/0x2980 [ 2264.994670] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.995943] ? wait_for_completion_io+0x270/0x270 [ 2264.997187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.997589] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.998516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.998541] do_syscall_64+0x33/0x40 [ 2264.998564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.003097] RIP: 0033:0x7fc09be8ab19 [ 2265.004030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.005855] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2265.008671] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.008694] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2265.008710] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2265.013930] FAULT_INJECTION: forcing a failure. [ 2265.013930] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.015273] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2265.015285] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2265.015302] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2265.022049] CPU: 0 PID: 25135 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2265.022931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.023970] Call Trace: [ 2265.024306] dump_stack+0x107/0x167 [ 2265.024762] should_fail.cold+0x5/0xa [ 2265.025249] ? create_object.isra.0+0x3a/0xa20 [ 2265.025836] should_failslab+0x5/0x20 [ 2265.026313] kmem_cache_alloc+0x5b/0x310 [ 2265.026823] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2265.027513] create_object.isra.0+0x3a/0xa20 [ 2265.028064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2265.028702] kmem_cache_alloc+0x159/0x310 [ 2265.029224] security_file_alloc+0x34/0x170 [ 2265.029774] __alloc_file+0xb7/0x320 [ 2265.030240] alloc_empty_file+0x6d/0x170 [ 2265.030754] alloc_file+0x5e/0x5a0 [ 2265.031200] alloc_file_pseudo+0x16a/0x250 [ 2265.031730] ? alloc_file+0x5a0/0x5a0 [ 2265.032218] anon_inode_getfile+0xc8/0x1f0 [ 2265.032751] io_uring_setup+0x138b/0x2980 [ 2265.033275] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.033930] ? wait_for_completion_io+0x270/0x270 [ 2265.034547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.035203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.035852] do_syscall_64+0x33/0x40 [ 2265.036314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.036953] RIP: 0033:0x7fb414601b19 [ 2265.037425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.039722] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.040674] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2265.041571] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2265.042468] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2265.043358] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2265.044250] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2265.049600] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.055633] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2265.058738] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:42 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2265.152296] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:53:42 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 10:53:42 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) [ 2265.226295] FAULT_INJECTION: forcing a failure. [ 2265.226295] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.227660] CPU: 0 PID: 25498 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2265.228461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.229425] Call Trace: [ 2265.229735] dump_stack+0x107/0x167 [ 2265.230154] should_fail.cold+0x5/0xa [ 2265.230591] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2265.231187] should_failslab+0x5/0x20 [ 2265.231629] kmem_cache_alloc_trace+0x55/0x320 [ 2265.232155] io_uring_alloc_task_context+0x99/0x6a0 [ 2265.232730] ? io_import_iovec+0x1120/0x1120 [ 2265.233240] ? lock_downgrade+0x6d0/0x6d0 [ 2265.233727] ? do_raw_spin_lock+0x121/0x260 [ 2265.234221] ? rwlock_bug.part.0+0x90/0x90 [ 2265.234712] __io_uring_add_tctx_node+0x2c6/0x520 [ 2265.235262] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2265.235866] ? alloc_fd+0x2e7/0x670 [ 2265.236289] io_uring_setup+0x1fbb/0x2980 [ 2265.236771] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.237354] ? wait_for_completion_io+0x270/0x270 [ 2265.237935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.238532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.239123] do_syscall_64+0x33/0x40 [ 2265.239549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.239957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2265.240132] RIP: 0033:0x7fb414601b19 [ 2265.240143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.240149] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.240168] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2265.244704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2265.245453] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2265.245459] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2265.245465] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2265.245470] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2265.257325] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2265.261322] FAULT_INJECTION: forcing a failure. [ 2265.261322] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.262648] CPU: 0 PID: 25519 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2265.263439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.264386] Call Trace: [ 2265.264690] dump_stack+0x107/0x167 [ 2265.265108] should_fail.cold+0x5/0xa [ 2265.265551] ? create_object.isra.0+0x3a/0xa20 [ 2265.266073] should_failslab+0x5/0x20 [ 2265.266507] kmem_cache_alloc+0x5b/0x310 [ 2265.266973] create_object.isra.0+0x3a/0xa20 [ 2265.267478] kmemleak_alloc_percpu+0xa0/0x100 [ 2265.267988] pcpu_alloc+0x4e2/0x1240 [ 2265.268419] __percpu_counter_init+0x10d/0x2d0 [ 2265.268944] io_uring_alloc_task_context+0xcc/0x6a0 [ 2265.269521] ? io_import_iovec+0x1120/0x1120 [ 2265.270025] ? lock_downgrade+0x6d0/0x6d0 [ 2265.270497] ? do_raw_spin_lock+0x121/0x260 [ 2265.270985] ? rwlock_bug.part.0+0x90/0x90 [ 2265.271471] __io_uring_add_tctx_node+0x2c6/0x520 [ 2265.272017] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2265.272609] ? alloc_fd+0x2e7/0x670 [ 2265.273041] io_uring_setup+0x1fbb/0x2980 [ 2265.273523] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.274095] ? wait_for_completion_io+0x270/0x270 [ 2265.274656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.275251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.275844] do_syscall_64+0x33/0x40 [ 2265.276267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.276849] RIP: 0033:0x7fc09be8ab19 [ 2265.277286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.279396] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.280283] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2265.281107] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2265.281956] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2265.282792] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2265.283626] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:42 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3cc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:42 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x78}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:42 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:42 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) [ 2265.459303] FAULT_INJECTION: forcing a failure. [ 2265.459303] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.460786] CPU: 0 PID: 25736 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2265.461660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.462603] Call Trace: [ 2265.462907] dump_stack+0x107/0x167 [ 2265.463324] should_fail.cold+0x5/0xa [ 2265.463758] ? create_object.isra.0+0x3a/0xa20 [ 2265.464276] should_failslab+0x5/0x20 [ 2265.464707] kmem_cache_alloc+0x5b/0x310 [ 2265.465171] create_object.isra.0+0x3a/0xa20 [ 2265.465680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2265.466265] kmem_cache_alloc_trace+0x151/0x320 [ 2265.466794] io_uring_alloc_task_context+0x99/0x6a0 [ 2265.467362] ? io_import_iovec+0x1120/0x1120 [ 2265.467865] ? lock_downgrade+0x6d0/0x6d0 [ 2265.468343] ? do_raw_spin_lock+0x121/0x260 [ 2265.468830] ? rwlock_bug.part.0+0x90/0x90 [ 2265.469313] __io_uring_add_tctx_node+0x2c6/0x520 [ 2265.469870] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2265.470463] ? alloc_fd+0x2e7/0x670 [ 2265.470882] io_uring_setup+0x1fbb/0x2980 [ 2265.471359] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.471934] ? wait_for_completion_io+0x270/0x270 [ 2265.472492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.473092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.473682] do_syscall_64+0x33/0x40 [ 2265.474100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.474683] RIP: 0033:0x7fb414601b19 [ 2265.475103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.477186] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.478064] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2265.478880] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2265.479691] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2265.480497] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2265.481305] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:56 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 10:53:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:56 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:56 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 10:53:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x408}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:53:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2279.632380] __nla_validate_parse: 5 callbacks suppressed [ 2279.632387] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2279.637255] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2279.638492] FAULT_INJECTION: forcing a failure. [ 2279.638492] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.641456] CPU: 1 PID: 25776 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2279.642263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.643215] Call Trace: [ 2279.643522] dump_stack+0x107/0x167 [ 2279.643939] should_fail.cold+0x5/0xa [ 2279.644373] ? create_object.isra.0+0x3a/0xa20 [ 2279.644898] should_failslab+0x5/0x20 [ 2279.645330] kmem_cache_alloc+0x5b/0x310 [ 2279.645801] create_object.isra.0+0x3a/0xa20 [ 2279.646308] kmemleak_alloc_percpu+0xa0/0x100 [ 2279.646820] pcpu_alloc+0x4e2/0x1240 [ 2279.647255] __percpu_counter_init+0x10d/0x2d0 [ 2279.647777] io_uring_alloc_task_context+0xcc/0x6a0 [ 2279.648343] ? io_import_iovec+0x1120/0x1120 [ 2279.648849] ? lock_downgrade+0x6d0/0x6d0 [ 2279.649323] ? do_raw_spin_lock+0x121/0x260 [ 2279.649821] ? rwlock_bug.part.0+0x90/0x90 [ 2279.650305] __io_uring_add_tctx_node+0x2c6/0x520 [ 2279.650852] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2279.651448] ? alloc_fd+0x2e7/0x670 [ 2279.651874] io_uring_setup+0x1fbb/0x2980 [ 2279.652352] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2279.652930] ? wait_for_completion_io+0x270/0x270 [ 2279.653489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2279.654093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2279.654681] do_syscall_64+0x33/0x40 [ 2279.655106] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.655691] RIP: 0033:0x7fc09be8ab19 [ 2279.656122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.658233] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2279.659102] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2279.659914] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2279.660724] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2279.661544] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2279.662359] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2279.667939] FAULT_INJECTION: forcing a failure. [ 2279.667939] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.671153] CPU: 0 PID: 25783 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2279.673000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.675132] Call Trace: [ 2279.675820] dump_stack+0x107/0x167 [ 2279.676012] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2279.676757] should_fail.cold+0x5/0xa [ 2279.676786] ? create_object.isra.0+0x3a/0xa20 [ 2279.679863] should_failslab+0x5/0x20 [ 2279.680838] kmem_cache_alloc+0x5b/0x310 [ 2279.681899] create_object.isra.0+0x3a/0xa20 [ 2279.683032] kmemleak_alloc_percpu+0xa0/0x100 [ 2279.684197] pcpu_alloc+0x4e2/0x1240 [ 2279.685178] __percpu_counter_init+0x10d/0x2d0 [ 2279.686284] io_uring_alloc_task_context+0xcc/0x6a0 [ 2279.687357] ? io_import_iovec+0x1120/0x1120 [ 2279.688312] ? lock_downgrade+0x6d0/0x6d0 [ 2279.689203] ? do_raw_spin_lock+0x121/0x260 [ 2279.690144] ? rwlock_bug.part.0+0x90/0x90 [ 2279.691058] __io_uring_add_tctx_node+0x2c6/0x520 [ 2279.692087] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2279.693207] ? alloc_fd+0x2e7/0x670 [ 2279.694014] io_uring_setup+0x1fbb/0x2980 [ 2279.694913] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2279.695979] ? wait_for_completion_io+0x270/0x270 [ 2279.697253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2279.698375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2279.699166] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2279.699699] do_syscall_64+0x33/0x40 [ 2279.701450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.702550] RIP: 0033:0x7fb414601b19 [ 2279.703355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.707230] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2279.708836] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2279.710353] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2279.711846] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2279.713347] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2279.714861] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2279.730905] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:53:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xce0}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:53:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2279.799339] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2279.810734] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:54:09 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 10:54:09 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 10:54:09 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2292.793369] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2292.806875] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2292.807546] FAULT_INJECTION: forcing a failure. [ 2292.807546] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.811839] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2292.812132] CPU: 0 PID: 26106 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2292.815558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.817702] Call Trace: [ 2292.818388] dump_stack+0x107/0x167 [ 2292.819319] should_fail.cold+0x5/0xa [ 2292.820299] ? create_object.isra.0+0x3a/0xa20 [ 2292.821458] should_failslab+0x5/0x20 [ 2292.822433] kmem_cache_alloc+0x5b/0x310 [ 2292.823467] create_object.isra.0+0x3a/0xa20 [ 2292.824604] kmemleak_alloc_percpu+0xa0/0x100 [ 2292.825758] pcpu_alloc+0x4e2/0x1240 [ 2292.826725] __percpu_counter_init+0x10d/0x2d0 [ 2292.827896] io_uring_alloc_task_context+0xcc/0x6a0 [ 2292.829172] ? io_import_iovec+0x1120/0x1120 [ 2292.830288] ? lock_downgrade+0x6d0/0x6d0 [ 2292.831209] ? do_raw_spin_lock+0x121/0x260 [ 2292.832119] ? rwlock_bug.part.0+0x90/0x90 [ 2292.833018] __io_uring_add_tctx_node+0x2c6/0x520 [ 2292.834042] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2292.835144] ? alloc_fd+0x2e7/0x670 [ 2292.835921] io_uring_setup+0x1fbb/0x2980 [ 2292.836798] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2292.837868] ? wait_for_completion_io+0x270/0x270 [ 2292.838907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.840020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.841117] do_syscall_64+0x33/0x40 [ 2292.841905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.843004] RIP: 0033:0x7fb414601b19 [ 2292.843789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.847707] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2292.849317] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2292.850842] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2292.852354] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2292.853863] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2292.855373] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2292.859799] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2292.874903] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2292.877671] FAULT_INJECTION: forcing a failure. [ 2292.877671] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.880314] CPU: 0 PID: 26164 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2292.881776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.883516] Call Trace: [ 2292.884075] dump_stack+0x107/0x167 [ 2292.884840] should_fail.cold+0x5/0xa [ 2292.885639] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2292.886761] should_failslab+0x5/0x20 [ 2292.887569] kmem_cache_alloc_trace+0x55/0x320 [ 2292.888535] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2292.889605] ? io_import_iovec+0x1120/0x1120 [ 2292.890542] ? lock_downgrade+0x6d0/0x6d0 [ 2292.891409] ? do_raw_spin_lock+0x121/0x260 [ 2292.892319] ? rwlock_bug.part.0+0x90/0x90 [ 2292.893208] __io_uring_add_tctx_node+0x2c6/0x520 [ 2292.894231] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2292.895319] ? alloc_fd+0x2e7/0x670 [ 2292.896095] io_uring_setup+0x1fbb/0x2980 [ 2292.896980] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2292.898054] ? wait_for_completion_io+0x270/0x270 [ 2292.899183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.900595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.902001] do_syscall_64+0x33/0x40 [ 2292.902983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.904326] RIP: 0033:0x7fc09be8ab19 [ 2292.905303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.910103] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2292.912092] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2292.913815] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2292.915363] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2292.917178] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2292.918720] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2292.925327] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:54:09 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:09 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 10:54:09 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2293.033899] FAULT_INJECTION: forcing a failure. [ 2293.033899] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.036307] CPU: 1 PID: 26245 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2293.037693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.039323] Call Trace: [ 2293.039848] dump_stack+0x107/0x167 [ 2293.040582] should_fail.cold+0x5/0xa [ 2293.041334] ? create_object.isra.0+0x3a/0xa20 [ 2293.041790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2293.042242] should_failslab+0x5/0x20 [ 2293.042291] kmem_cache_alloc+0x5b/0x310 [ 2293.045588] create_object.isra.0+0x3a/0xa20 [ 2293.046465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2293.047473] kmem_cache_alloc_trace+0x151/0x320 [ 2293.048393] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2293.049390] ? io_import_iovec+0x1120/0x1120 [ 2293.050265] ? lock_downgrade+0x6d0/0x6d0 [ 2293.051077] ? do_raw_spin_lock+0x121/0x260 [ 2293.051930] ? rwlock_bug.part.0+0x90/0x90 [ 2293.052772] __io_uring_add_tctx_node+0x2c6/0x520 [ 2293.053728] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2293.054760] ? alloc_fd+0x2e7/0x670 [ 2293.055491] io_uring_setup+0x1fbb/0x2980 [ 2293.056324] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2293.057310] ? wait_for_completion_io+0x270/0x270 [ 2293.058283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2293.059319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2293.060335] do_syscall_64+0x33/0x40 [ 2293.061061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2293.062069] RIP: 0033:0x7fc09be8ab19 [ 2293.062802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.066388] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2293.067871] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2293.069264] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2293.070664] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2293.072056] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2293.073455] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:54:10 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 10:54:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2293.102884] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2293.108503] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2293.126703] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2293.128375] FAULT_INJECTION: forcing a failure. [ 2293.128375] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.130759] CPU: 1 PID: 26335 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2293.132075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.133664] Call Trace: [ 2293.134187] dump_stack+0x107/0x167 [ 2293.134898] should_fail.cold+0x5/0xa [ 2293.135625] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2293.136631] should_failslab+0x5/0x20 [ 2293.137360] kmem_cache_alloc_trace+0x55/0x320 [ 2293.138244] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2293.139200] ? io_import_iovec+0x1120/0x1120 [ 2293.140027] ? lock_downgrade+0x6d0/0x6d0 [ 2293.140805] ? do_raw_spin_lock+0x121/0x260 [ 2293.141620] ? rwlock_bug.part.0+0x90/0x90 [ 2293.142431] __io_uring_add_tctx_node+0x2c6/0x520 [ 2293.143350] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2293.144334] ? alloc_fd+0x2e7/0x670 [ 2293.145030] io_uring_setup+0x1fbb/0x2980 [ 2293.145821] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2293.146773] ? wait_for_completion_io+0x270/0x270 [ 2293.147702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2293.148696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2293.149665] do_syscall_64+0x33/0x40 [ 2293.150374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2293.151342] RIP: 0033:0x7fb414601b19 [ 2293.152043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.155535] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2293.156980] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2293.158335] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2293.159679] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2293.161012] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2293.162351] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:54:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:54:24 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 10:54:24 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:24 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2307.488549] __nla_validate_parse: 5 callbacks suppressed [ 2307.488562] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:24 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3ca}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:24 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) [ 2307.493645] FAULT_INJECTION: forcing a failure. [ 2307.493645] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.496208] CPU: 0 PID: 26559 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2307.497787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2307.498656] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:54:24 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2307.499685] Call Trace: [ 2307.499711] dump_stack+0x107/0x167 [ 2307.499733] should_fail.cold+0x5/0xa [ 2307.503158] ? create_object.isra.0+0x3a/0xa20 [ 2307.504206] should_failslab+0x5/0x20 [ 2307.505079] kmem_cache_alloc+0x5b/0x310 [ 2307.506020] create_object.isra.0+0x3a/0xa20 10:54:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2307.507023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2307.508228] kmem_cache_alloc_trace+0x151/0x320 [ 2307.509297] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2307.510466] ? io_import_iovec+0x1120/0x1120 [ 2307.511469] ? lock_downgrade+0x6d0/0x6d0 [ 2307.512415] ? do_raw_spin_lock+0x121/0x260 [ 2307.513402] ? rwlock_bug.part.0+0x90/0x90 [ 2307.514002] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2307.514427] __io_uring_add_tctx_node+0x2c6/0x520 [ 2307.514448] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2307.517786] ? alloc_fd+0x2e7/0x670 [ 2307.518630] io_uring_setup+0x1fbb/0x2980 [ 2307.519573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2307.520381] FAULT_INJECTION: forcing a failure. [ 2307.520381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2307.520718] ? wait_for_completion_io+0x270/0x270 [ 2307.520762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2307.524456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.525625] do_syscall_64+0x33/0x40 [ 2307.526482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2307.527639] RIP: 0033:0x7fb414601b19 [ 2307.528485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.532664] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2307.534388] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2307.535995] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2307.537595] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2307.539197] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2307.540810] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2307.542444] CPU: 1 PID: 26565 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 2307.543365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 10:54:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2307.544492] Call Trace: [ 2307.544913] dump_stack+0x107/0x167 [ 2307.545465] should_fail.cold+0x5/0xa [ 2307.545973] _copy_from_user+0x2e/0x1b0 [ 2307.546489] io_uring_setup+0x9b/0x2980 [ 2307.547001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2307.547618] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2307.548261] ? wait_for_completion_io+0x270/0x270 [ 2307.548885] ? rcu_read_lock_any_held+0x75/0xa0 [ 2307.549480] ? vfs_write+0x354/0xb10 [ 2307.549979] ? fput_many+0x2f/0x1a0 [ 2307.550442] ? ksys_write+0x1a9/0x260 [ 2307.550928] ? __ia32_sys_read+0xb0/0xb0 [ 2307.551447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2307.551861] FAULT_INJECTION: forcing a failure. [ 2307.551861] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.552112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.552125] do_syscall_64+0x33/0x40 [ 2307.552136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2307.552144] RIP: 0033:0x7fd5eacabb19 [ 2307.552154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.552168] RSP: 002b:00007fd5e8221108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2307.560208] RAX: ffffffffffffffda RBX: 00007fd5eadbef60 RCX: 00007fd5eacabb19 [ 2307.561109] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2307.562035] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2307.562934] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2307.563848] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2307.564773] CPU: 0 PID: 26556 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2307.566458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2307.568298] Call Trace: [ 2307.568884] dump_stack+0x107/0x167 [ 2307.569701] should_fail.cold+0x5/0xa [ 2307.570560] ? io_wq_create+0xeb/0xc00 [ 2307.571424] should_failslab+0x5/0x20 [ 2307.572265] __kmalloc+0x72/0x390 [ 2307.573044] io_wq_create+0xeb/0xc00 [ 2307.573886] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2307.575014] ? io_import_iovec+0x1120/0x1120 [ 2307.575992] ? io_apoll_task_func+0x2d0/0x2d0 [ 2307.576984] ? __io_req_find_next+0x300/0x300 [ 2307.577987] ? do_raw_spin_lock+0x121/0x260 [ 2307.578939] ? rwlock_bug.part.0+0x90/0x90 [ 2307.579991] __io_uring_add_tctx_node+0x2c6/0x520 [ 2307.581059] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2307.582220] ? alloc_fd+0x2e7/0x670 [ 2307.583039] io_uring_setup+0x1fbb/0x2980 [ 2307.583956] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2307.585068] ? wait_for_completion_io+0x270/0x270 [ 2307.586209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2307.587359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.588499] do_syscall_64+0x33/0x40 [ 2307.589318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2307.590460] RIP: 0033:0x7fc09be8ab19 [ 2307.591276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.595335] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2307.597007] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2307.598583] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2307.600133] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 10:54:24 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) [ 2307.601760] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2307.603325] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2307.606748] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2307.609037] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2307.619754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:54:24 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:24 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2307.684851] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2307.704707] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2307.730975] FAULT_INJECTION: forcing a failure. [ 2307.730975] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.732384] CPU: 1 PID: 26874 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2307.733203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2307.734205] Call Trace: [ 2307.734524] dump_stack+0x107/0x167 [ 2307.734959] should_fail.cold+0x5/0xa [ 2307.735411] ? io_wq_create+0xeb/0xc00 [ 2307.735873] should_failslab+0x5/0x20 [ 2307.736324] __kmalloc+0x72/0x390 [ 2307.736738] io_wq_create+0xeb/0xc00 [ 2307.737182] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2307.737785] ? io_import_iovec+0x1120/0x1120 [ 2307.738311] ? io_apoll_task_func+0x2d0/0x2d0 [ 2307.738836] ? __io_req_find_next+0x300/0x300 [ 2307.739361] ? do_raw_spin_lock+0x121/0x260 [ 2307.739866] ? rwlock_bug.part.0+0x90/0x90 [ 2307.740364] __io_uring_add_tctx_node+0x2c6/0x520 [ 2307.740931] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2307.741544] ? alloc_fd+0x2e7/0x670 [ 2307.741985] io_uring_setup+0x1fbb/0x2980 [ 2307.742476] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2307.743070] ? wait_for_completion_io+0x270/0x270 [ 2307.743646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2307.744268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.744871] do_syscall_64+0x33/0x40 [ 2307.745306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2307.745915] RIP: 0033:0x7fb414601b19 [ 2307.746357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2307.748533] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2307.749429] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2307.750279] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2307.751114] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2307.751949] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2307.752791] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2321.271721] FAULT_INJECTION: forcing a failure. [ 2321.271721] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.273276] CPU: 0 PID: 26886 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2321.274205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.275287] Call Trace: [ 2321.275638] dump_stack+0x107/0x167 [ 2321.276106] should_fail.cold+0x5/0xa [ 2321.276606] ? create_object.isra.0+0x3a/0xa20 [ 2321.277214] should_failslab+0x5/0x20 [ 2321.277519] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2321.277706] kmem_cache_alloc+0x5b/0x310 [ 2321.277723] create_object.isra.0+0x3a/0xa20 [ 2321.280725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2321.281348] FAULT_INJECTION: forcing a failure. [ 2321.281348] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.281397] __kmalloc+0x16e/0x390 [ 2321.284362] io_wq_create+0xeb/0xc00 [ 2321.284868] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2321.285546] ? io_import_iovec+0x1120/0x1120 [ 2321.286127] ? io_apoll_task_func+0x2d0/0x2d0 [ 2321.286722] ? __io_req_find_next+0x300/0x300 [ 2321.287319] ? do_raw_spin_lock+0x121/0x260 [ 2321.287892] ? rwlock_bug.part.0+0x90/0x90 [ 2321.288444] __io_uring_add_tctx_node+0x2c6/0x520 [ 2321.289088] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2321.289769] ? alloc_fd+0x2e7/0x670 [ 2321.290271] io_uring_setup+0x1fbb/0x2980 [ 2321.290834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2321.291513] ? wait_for_completion_io+0x270/0x270 [ 2321.292172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2321.292875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2321.293561] do_syscall_64+0x33/0x40 [ 2321.294045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2321.294723] RIP: 0033:0x7fb414601b19 [ 2321.295215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.297653] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2321.298665] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2321.299608] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2321.300552] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2321.301472] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2321.302420] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2321.303352] CPU: 1 PID: 26889 Comm: syz-executor.0 Not tainted 5.10.239 #1 10:54:38 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) 10:54:38 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) 10:54:38 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x408}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2321.305373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.307510] Call Trace: [ 2321.308122] dump_stack+0x107/0x167 [ 2321.308964] should_fail.cold+0x5/0xa [ 2321.309848] ? create_object.isra.0+0x3a/0xa20 [ 2321.310911] should_failslab+0x5/0x20 [ 2321.311788] kmem_cache_alloc+0x5b/0x310 [ 2321.312727] create_object.isra.0+0x3a/0xa20 [ 2321.313737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2321.314916] __kmalloc+0x16e/0x390 [ 2321.315733] io_wq_create+0xeb/0xc00 [ 2321.316590] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2321.317749] ? io_import_iovec+0x1120/0x1120 [ 2321.318767] ? io_apoll_task_func+0x2d0/0x2d0 [ 2321.319791] ? __io_req_find_next+0x300/0x300 [ 2321.320809] ? do_raw_spin_lock+0x121/0x260 [ 2321.321791] ? rwlock_bug.part.0+0x90/0x90 [ 2321.322774] __io_uring_add_tctx_node+0x2c6/0x520 [ 2321.323874] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2321.324337] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2321.325070] ? alloc_fd+0x2e7/0x670 [ 2321.327072] io_uring_setup+0x1fbb/0x2980 [ 2321.328032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2321.329194] ? wait_for_completion_io+0x270/0x270 [ 2321.330336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2321.331542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2321.332728] do_syscall_64+0x33/0x40 [ 2321.333584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2321.334767] RIP: 0033:0x7fc09be8ab19 [ 2321.335620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.340109] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2321.341849] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2321.343482] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2321.345108] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2321.346742] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2321.348372] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2321.350737] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:54:38 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) [ 2321.370346] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2321.372675] FAULT_INJECTION: forcing a failure. [ 2321.372675] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.375256] CPU: 1 PID: 26897 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2321.376817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.378685] Call Trace: [ 2321.379280] dump_stack+0x107/0x167 [ 2321.380099] should_fail.cold+0x5/0xa [ 2321.380960] ? io_wq_create+0x6ef/0xc00 [ 2321.381856] should_failslab+0x5/0x20 [ 2321.382726] kmem_cache_alloc_node_trace+0x59/0x340 [ 2321.383851] io_wq_create+0x6ef/0xc00 10:54:38 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2321.384712] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2321.385994] ? io_import_iovec+0x1120/0x1120 [ 2321.387000] ? io_apoll_task_func+0x2d0/0x2d0 [ 2321.388002] ? __io_req_find_next+0x300/0x300 [ 2321.389003] ? do_raw_spin_lock+0x121/0x260 [ 2321.389967] ? rwlock_bug.part.0+0x90/0x90 [ 2321.390931] __io_uring_add_tctx_node+0x2c6/0x520 [ 2321.392012] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2321.392042] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2321.393181] ? alloc_fd+0x2e7/0x670 [ 2321.393212] io_uring_setup+0x1fbb/0x2980 [ 2321.393240] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2321.397178] ? wait_for_completion_io+0x270/0x270 [ 2321.398287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2321.399458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2321.400608] do_syscall_64+0x33/0x40 [ 2321.401437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2321.402589] RIP: 0033:0x7fb414601b19 [ 2321.403418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.407530] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2321.409224] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2321.410822] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2321.412411] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2321.413995] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2321.415586] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2321.418657] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2321.428296] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:54:38 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 10:54:38 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2321.497286] FAULT_INJECTION: forcing a failure. [ 2321.497286] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.498824] CPU: 0 PID: 27136 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2321.499690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.500725] Call Trace: [ 2321.501041] dump_stack+0x107/0x167 [ 2321.501490] should_fail.cold+0x5/0xa [ 2321.501961] ? io_wq_create+0x6ef/0xc00 [ 2321.502465] should_failslab+0x5/0x20 [ 2321.502944] kmem_cache_alloc_node_trace+0x59/0x340 [ 2321.503533] io_wq_create+0x6ef/0xc00 [ 2321.504009] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2321.504634] ? io_import_iovec+0x1120/0x1120 [ 2321.505179] ? io_apoll_task_func+0x2d0/0x2d0 [ 2321.505707] ? __io_req_find_next+0x300/0x300 [ 2321.506265] ? do_raw_spin_lock+0x121/0x260 [ 2321.506769] ? rwlock_bug.part.0+0x90/0x90 [ 2321.507293] __io_uring_add_tctx_node+0x2c6/0x520 [ 2321.507859] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2321.508509] ? alloc_fd+0x2e7/0x670 [ 2321.508962] io_uring_setup+0x1fbb/0x2980 [ 2321.509480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2321.510111] ? wait_for_completion_io+0x270/0x270 [ 2321.510719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2321.511373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2321.512021] do_syscall_64+0x33/0x40 [ 2321.512479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2321.513080] RIP: 0033:0x7fc09be8ab19 [ 2321.513540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.515706] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2321.516638] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2321.517465] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2321.518349] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2321.519232] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2321.520064] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:38 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2321.526141] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:54:38 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xa0e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x53be}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2321.571958] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:38 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:38 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2321.599158] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:54:51 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x7800}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:54:51 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe0a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:51 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2334.785675] __nla_validate_parse: 4 callbacks suppressed [ 2334.785683] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2334.788014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:54:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:51 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) 10:54:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:51 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) [ 2334.811079] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2334.817729] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2334.823771] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2334.826562] FAULT_INJECTION: forcing a failure. [ 2334.826562] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.828951] CPU: 0 PID: 27542 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2334.830417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.832161] Call Trace: [ 2334.832723] dump_stack+0x107/0x167 [ 2334.833490] should_fail.cold+0x5/0xa [ 2334.834303] ? create_object.isra.0+0x3a/0xa20 [ 2334.835271] should_failslab+0x5/0x20 10:54:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2334.836242] kmem_cache_alloc+0x5b/0x310 [ 2334.837107] ? io_wq_create+0x114/0xc00 [ 2334.837942] create_object.isra.0+0x3a/0xa20 [ 2334.838871] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.839945] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2334.841017] io_wq_create+0x6ef/0xc00 [ 2334.841825] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2334.842907] ? io_import_iovec+0x1120/0x1120 [ 2334.843835] ? io_apoll_task_func+0x2d0/0x2d0 [ 2334.844779] ? __io_req_find_next+0x300/0x300 [ 2334.845716] ? do_raw_spin_lock+0x121/0x260 [ 2334.846636] ? rwlock_bug.part.0+0x90/0x90 [ 2334.847619] __io_uring_add_tctx_node+0x2c6/0x520 [ 2334.848756] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2334.849982] ? alloc_fd+0x2e7/0x670 [ 2334.850854] io_uring_setup+0x1fbb/0x2980 [ 2334.851796] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.852936] ? wait_for_completion_io+0x270/0x270 [ 2334.854054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.855244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.856388] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2334.858243] do_syscall_64+0x33/0x40 [ 2334.859083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.860253] RIP: 0033:0x7fc09be8ab19 [ 2334.861081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.865439] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.867180] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2334.868800] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2334.870446] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.872072] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2334.873701] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2334.885403] FAULT_INJECTION: forcing a failure. [ 2334.885403] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.888268] CPU: 0 PID: 27653 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2334.889917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.891830] Call Trace: [ 2334.892434] dump_stack+0x107/0x167 [ 2334.893268] should_fail.cold+0x5/0xa [ 2334.894141] ? create_object.isra.0+0x3a/0xa20 [ 2334.895199] should_failslab+0x5/0x20 [ 2334.896071] kmem_cache_alloc+0x5b/0x310 [ 2334.896992] ? io_wq_create+0x114/0xc00 [ 2334.897905] create_object.isra.0+0x3a/0xa20 [ 2334.898918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.900083] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2334.901247] io_wq_create+0x6ef/0xc00 [ 2334.902127] io_uring_alloc_task_context+0x1f1/0x6a0 10:54:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2334.903304] ? io_import_iovec+0x1120/0x1120 [ 2334.904455] ? io_apoll_task_func+0x2d0/0x2d0 [ 2334.905481] ? __io_req_find_next+0x300/0x300 [ 2334.906508] ? do_raw_spin_lock+0x121/0x260 [ 2334.907487] ? rwlock_bug.part.0+0x90/0x90 [ 2334.908456] __io_uring_add_tctx_node+0x2c6/0x520 [ 2334.909558] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2334.910760] ? alloc_fd+0x2e7/0x670 [ 2334.911598] io_uring_setup+0x1fbb/0x2980 [ 2334.912559] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.913717] ? wait_for_completion_io+0x270/0x270 [ 2334.914853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.916043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.917214] do_syscall_64+0x33/0x40 [ 2334.918065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.919235] RIP: 0033:0x7fb414601b19 [ 2334.920083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:54:51 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc00}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2334.924284] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.926084] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2334.927715] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2334.929338] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.930971] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2334.932597] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2334.966985] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2334.968702] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2334.977602] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:54:51 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) 10:54:52 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) 10:54:52 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:52 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:54:52 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:52 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:54:52 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2335.108721] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2335.114478] FAULT_INJECTION: forcing a failure. [ 2335.114478] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.115785] CPU: 1 PID: 28056 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2335.116534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.117483] Call Trace: [ 2335.117775] dump_stack+0x107/0x167 [ 2335.118178] should_fail.cold+0x5/0xa [ 2335.118593] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2335.119136] should_failslab+0x5/0x20 [ 2335.119571] kmem_cache_alloc_trace+0x55/0x320 [ 2335.120067] __io_uring_add_tctx_node+0x15c/0x520 [ 2335.120587] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2335.121183] ? alloc_fd+0x2e7/0x670 [ 2335.121588] io_uring_setup+0x1fbb/0x2980 [ 2335.122063] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2335.122618] ? wait_for_completion_io+0x270/0x270 [ 2335.123180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.123629] FAULT_INJECTION: forcing a failure. [ 2335.123629] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.123751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.123770] do_syscall_64+0x33/0x40 [ 2335.127296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.127845] RIP: 0033:0x7fc09be8ab19 [ 2335.128244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.130233] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2335.131045] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2335.131803] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2335.132562] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2335.133321] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2335.134080] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2335.134870] CPU: 0 PID: 28063 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2335.136530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.138488] Call Trace: [ 2335.139095] dump_stack+0x107/0x167 [ 2335.139924] should_fail.cold+0x5/0xa [ 2335.140771] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2335.141873] should_failslab+0x5/0x20 [ 2335.142757] kmem_cache_alloc_trace+0x55/0x320 [ 2335.143823] __io_uring_add_tctx_node+0x15c/0x520 [ 2335.144884] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2335.145983] ? alloc_fd+0x2e7/0x670 [ 2335.146771] io_uring_setup+0x1fbb/0x2980 [ 2335.147688] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2335.148878] ? wait_for_completion_io+0x270/0x270 [ 2335.150030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.151274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.152487] do_syscall_64+0x33/0x40 [ 2335.153268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.154493] RIP: 0033:0x7fb414601b19 [ 2335.155384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.159669] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2335.161371] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2335.162875] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2335.164526] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2335.166269] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2335.168014] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:05 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2348.206396] __nla_validate_parse: 4 callbacks suppressed [ 2348.206406] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2348.215045] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2348.216978] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2348.219865] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:55:05 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:05 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 10:55:05 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 10:55:05 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:05 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbe53}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:05 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2348.234479] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2348.237755] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2348.240572] FAULT_INJECTION: forcing a failure. [ 2348.240572] name failslab, interval 1, probability 0, space 0, times 0 [ 2348.242989] CPU: 0 PID: 28387 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2348.244439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2348.246170] Call Trace: [ 2348.246732] dump_stack+0x107/0x167 [ 2348.247504] should_fail.cold+0x5/0xa [ 2348.248297] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2348.249340] should_failslab+0x5/0x20 [ 2348.250132] kmem_cache_alloc_trace+0x55/0x320 [ 2348.251101] __io_uring_add_tctx_node+0x15c/0x520 [ 2348.252110] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2348.253210] ? alloc_fd+0x2e7/0x670 [ 2348.253977] io_uring_setup+0x1fbb/0x2980 [ 2348.254865] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2348.255946] ? wait_for_completion_io+0x270/0x270 [ 2348.256966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.258063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2348.259154] do_syscall_64+0x33/0x40 [ 2348.259931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2348.261009] RIP: 0033:0x7fb414601b19 [ 2348.261795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2348.265648] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2348.267234] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2348.268717] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2348.270199] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2348.271696] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2348.273189] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2348.277318] FAULT_INJECTION: forcing a failure. [ 2348.277318] name failslab, interval 1, probability 0, space 0, times 0 [ 2348.279704] CPU: 0 PID: 28388 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2348.281174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2348.282927] Call Trace: [ 2348.283475] dump_stack+0x107/0x167 [ 2348.284239] should_fail.cold+0x5/0xa [ 2348.285031] ? create_object.isra.0+0x3a/0xa20 [ 2348.285991] should_failslab+0x5/0x20 [ 2348.286792] kmem_cache_alloc+0x5b/0x310 [ 2348.287652] create_object.isra.0+0x3a/0xa20 [ 2348.288578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2348.289651] kmem_cache_alloc_trace+0x151/0x320 [ 2348.290643] __io_uring_add_tctx_node+0x15c/0x520 [ 2348.291651] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2348.292764] ? alloc_fd+0x2e7/0x670 [ 2348.293536] io_uring_setup+0x1fbb/0x2980 [ 2348.294420] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2348.295480] ? wait_for_completion_io+0x270/0x270 [ 2348.296518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.297610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2348.298690] do_syscall_64+0x33/0x40 [ 2348.299461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2348.300537] RIP: 0033:0x7fc09be8ab19 [ 2348.301311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2348.305187] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2348.306785] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2348.308300] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2348.309781] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2348.311285] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2348.312784] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:05 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2348.416311] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:05 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2348.456237] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2348.507433] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:55:18 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:18 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2362.022758] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2362.028771] FAULT_INJECTION: forcing a failure. [ 2362.028771] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.030853] CPU: 0 PID: 28910 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2362.031939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.033283] Call Trace: [ 2362.033721] dump_stack+0x107/0x167 [ 2362.034317] should_fail.cold+0x5/0xa [ 2362.034944] ? xas_alloc+0x336/0x440 [ 2362.035548] should_failslab+0x5/0x20 [ 2362.036161] kmem_cache_alloc+0x5b/0x310 [ 2362.036236] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2362.036831] ? stack_trace_consume_entry+0x160/0x160 [ 2362.039838] xas_alloc+0x336/0x440 [ 2362.040422] xas_create+0x34a/0x10d0 [ 2362.041031] ? kernel_text_address+0xf2/0x120 [ 2362.041773] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2362.042619] xas_store+0x8c/0x1c40 [ 2362.043196] __xa_store+0x164/0x2d0 [ 2362.043786] ? xa_delete_node+0x280/0x280 [ 2362.044470] ? trace_hardirqs_on+0x5b/0x180 [ 2362.045160] xa_store+0x31/0x50 [ 2362.045693] __io_uring_add_tctx_node+0x1cf/0x520 [ 2362.046464] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2362.047318] ? alloc_fd+0x2e7/0x670 [ 2362.047908] io_uring_setup+0x1fbb/0x2980 [ 2362.048575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.049407] ? wait_for_completion_io+0x270/0x270 [ 2362.050213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.051049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.051904] do_syscall_64+0x33/0x40 [ 2362.052489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.053316] RIP: 0033:0x7fb414601b19 [ 2362.053924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.056908] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.058134] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2362.059145] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2362.059300] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2362.059318] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2362.063788] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2362.064920] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2362.070770] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2362.072460] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:18 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 10:55:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:18 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xcc03}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:18 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:18 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) [ 2362.076692] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2362.079668] FAULT_INJECTION: forcing a failure. [ 2362.079668] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.082110] CPU: 1 PID: 28916 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2362.083596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.085352] Call Trace: [ 2362.085915] dump_stack+0x107/0x167 [ 2362.086710] should_fail.cold+0x5/0xa [ 2362.087517] ? xas_alloc+0x336/0x440 [ 2362.088306] should_failslab+0x5/0x20 [ 2362.089115] kmem_cache_alloc+0x5b/0x310 [ 2362.089976] ? stack_trace_consume_entry+0x160/0x160 [ 2362.091056] xas_alloc+0x336/0x440 [ 2362.091810] xas_create+0x34a/0x10d0 [ 2362.092612] ? kernel_text_address+0xf2/0x120 [ 2362.093575] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2362.094704] xas_store+0x8c/0x1c40 [ 2362.095475] __xa_store+0x164/0x2d0 [ 2362.096244] ? xa_delete_node+0x280/0x280 [ 2362.097130] ? trace_hardirqs_on+0x5b/0x180 [ 2362.098054] xa_store+0x31/0x50 [ 2362.098764] __io_uring_add_tctx_node+0x1cf/0x520 [ 2362.099789] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2362.100899] ? alloc_fd+0x2e7/0x670 [ 2362.101685] io_uring_setup+0x1fbb/0x2980 [ 2362.102592] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.103668] ? wait_for_completion_io+0x270/0x270 [ 2362.104715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.105844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.106943] do_syscall_64+0x33/0x40 [ 2362.107734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.108832] RIP: 0033:0x7fc09be8ab19 [ 2362.109624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.113552] RSP: 002b:00007fc099400108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.115174] RAX: ffffffffffffffda RBX: 00007fc09bf9df60 RCX: 00007fc09be8ab19 [ 2362.116718] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2362.118237] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2362.119761] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2362.121273] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:19 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 10:55:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe00c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2362.265279] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:55:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2362.283548] FAULT_INJECTION: forcing a failure. [ 2362.283548] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.285410] CPU: 0 PID: 29248 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2362.286415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.287636] Call Trace: [ 2362.288022] dump_stack+0x107/0x167 [ 2362.288550] should_fail.cold+0x5/0xa [ 2362.289105] ? create_object.isra.0+0x3a/0xa20 [ 2362.289769] should_failslab+0x5/0x20 [ 2362.290318] kmem_cache_alloc+0x5b/0x310 [ 2362.290923] create_object.isra.0+0x3a/0xa20 [ 2362.291567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2362.292301] kmem_cache_alloc+0x159/0x310 [ 2362.292911] xas_alloc+0x336/0x440 [ 2362.293430] xas_create+0x34a/0x10d0 [ 2362.293973] ? kernel_text_address+0xf2/0x120 [ 2362.294641] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2362.295396] xas_store+0x8c/0x1c40 [ 2362.295917] __xa_store+0x164/0x2d0 [ 2362.296442] ? xa_delete_node+0x280/0x280 [ 2362.297045] ? trace_hardirqs_on+0x5b/0x180 [ 2362.297676] xa_store+0x31/0x50 [ 2362.298158] __io_uring_add_tctx_node+0x1cf/0x520 [ 2362.298873] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2362.299636] ? alloc_fd+0x2e7/0x670 [ 2362.300168] io_uring_setup+0x1fbb/0x2980 [ 2362.300781] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.301516] ? wait_for_completion_io+0x270/0x270 [ 2362.302222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.302983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.303739] do_syscall_64+0x33/0x40 [ 2362.304272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.305004] RIP: 0033:0x7fb414601b19 [ 2362.305538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.308221] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.309326] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2362.310357] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2362.311383] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2362.312400] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2362.313417] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2362.332259] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:55:19 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) [ 2362.344649] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x5491}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2362.367686] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:55:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:19 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) [ 2362.527937] FAULT_INJECTION: forcing a failure. [ 2362.527937] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.530429] CPU: 1 PID: 29570 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2362.531910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.533676] Call Trace: [ 2362.534234] dump_stack+0x107/0x167 [ 2362.535013] should_fail.cold+0x5/0xa [ 2362.535830] ? xas_alloc+0x336/0x440 [ 2362.536635] should_failslab+0x5/0x20 [ 2362.537437] kmem_cache_alloc+0x5b/0x310 [ 2362.538301] xas_alloc+0x336/0x440 [ 2362.539059] xas_create+0x34a/0x10d0 [ 2362.539850] ? kernel_text_address+0xf2/0x120 [ 2362.540814] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2362.541928] xas_store+0x8c/0x1c40 [ 2362.542698] __xa_store+0x164/0x2d0 [ 2362.543460] ? xa_delete_node+0x280/0x280 [ 2362.544355] ? trace_hardirqs_on+0x5b/0x180 [ 2362.545274] xa_store+0x31/0x50 [ 2362.545978] __io_uring_add_tctx_node+0x1cf/0x520 [ 2362.547015] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2362.548125] ? alloc_fd+0x2e7/0x670 [ 2362.548905] io_uring_setup+0x1fbb/0x2980 [ 2362.549789] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.550866] ? wait_for_completion_io+0x270/0x270 [ 2362.551911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.553022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.554113] do_syscall_64+0x33/0x40 [ 2362.554901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.556002] RIP: 0033:0x7fb414601b19 [ 2362.556793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.561105] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.562726] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2362.564258] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2362.565772] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2362.567284] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2362.568800] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2377.521006] FAULT_INJECTION: forcing a failure. [ 2377.521006] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.523823] CPU: 0 PID: 29644 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2377.524271] __nla_validate_parse: 2 callbacks suppressed [ 2377.524288] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2377.525403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.525410] Call Trace: [ 2377.525437] dump_stack+0x107/0x167 [ 2377.525469] should_fail.cold+0x5/0xa [ 2377.532492] ? create_object.isra.0+0x3a/0xa20 10:55:34 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:55:34 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) 10:55:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x7800}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2377.533524] should_failslab+0x5/0x20 [ 2377.534572] kmem_cache_alloc+0x5b/0x310 [ 2377.535514] ? mark_held_locks+0x9e/0xe0 [ 2377.536423] create_object.isra.0+0x3a/0xa20 [ 2377.537402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.538538] kmem_cache_alloc+0x159/0x310 [ 2377.539474] xas_alloc+0x336/0x440 [ 2377.540271] xas_create+0x34a/0x10d0 [ 2377.541114] ? kernel_text_address+0xf2/0x120 [ 2377.542127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2377.543303] xas_store+0x8c/0x1c40 [ 2377.544105] __xa_store+0x164/0x2d0 [ 2377.544918] ? xa_delete_node+0x280/0x280 [ 2377.545844] ? trace_hardirqs_on+0x5b/0x180 [ 2377.546814] xa_store+0x31/0x50 [ 2377.547553] __io_uring_add_tctx_node+0x1cf/0x520 [ 2377.548630] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2377.549771] ? alloc_fd+0x2e7/0x670 [ 2377.550593] io_uring_setup+0x1fbb/0x2980 [ 2377.551522] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2377.552630] ? wait_for_completion_io+0x270/0x270 [ 2377.553711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.554869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.556001] do_syscall_64+0x33/0x40 [ 2377.556817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.557941] RIP: 0033:0x7fb414601b19 [ 2377.558773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.562551] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2377.564151] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2377.565598] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2377.567053] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2377.568509] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2377.569958] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2377.592791] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:55:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x9154}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2377.617837] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2377.622976] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2377.632775] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2377.635306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2377.649729] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:55:34 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:55:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:55:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2377.815986] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:34 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) [ 2377.829755] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:55:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2d400, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2377.880685] FAULT_INJECTION: forcing a failure. [ 2377.880685] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.882550] CPU: 1 PID: 30172 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2377.883618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.884901] Call Trace: [ 2377.885316] dump_stack+0x107/0x167 [ 2377.885885] should_fail.cold+0x5/0xa [ 2377.886472] ? xas_alloc+0x336/0x440 [ 2377.887070] should_failslab+0x5/0x20 [ 2377.887639] kmem_cache_alloc+0x5b/0x310 [ 2377.888274] xas_alloc+0x336/0x440 [ 2377.888832] xas_create+0x34a/0x10d0 [ 2377.889426] ? kernel_text_address+0xf2/0x120 [ 2377.890132] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2377.890956] xas_store+0x8c/0x1c40 [ 2377.891525] __xa_store+0x164/0x2d0 [ 2377.892098] ? xa_delete_node+0x280/0x280 [ 2377.892748] ? trace_hardirqs_on+0x5b/0x180 [ 2377.893409] xa_store+0x31/0x50 [ 2377.893925] __io_uring_add_tctx_node+0x1cf/0x520 [ 2377.894698] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2377.895504] ? alloc_fd+0x2e7/0x670 [ 2377.896061] io_uring_setup+0x1fbb/0x2980 [ 2377.896711] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2377.897473] ? wait_for_completion_io+0x270/0x270 [ 2377.898236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.899023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.899783] do_syscall_64+0x33/0x40 [ 2377.900361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.901138] RIP: 0033:0x7fb414601b19 [ 2377.901697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.904437] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2377.905559] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2377.906643] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2377.907724] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2377.908789] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2377.909848] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2377.922693] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:55:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:55:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2392.771893] __nla_validate_parse: 3 callbacks suppressed [ 2392.771901] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2392.775345] FAULT_INJECTION: forcing a failure. [ 2392.775345] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.777095] CPU: 1 PID: 30497 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2392.778184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.779496] Call Trace: [ 2392.779912] dump_stack+0x107/0x167 [ 2392.780487] should_fail.cold+0x5/0xa [ 2392.781097] ? create_object.isra.0+0x3a/0xa20 [ 2392.781828] should_failslab+0x5/0x20 [ 2392.782419] kmem_cache_alloc+0x5b/0x310 [ 2392.783060] ? mark_held_locks+0x9e/0xe0 [ 2392.783686] create_object.isra.0+0x3a/0xa20 [ 2392.784360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2392.785164] kmem_cache_alloc+0x159/0x310 10:55:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) 10:55:49 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xca03}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2392.786067] xas_alloc+0x336/0x440 [ 2392.786791] xas_create+0x34a/0x10d0 [ 2392.787384] ? kernel_text_address+0xf2/0x120 [ 2392.788077] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2392.788912] xas_store+0x8c/0x1c40 [ 2392.789471] __xa_store+0x164/0x2d0 [ 2392.790049] ? xa_delete_node+0x280/0x280 [ 2392.790703] ? trace_hardirqs_on+0x5b/0x180 [ 2392.791398] xa_store+0x31/0x50 [ 2392.791920] __io_uring_add_tctx_node+0x1cf/0x520 [ 2392.792691] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2392.793517] ? alloc_fd+0x2e7/0x670 [ 2392.794101] io_uring_setup+0x1fbb/0x2980 [ 2392.794761] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2392.795561] ? wait_for_completion_io+0x270/0x270 [ 2392.796330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2392.797144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2392.797789] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2392.797964] do_syscall_64+0x33/0x40 [ 2392.800782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2392.801581] RIP: 0033:0x7fb414601b19 [ 2392.802173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.802585] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2392.805066] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2392.805081] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2392.805088] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2392.805095] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2392.805102] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2392.805119] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2392.815935] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2392.818720] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2392.820971] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:55:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2392.872576] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:49 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:55:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2392.965291] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2392.975202] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:55:49 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 10:55:49 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:55:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2393.040502] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:55:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2393.050666] FAULT_INJECTION: forcing a failure. [ 2393.050666] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.052311] CPU: 1 PID: 30822 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2393.053234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.054352] Call Trace: [ 2393.054716] dump_stack+0x107/0x167 [ 2393.055222] should_fail.cold+0x5/0xa [ 2393.055737] ? xas_alloc+0x336/0x440 [ 2393.056246] should_failslab+0x5/0x20 [ 2393.056757] kmem_cache_alloc+0x5b/0x310 [ 2393.057305] xas_alloc+0x336/0x440 [ 2393.057788] xas_create+0x34a/0x10d0 [ 2393.058302] ? kernel_text_address+0xf2/0x120 [ 2393.058915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2393.059622] xas_store+0x8c/0x1c40 [ 2393.060107] __xa_store+0x164/0x2d0 [ 2393.060596] ? xa_delete_node+0x280/0x280 [ 2393.061158] ? trace_hardirqs_on+0x5b/0x180 [ 2393.061744] xa_store+0x31/0x50 [ 2393.062200] __io_uring_add_tctx_node+0x1cf/0x520 [ 2393.062857] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2393.063563] ? alloc_fd+0x2e7/0x670 [ 2393.064071] io_uring_setup+0x1fbb/0x2980 [ 2393.064629] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2393.065303] ? wait_for_completion_io+0x270/0x270 [ 2393.065970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.066696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.067398] do_syscall_64+0x33/0x40 [ 2393.067895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.068582] RIP: 0033:0x7fb414601b19 [ 2393.069076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.071567] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2393.072591] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2393.073545] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2393.074512] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2393.075465] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2393.076427] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:50 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:04 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2407.289506] __nla_validate_parse: 5 callbacks suppressed [ 2407.289513] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2407.298503] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2407.314695] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2407.325951] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2407.329764] FAULT_INJECTION: forcing a failure. [ 2407.329764] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.331818] CPU: 0 PID: 31196 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2407.332693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.333762] Call Trace: [ 2407.334105] dump_stack+0x107/0x167 [ 2407.334567] should_fail.cold+0x5/0xa [ 2407.335063] ? create_object.isra.0+0x3a/0xa20 [ 2407.335655] should_failslab+0x5/0x20 [ 2407.336145] kmem_cache_alloc+0x5b/0x310 [ 2407.336684] ? mark_held_locks+0x9e/0xe0 [ 2407.337268] create_object.isra.0+0x3a/0xa20 [ 2407.337829] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.338475] kmem_cache_alloc+0x159/0x310 [ 2407.339046] xas_alloc+0x336/0x440 [ 2407.339500] xas_create+0x34a/0x10d0 [ 2407.339991] ? kernel_text_address+0xf2/0x120 [ 2407.340555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2407.341216] xas_store+0x8c/0x1c40 [ 2407.341672] __xa_store+0x164/0x2d0 [ 2407.342135] ? xa_delete_node+0x280/0x280 [ 2407.342665] ? trace_hardirqs_on+0x5b/0x180 [ 2407.343227] xa_store+0x31/0x50 [ 2407.343654] __io_uring_add_tctx_node+0x1cf/0x520 [ 2407.344269] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2407.344952] ? alloc_fd+0x2e7/0x670 [ 2407.345422] io_uring_setup+0x1fbb/0x2980 [ 2407.345957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2407.346599] ? wait_for_completion_io+0x270/0x270 [ 2407.347223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.347885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.348540] do_syscall_64+0x33/0x40 [ 2407.349004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.349644] RIP: 0033:0x7fb414601b19 [ 2407.350115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.352577] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2407.353551] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2407.354455] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2407.355366] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2407.356272] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2407.357173] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:04 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) 10:56:04 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2407.360968] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:56:04 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2407.400238] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:56:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2407.436847] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:56:04 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2407.492709] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:56:04 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2407.523038] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2407.546026] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:56:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:19 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 10:56:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2422.319812] __nla_validate_parse: 1 callbacks suppressed [ 2422.319820] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:56:19 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x5, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2422.346728] FAULT_INJECTION: forcing a failure. [ 2422.346728] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.349327] CPU: 1 PID: 31692 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2422.350889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.352782] Call Trace: [ 2422.353381] dump_stack+0x107/0x167 [ 2422.354209] should_fail.cold+0x5/0xa [ 2422.355073] ? xas_alloc+0x336/0x440 [ 2422.355931] should_failslab+0x5/0x20 [ 2422.356790] kmem_cache_alloc+0x5b/0x310 [ 2422.357715] xas_alloc+0x336/0x440 [ 2422.358526] xas_create+0x34a/0x10d0 [ 2422.359393] ? kernel_text_address+0xf2/0x120 [ 2422.360410] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2422.361594] xas_store+0x8c/0x1c40 [ 2422.362413] __xa_store+0x164/0x2d0 [ 2422.363245] ? xa_delete_node+0x280/0x280 [ 2422.364186] ? trace_hardirqs_on+0x5b/0x180 [ 2422.365168] xa_store+0x31/0x50 [ 2422.365916] __io_uring_add_tctx_node+0x1cf/0x520 [ 2422.367019] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2422.368206] ? alloc_fd+0x2e7/0x670 [ 2422.369038] io_uring_setup+0x1fbb/0x2980 [ 2422.369988] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2422.371127] ? wait_for_completion_io+0x270/0x270 [ 2422.371778] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2422.372241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.374551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.375721] do_syscall_64+0x33/0x40 [ 2422.376558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.377718] RIP: 0033:0x7fb414601b19 [ 2422.378709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.383270] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2422.385071] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2422.386683] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2422.388302] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2422.389922] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2422.391537] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2422.393839] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2422.411097] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2422.414444] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2422.418741] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2438.019769] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:56:34 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x18}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:34 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) 10:56:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x6, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevma', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2438.024347] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2438.040972] FAULT_INJECTION: forcing a failure. [ 2438.040972] name failslab, interval 1, probability 0, space 0, times 0 [ 2438.043467] CPU: 0 PID: 32019 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2438.044928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2438.046677] Call Trace: [ 2438.047230] dump_stack+0x107/0x167 [ 2438.048013] should_fail.cold+0x5/0xa [ 2438.048808] ? create_object.isra.0+0x3a/0xa20 [ 2438.049770] should_failslab+0x5/0x20 [ 2438.050585] kmem_cache_alloc+0x5b/0x310 [ 2438.051442] ? mark_held_locks+0x9e/0xe0 [ 2438.052297] create_object.isra.0+0x3a/0xa20 [ 2438.053221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2438.054272] kmem_cache_alloc+0x159/0x310 [ 2438.055123] xas_alloc+0x336/0x440 [ 2438.055867] xas_create+0x34a/0x10d0 [ 2438.056637] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2438.057681] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2438.058778] xas_store+0x8c/0x1c40 [ 2438.059556] __xa_store+0x164/0x2d0 [ 2438.060324] ? xa_delete_node+0x280/0x280 [ 2438.061202] ? trace_hardirqs_on+0x5b/0x180 [ 2438.062117] xa_store+0x31/0x50 [ 2438.062811] __io_uring_add_tctx_node+0x1cf/0x520 [ 2438.063790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2438.063835] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2438.065919] ? alloc_fd+0x2e7/0x670 [ 2438.066701] io_uring_setup+0x1fbb/0x2980 [ 2438.067583] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2438.068639] ? wait_for_completion_io+0x270/0x270 [ 2438.069666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2438.070957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2438.072058] do_syscall_64+0x33/0x40 [ 2438.072352] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2438.072846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2438.074868] RIP: 0033:0x7fb414601b19 [ 2438.075665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2438.079548] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2438.081139] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2438.082632] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2438.084131] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2438.085617] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2438.087114] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:35 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1e}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:35 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2438.110759] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:56:35 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:35 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2438.171863] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2438.198994] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:56:35 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:35 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) 10:56:35 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x24}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2438.217611] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:56:35 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevma', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2438.247073] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2438.247434] FAULT_INJECTION: forcing a failure. [ 2438.247434] name failslab, interval 1, probability 0, space 0, times 0 [ 2438.250371] CPU: 1 PID: 32452 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2438.251163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2438.252122] Call Trace: [ 2438.252438] dump_stack+0x107/0x167 [ 2438.252873] should_fail.cold+0x5/0xa [ 2438.253312] ? create_object.isra.0+0x3a/0xa20 [ 2438.253842] should_failslab+0x5/0x20 [ 2438.254283] kmem_cache_alloc+0x5b/0x310 [ 2438.254755] ? mark_held_locks+0x9e/0xe0 [ 2438.255220] create_object.isra.0+0x3a/0xa20 [ 2438.255732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2438.256310] kmem_cache_alloc+0x159/0x310 [ 2438.256784] xas_alloc+0x336/0x440 [ 2438.257200] xas_create+0x34a/0x10d0 [ 2438.257631] ? kernel_text_address+0xf2/0x120 [ 2438.258147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2438.258752] xas_store+0x8c/0x1c40 [ 2438.259177] __xa_store+0x164/0x2d0 [ 2438.259620] ? xa_delete_node+0x280/0x280 [ 2438.260103] ? trace_hardirqs_on+0x5b/0x180 [ 2438.260595] xa_store+0x31/0x50 [ 2438.260973] __io_uring_add_tctx_node+0x1cf/0x520 [ 2438.261521] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2438.262117] ? alloc_fd+0x2e7/0x670 [ 2438.262535] io_uring_setup+0x1fbb/0x2980 [ 2438.263010] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2438.263597] ? wait_for_completion_io+0x270/0x270 [ 2438.264159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2438.264771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2438.265360] do_syscall_64+0x33/0x40 [ 2438.265780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2438.266362] RIP: 0033:0x7fb414601b19 [ 2438.266786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2438.268898] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2438.269775] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2438.270589] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2438.271414] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2438.272224] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2438.273039] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:35 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2438.313641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:56:50 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:50 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0xc, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:50 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 10:56:50 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevma', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2453.694987] __nla_validate_parse: 1 callbacks suppressed [ 2453.695017] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2453.711783] FAULT_INJECTION: forcing a failure. [ 2453.711783] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.714230] CPU: 0 PID: 32653 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2453.715706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2453.717453] Call Trace: [ 2453.718015] dump_stack+0x107/0x167 [ 2453.718787] should_fail.cold+0x5/0xa [ 2453.719609] ? create_object.isra.0+0x3a/0xa20 [ 2453.720571] should_failslab+0x5/0x20 [ 2453.721373] kmem_cache_alloc+0x5b/0x310 [ 2453.721401] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2453.722228] ? mark_held_locks+0x9e/0xe0 [ 2453.722251] create_object.isra.0+0x3a/0xa20 [ 2453.722274] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2453.724720] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2453.724981] kmem_cache_alloc+0x159/0x310 [ 2453.728988] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2453.729577] xas_alloc+0x336/0x440 [ 2453.729599] xas_create+0x34a/0x10d0 [ 2453.729625] ? kernel_text_address+0xf2/0x120 [ 2453.733811] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2453.734917] xas_store+0x8c/0x1c40 [ 2453.735702] __xa_store+0x164/0x2d0 [ 2453.736472] ? xa_delete_node+0x280/0x280 [ 2453.737355] ? trace_hardirqs_on+0x5b/0x180 [ 2453.738274] xa_store+0x31/0x50 [ 2453.738976] __io_uring_add_tctx_node+0x1cf/0x520 [ 2453.740002] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2453.741100] ? alloc_fd+0x2e7/0x670 [ 2453.741879] io_uring_setup+0x1fbb/0x2980 [ 2453.742759] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2453.743832] ? wait_for_completion_io+0x270/0x270 [ 2453.744874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2453.745985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.747082] do_syscall_64+0x33/0x40 [ 2453.747876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2453.748956] RIP: 0033:0x7fb414601b19 [ 2453.749743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.753633] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2453.755244] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2453.756716] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2453.758229] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2453.759760] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2453.761277] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:50 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x30}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2453.821438] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2453.823580] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:56:50 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) 10:56:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfl', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2453.924208] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:56:50 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:50 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2453.992247] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2454.005532] FAULT_INJECTION: forcing a failure. [ 2454.005532] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.008115] CPU: 1 PID: 32963 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2454.009589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.011346] Call Trace: [ 2454.011918] dump_stack+0x107/0x167 [ 2454.012687] should_fail.cold+0x5/0xa [ 2454.013500] ? xas_alloc+0x336/0x440 [ 2454.014295] should_failslab+0x5/0x20 [ 2454.015098] kmem_cache_alloc+0x5b/0x310 [ 2454.015971] xas_alloc+0x336/0x440 [ 2454.016727] xas_create+0x34a/0x10d0 [ 2454.017521] ? kernel_text_address+0xf2/0x120 [ 2454.018493] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2454.019613] xas_store+0x8c/0x1c40 [ 2454.019628] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2454.022145] __xa_store+0x164/0x2d0 [ 2454.022915] ? xa_delete_node+0x280/0x280 [ 2454.023884] ? trace_hardirqs_on+0x5b/0x180 [ 2454.024872] xa_store+0x31/0x50 [ 2454.025578] __io_uring_add_tctx_node+0x1cf/0x520 [ 2454.026606] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2454.027730] ? alloc_fd+0x2e7/0x670 [ 2454.028528] io_uring_setup+0x1fbb/0x2980 [ 2454.029421] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2454.030499] ? wait_for_completion_io+0x270/0x270 [ 2454.031550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2454.032655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2454.033745] do_syscall_64+0x33/0x40 [ 2454.034536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.035632] RIP: 0033:0x7fb414601b19 [ 2454.036419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.040344] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2454.041951] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 10:56:50 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2454.043472] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2454.045262] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2454.046781] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2454.048308] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2454.071234] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:56:51 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3c}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:51 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfl', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:56:51 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x42}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:56:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:51 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x12, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:51 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) 10:56:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfl', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2454.392744] FAULT_INJECTION: forcing a failure. [ 2454.392744] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.395192] CPU: 0 PID: 33310 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2454.396661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.398404] Call Trace: [ 2454.398966] dump_stack+0x107/0x167 [ 2454.399741] should_fail.cold+0x5/0xa [ 2454.400548] ? create_object.isra.0+0x3a/0xa20 [ 2454.401510] should_failslab+0x5/0x20 [ 2454.402320] kmem_cache_alloc+0x5b/0x310 [ 2454.403175] ? mark_held_locks+0x9e/0xe0 [ 2454.404051] create_object.isra.0+0x3a/0xa20 [ 2454.404974] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2454.406033] kmem_cache_alloc+0x159/0x310 [ 2454.406915] xas_alloc+0x336/0x440 [ 2454.407682] xas_create+0x34a/0x10d0 [ 2454.408472] ? kernel_text_address+0xf2/0x120 [ 2454.409426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2454.410530] xas_store+0x8c/0x1c40 [ 2454.411291] __xa_store+0x164/0x2d0 [ 2454.412066] ? xa_delete_node+0x280/0x280 [ 2454.412946] ? trace_hardirqs_on+0x5b/0x180 [ 2454.413859] xa_store+0x31/0x50 [ 2454.414555] __io_uring_add_tctx_node+0x1cf/0x520 [ 2454.415577] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2454.416678] ? alloc_fd+0x2e7/0x670 [ 2454.417453] io_uring_setup+0x1fbb/0x2980 [ 2454.418333] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2454.419401] ? wait_for_completion_io+0x270/0x270 [ 2454.420456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2454.421562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2454.422658] do_syscall_64+0x33/0x40 [ 2454.423444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.424532] RIP: 0033:0x7fb414601b19 [ 2454.425316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.429203] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2454.430815] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2454.432321] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2454.433826] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2454.435341] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2454.436856] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:04 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2467.793154] __nla_validate_parse: 9 callbacks suppressed [ 2467.793162] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2467.793689] FAULT_INJECTION: forcing a failure. [ 2467.793689] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.797210] CPU: 0 PID: 33422 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2467.798328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2467.799672] Call Trace: [ 2467.800105] dump_stack+0x107/0x167 [ 2467.800691] should_fail.cold+0x5/0xa [ 2467.801311] ? xas_alloc+0x336/0x440 [ 2467.801901] should_failslab+0x5/0x20 [ 2467.802510] kmem_cache_alloc+0x5b/0x310 [ 2467.803153] xas_alloc+0x336/0x440 [ 2467.803754] xas_create+0x34a/0x10d0 [ 2467.804366] ? kernel_text_address+0xf2/0x120 [ 2467.805096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2467.805942] xas_store+0x8c/0x1c40 [ 2467.806547] __xa_store+0x164/0x2d0 [ 2467.807124] ? xa_delete_node+0x280/0x280 [ 2467.807799] ? trace_hardirqs_on+0x5b/0x180 [ 2467.807854] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2467.808490] xa_store+0x31/0x50 [ 2467.808507] __io_uring_add_tctx_node+0x1cf/0x520 [ 2467.808525] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2467.811720] ? alloc_fd+0x2e7/0x670 [ 2467.812325] io_uring_setup+0x1fbb/0x2980 [ 2467.812998] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2467.813799] ? wait_for_completion_io+0x270/0x270 [ 2467.814568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2467.815412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.816247] do_syscall_64+0x33/0x40 [ 2467.816830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2467.817666] RIP: 0033:0x7fb414601b19 [ 2467.818261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.821442] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2467.822639] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2467.823782] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2467.825079] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2467.825753] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2467.826210] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2467.826219] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:04 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x18, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:04 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 10:57:04 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltui', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) 10:57:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x60}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:04 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2467.837551] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2467.860548] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2467.864122] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:57:04 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 10:57:04 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x1e, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:04 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) 10:57:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:04 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x121}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2467.932370] FAULT_INJECTION: forcing a failure. [ 2467.932370] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.933819] CPU: 1 PID: 33724 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2467.934696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2467.935747] Call Trace: [ 2467.936086] dump_stack+0x107/0x167 [ 2467.936541] should_fail.cold+0x5/0xa [ 2467.937021] ? create_object.isra.0+0x3a/0xa20 [ 2467.937592] should_failslab+0x5/0x20 [ 2467.938066] kmem_cache_alloc+0x5b/0x310 [ 2467.938572] ? mark_held_locks+0x9e/0xe0 [ 2467.939089] create_object.isra.0+0x3a/0xa20 [ 2467.939640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2467.940286] kmem_cache_alloc+0x159/0x310 [ 2467.940807] xas_alloc+0x336/0x440 [ 2467.941259] xas_create+0x34a/0x10d0 [ 2467.941734] ? kernel_text_address+0xf2/0x120 [ 2467.942298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2467.942949] xas_store+0x8c/0x1c40 [ 2467.943399] __xa_store+0x164/0x2d0 [ 2467.943862] ? xa_delete_node+0x280/0x280 [ 2467.944381] ? trace_hardirqs_on+0x5b/0x180 [ 2467.944935] xa_store+0x31/0x50 [ 2467.945352] __io_uring_add_tctx_node+0x1cf/0x520 [ 2467.945951] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2467.946603] ? alloc_fd+0x2e7/0x670 [ 2467.947061] io_uring_setup+0x1fbb/0x2980 [ 2467.947580] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2467.948224] ? wait_for_completion_io+0x270/0x270 [ 2467.948836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2467.949496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.950135] do_syscall_64+0x33/0x40 [ 2467.950600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2467.951247] RIP: 0033:0x7fb414601b19 [ 2467.951724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.954026] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2467.954980] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2467.955885] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2467.956783] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2467.957671] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2467.958554] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2467.974126] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2467.994194] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2468.003008] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2481.866689] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:57:18 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:18 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltui', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x24, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:18 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 10:57:18 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x300}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:18 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) 10:57:18 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x8040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2481.876215] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2481.878660] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2481.882991] FAULT_INJECTION: forcing a failure. [ 2481.882991] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.885912] CPU: 1 PID: 33865 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2481.887656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.889754] Call Trace: [ 2481.890423] dump_stack+0x107/0x167 [ 2481.891344] should_fail.cold+0x5/0xa [ 2481.892326] ? xas_alloc+0x336/0x440 [ 2481.893269] should_failslab+0x5/0x20 [ 2481.894226] kmem_cache_alloc+0x5b/0x310 [ 2481.895253] xas_alloc+0x336/0x440 [ 2481.896155] xas_create+0x34a/0x10d0 [ 2481.897099] ? kernel_text_address+0xf2/0x120 [ 2481.898234] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2481.899555] xas_store+0x8c/0x1c40 [ 2481.900472] __xa_store+0x164/0x2d0 [ 2481.901393] ? xa_delete_node+0x280/0x280 [ 2481.902442] ? trace_hardirqs_on+0x5b/0x180 [ 2481.903532] xa_store+0x31/0x50 [ 2481.904368] __io_uring_add_tctx_node+0x1cf/0x520 [ 2481.905585] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2481.906884] ? alloc_fd+0x2e7/0x670 [ 2481.907815] io_uring_setup+0x1fbb/0x2980 [ 2481.908880] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2481.910154] ? wait_for_completion_io+0x270/0x270 [ 2481.911398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.912610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.913697] do_syscall_64+0x33/0x40 [ 2481.914480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.915555] RIP: 0033:0x7fb414601b19 [ 2481.916345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.918173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2481.920225] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2481.920245] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2481.920256] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2481.920272] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2481.927385] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2481.928890] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2481.933331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2481.938387] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:57:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:32 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe0a0000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) [ 2495.591315] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2495.600032] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2495.604378] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:57:32 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x600}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:32 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2495.606413] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:57:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x78000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2495.615784] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2495.626852] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:57:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltui', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2495.641220] FAULT_INJECTION: forcing a failure. [ 2495.641220] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.643829] CPU: 1 PID: 34186 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2495.645398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.647267] Call Trace: [ 2495.647864] dump_stack+0x107/0x167 [ 2495.648695] should_fail.cold+0x5/0xa [ 2495.649557] ? create_object.isra.0+0x3a/0xa20 [ 2495.650588] should_failslab+0x5/0x20 [ 2495.651449] kmem_cache_alloc+0x5b/0x310 [ 2495.652452] ? mark_held_locks+0x9e/0xe0 [ 2495.653470] create_object.isra.0+0x3a/0xa20 [ 2495.654454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2495.655605] kmem_cache_alloc+0x159/0x310 [ 2495.656555] xas_alloc+0x336/0x440 [ 2495.657357] xas_create+0x34a/0x10d0 [ 2495.658212] ? kernel_text_address+0xf2/0x120 [ 2495.659230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2495.660414] xas_store+0x8c/0x1c40 [ 2495.661225] __xa_store+0x164/0x2d0 [ 2495.662045] ? xa_delete_node+0x280/0x280 [ 2495.662984] ? trace_hardirqs_on+0x5b/0x180 [ 2495.663957] xa_store+0x31/0x50 [ 2495.664710] __io_uring_add_tctx_node+0x1cf/0x520 [ 2495.665797] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2495.666970] ? alloc_fd+0x2e7/0x670 [ 2495.667801] io_uring_setup+0x1fbb/0x2980 [ 2495.668749] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2495.669883] ? wait_for_completion_io+0x270/0x270 [ 2495.670990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.672174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.673334] do_syscall_64+0x33/0x40 [ 2495.674168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.675318] RIP: 0033:0x7fb414601b19 [ 2495.676159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.680300] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2495.682012] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2495.683610] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2495.685217] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2495.686812] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2495.688420] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xc00}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x30, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:32 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2495.769791] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2495.775141] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2495.784049] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:57:32 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2495.807959] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:57:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x36, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) 10:57:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r3, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:32 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:32 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1800}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbe530000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2496.016871] FAULT_INJECTION: forcing a failure. [ 2496.016871] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.019489] CPU: 1 PID: 34945 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2496.021048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.022898] Call Trace: [ 2496.023495] dump_stack+0x107/0x167 [ 2496.024332] should_fail.cold+0x5/0xa [ 2496.025194] ? xas_alloc+0x336/0x440 [ 2496.026031] should_failslab+0x5/0x20 [ 2496.026895] kmem_cache_alloc+0x5b/0x310 [ 2496.027816] xas_alloc+0x336/0x440 [ 2496.028631] xas_create+0x34a/0x10d0 [ 2496.029477] ? kernel_text_address+0xf2/0x120 [ 2496.030491] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2496.031671] xas_store+0x8c/0x1c40 [ 2496.032506] __xa_store+0x164/0x2d0 [ 2496.033330] ? xa_delete_node+0x280/0x280 [ 2496.034272] ? trace_hardirqs_on+0x5b/0x180 [ 2496.035254] xa_store+0x31/0x50 [ 2496.036008] __io_uring_add_tctx_node+0x1cf/0x520 [ 2496.037103] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2496.038282] ? alloc_fd+0x2e7/0x670 [ 2496.039122] io_uring_setup+0x1fbb/0x2980 [ 2496.040071] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2496.041210] ? wait_for_completion_io+0x270/0x270 [ 2496.042324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2496.043507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2496.044680] do_syscall_64+0x33/0x40 10:57:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r3, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2496.045525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2496.046916] RIP: 0033:0x7fb414601b19 [ 2496.047758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.051910] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2496.053632] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2496.055236] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2496.056845] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2496.058446] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2496.060075] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:33 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1e00}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x3c, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x42, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:46 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) [ 2510.014005] __nla_validate_parse: 9 callbacks suppressed [ 2510.014016] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:57:46 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2510.025738] FAULT_INJECTION: forcing a failure. [ 2510.025738] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.028158] CPU: 1 PID: 35342 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2510.029617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.031365] Call Trace: [ 2510.031921] dump_stack+0x107/0x167 [ 2510.032695] should_fail.cold+0x5/0xa [ 2510.033496] ? create_object.isra.0+0x3a/0xa20 [ 2510.034453] should_failslab+0x5/0x20 [ 2510.035254] kmem_cache_alloc+0x5b/0x310 [ 2510.036112] ? mark_held_locks+0x9e/0xe0 [ 2510.036986] create_object.isra.0+0x3a/0xa20 [ 2510.037906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2510.038978] kmem_cache_alloc+0x159/0x310 [ 2510.039848] xas_alloc+0x336/0x440 [ 2510.040611] xas_create+0x34a/0x10d0 [ 2510.041402] ? kernel_text_address+0xf2/0x120 [ 2510.042342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2510.043446] xas_store+0x8c/0x1c40 [ 2510.044217] __xa_store+0x164/0x2d0 [ 2510.044982] ? xa_delete_node+0x280/0x280 [ 2510.045862] ? trace_hardirqs_on+0x5b/0x180 [ 2510.046774] xa_store+0x31/0x50 [ 2510.047474] __io_uring_add_tctx_node+0x1cf/0x520 [ 2510.048489] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2510.049584] ? alloc_fd+0x2e7/0x670 [ 2510.050360] io_uring_setup+0x1fbb/0x2980 [ 2510.051235] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2510.052302] ? wait_for_completion_io+0x270/0x270 [ 2510.053341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.054441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.055529] do_syscall_64+0x33/0x40 [ 2510.056191] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2510.056334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.059179] RIP: 0033:0x7fb414601b19 [ 2510.059465] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2510.059965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.065646] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2510.067560] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2510.068011] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2510.069070] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2510.069081] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2510.069091] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2510.069101] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r3, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:46 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xcc030000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:46 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2510.084385] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2510.087810] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:57:47 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2101}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:57:47 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:57:47 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:57:47 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x60, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2510.243958] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2510.260627] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:57:47 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2510.264810] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:57:47 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe00c0000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2510.337555] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:00 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2400}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2523.400713] __nla_validate_parse: 1 callbacks suppressed [ 2523.400721] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2523.408906] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2523.415847] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2523.419117] FAULT_INJECTION: forcing a failure. [ 2523.419117] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.420602] CPU: 1 PID: 35886 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2523.421486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.422547] Call Trace: [ 2523.422893] dump_stack+0x107/0x167 [ 2523.423359] should_fail.cold+0x5/0xa [ 2523.423847] ? xas_alloc+0x336/0x440 [ 2523.424337] should_failslab+0x5/0x20 [ 2523.424827] kmem_cache_alloc+0x5b/0x310 [ 2523.425352] xas_alloc+0x336/0x440 [ 2523.425814] xas_create+0x34a/0x10d0 [ 2523.426301] ? kernel_text_address+0xf2/0x120 [ 2523.426876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.427552] xas_store+0x8c/0x1c40 [ 2523.428023] __xa_store+0x164/0x2d0 [ 2523.428499] ? xa_delete_node+0x280/0x280 [ 2523.429035] ? trace_hardirqs_on+0x5b/0x180 [ 2523.429594] xa_store+0x31/0x50 [ 2523.430025] __io_uring_add_tctx_node+0x1cf/0x520 [ 2523.430648] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2523.431322] ? alloc_fd+0x2e7/0x670 [ 2523.431797] io_uring_setup+0x1fbb/0x2980 [ 2523.432345] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2523.432989] ? wait_for_completion_io+0x270/0x270 [ 2523.433618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.434290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.434445] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2523.434959] do_syscall_64+0x33/0x40 [ 2523.437176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.437836] RIP: 0033:0x7fb414601b19 [ 2523.438571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.440319] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2523.440937] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2523.443634] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2523.444543] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2523.445448] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2523.446355] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2523.447258] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2523.448457] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2523.454865] FAULT_INJECTION: forcing a failure. [ 2523.454865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2523.457442] CPU: 0 PID: 35889 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 2523.458887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.460643] Call Trace: [ 2523.461198] dump_stack+0x107/0x167 [ 2523.461958] should_fail.cold+0x5/0xa [ 2523.462767] _copy_from_user+0x2e/0x1b0 [ 2523.463595] io_uring_setup+0x9b/0x2980 [ 2523.464441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2523.465449] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2523.466502] ? wait_for_completion_io+0x270/0x270 [ 2523.467520] ? rcu_read_lock_any_held+0x75/0xa0 [ 2523.468509] ? vfs_write+0x354/0xb10 [ 2523.469290] ? fput_many+0x2f/0x1a0 [ 2523.470048] ? ksys_write+0x1a9/0x260 [ 2523.470845] ? __ia32_sys_read+0xb0/0xb0 [ 2523.471700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.472806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.473892] do_syscall_64+0x33/0x40 [ 2523.474662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.475734] RIP: 0033:0x7f369d158b19 [ 2523.476514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:58:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x121, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:00 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) [ 2523.480619] RSP: 002b:00007f369a6ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2523.482208] RAX: ffffffffffffffda RBX: 00007f369d26bf60 RCX: 00007f369d158b19 [ 2523.483691] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2523.485189] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2523.486665] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2523.488141] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:00 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 10:58:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2523.510388] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2523.527625] FAULT_INJECTION: forcing a failure. [ 2523.527625] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.529135] CPU: 1 PID: 35937 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2523.529990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.531005] Call Trace: [ 2523.531335] dump_stack+0x107/0x167 [ 2523.531787] should_fail.cold+0x5/0xa [ 2523.532263] ? create_object.isra.0+0x3a/0xa20 [ 2523.532838] should_failslab+0x5/0x20 [ 2523.533307] kmem_cache_alloc+0x5b/0x310 [ 2523.533808] ? mark_held_locks+0x9e/0xe0 [ 2523.534316] create_object.isra.0+0x3a/0xa20 [ 2523.534853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2523.535482] kmem_cache_alloc+0x159/0x310 [ 2523.535994] xas_alloc+0x336/0x440 [ 2523.536441] xas_create+0x34a/0x10d0 [ 2523.536903] ? kernel_text_address+0xf2/0x120 [ 2523.537456] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.538099] xas_store+0x8c/0x1c40 [ 2523.538546] __xa_store+0x164/0x2d0 [ 2523.538996] ? xa_delete_node+0x280/0x280 [ 2523.539514] ? trace_hardirqs_on+0x5b/0x180 [ 2523.540049] xa_store+0x31/0x50 [ 2523.540464] __io_uring_add_tctx_node+0x1cf/0x520 [ 2523.541055] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2523.541696] ? alloc_fd+0x2e7/0x670 [ 2523.542148] io_uring_setup+0x1fbb/0x2980 [ 2523.542656] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2523.543283] ? wait_for_completion_io+0x270/0x270 [ 2523.543888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.544536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.545167] do_syscall_64+0x33/0x40 [ 2523.545622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.546251] RIP: 0033:0x7fb414601b19 [ 2523.546707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.548973] RSP: 002b:00007fb411b77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2523.549905] RAX: ffffffffffffffda RBX: 00007fb414714f60 RCX: 00007fb414601b19 [ 2523.550783] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2523.551652] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2523.552531] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2523.553396] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2a00}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2523.575819] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:58:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:00 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2523.658185] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2523.670278] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:58:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xfeffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 10:58:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x500, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:00 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3600}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2523.745375] FAULT_INJECTION: forcing a failure. [ 2523.745375] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.746926] CPU: 1 PID: 36312 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2523.747726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.748721] Call Trace: [ 2523.749042] dump_stack+0x107/0x167 [ 2523.749476] should_fail.cold+0x5/0xa [ 2523.749921] ? vm_area_dup+0x78/0x290 [ 2523.750363] should_failslab+0x5/0x20 [ 2523.750813] kmem_cache_alloc+0x5b/0x310 [ 2523.751289] vm_area_dup+0x78/0x290 [ 2523.751706] ? lock_release+0x680/0x680 [ 2523.752171] ? mark_lock+0xf5/0x2df0 [ 2523.752618] ? lock_chain_count+0x20/0x20 [ 2523.753111] ? mark_lock+0xf5/0x2df0 [ 2523.753554] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.754163] ? lock_chain_count+0x20/0x20 [ 2523.754652] ? mark_lock+0xf5/0x2df0 [ 2523.755085] ? vm_area_alloc+0x110/0x110 [ 2523.755572] ? __lock_acquire+0x1657/0x5b00 [ 2523.756087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.756718] ? vmacache_find+0x55/0x2a0 [ 2523.757180] __split_vma+0xa8/0x4e0 [ 2523.757616] __do_munmap+0x365/0x1260 [ 2523.758067] ? arch_get_unmapped_area+0x450/0x450 [ 2523.758840] ? lock_release+0x680/0x680 [ 2523.759299] mmap_region+0x7c8/0x1500 [ 2523.759746] do_mmap+0xcdb/0x11e0 [ 2523.760159] vm_mmap_pgoff+0x198/0x1f0 [ 2523.760618] ? randomize_page+0xb0/0xb0 [ 2523.761093] ksys_mmap_pgoff+0x41c/0x560 [ 2523.761564] ? find_mergeable_anon_vma+0x250/0x250 [ 2523.762139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.762751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.763381] do_syscall_64+0x33/0x40 [ 2523.763944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.764668] RIP: 0033:0x7fb414601b62 [ 2523.765090] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2523.767182] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2523.768042] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2523.768860] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2523.769671] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2523.770498] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2523.771428] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:16 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:16 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x78000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:16 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:16 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3c00}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2539.217321] __nla_validate_parse: 3 callbacks suppressed [ 2539.217328] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:58:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:16 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) 10:58:16 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x600, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2539.221234] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2539.230737] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2539.240991] FAULT_INJECTION: forcing a failure. [ 2539.240991] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.242615] CPU: 0 PID: 36644 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2539.243491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.244501] Call Trace: [ 2539.244844] dump_stack+0x107/0x167 [ 2539.245287] should_fail.cold+0x5/0xa [ 2539.245768] ? create_object.isra.0+0x3a/0xa20 [ 2539.246320] should_failslab+0x5/0x20 [ 2539.246797] kmem_cache_alloc+0x5b/0x310 [ 2539.247291] create_object.isra.0+0x3a/0xa20 [ 2539.247857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2539.248475] kmem_cache_alloc+0x159/0x310 [ 2539.249011] vm_area_dup+0x78/0x290 [ 2539.249453] ? lock_release+0x680/0x680 [ 2539.249956] ? mark_lock+0xf5/0x2df0 [ 2539.250408] ? lock_chain_count+0x20/0x20 [ 2539.250941] ? mark_lock+0xf5/0x2df0 [ 2539.251392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2539.251630] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2539.252063] ? lock_chain_count+0x20/0x20 [ 2539.254579] ? mark_lock+0xf5/0x2df0 [ 2539.255030] ? vm_area_alloc+0x110/0x110 [ 2539.255546] ? __lock_acquire+0x1657/0x5b00 [ 2539.256078] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2539.256760] ? vmacache_find+0x55/0x2a0 [ 2539.257237] __split_vma+0xa8/0x4e0 [ 2539.257692] __do_munmap+0x365/0x1260 [ 2539.258175] ? arch_get_unmapped_area+0x450/0x450 [ 2539.258749] ? lock_release+0x680/0x680 [ 2539.259245] mmap_region+0x7c8/0x1500 [ 2539.259709] do_mmap+0xcdb/0x11e0 [ 2539.260147] vm_mmap_pgoff+0x198/0x1f0 [ 2539.260621] ? randomize_page+0xb0/0xb0 [ 2539.261127] ksys_mmap_pgoff+0x41c/0x560 [ 2539.261612] ? find_mergeable_anon_vma+0x250/0x250 [ 2539.262196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.262850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2539.263466] do_syscall_64+0x33/0x40 [ 2539.263929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2539.264550] RIP: 0033:0x7fb414601b62 [ 2539.265012] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2539.267187] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2539.268132] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2539.269023] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2539.269905] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2539.270828] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2539.271715] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2539.279410] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2539.282035] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 10:58:16 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 10:58:16 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2539.382761] FAULT_INJECTION: forcing a failure. [ 2539.382761] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.385600] CPU: 1 PID: 36925 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2539.387189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.389061] Call Trace: [ 2539.389673] dump_stack+0x107/0x167 [ 2539.390505] should_fail.cold+0x5/0xa [ 2539.391398] ? anon_vma_clone+0xdc/0x590 [ 2539.392330] should_failslab+0x5/0x20 [ 2539.393230] kmem_cache_alloc+0x5b/0x310 [ 2539.394169] anon_vma_clone+0xdc/0x590 [ 2539.395087] __split_vma+0x17c/0x4e0 [ 2539.395943] __do_munmap+0x365/0x1260 [ 2539.396844] ? arch_get_unmapped_area+0x450/0x450 [ 2539.397953] ? lock_release+0x680/0x680 [ 2539.398883] mmap_region+0x7c8/0x1500 [ 2539.399777] do_mmap+0xcdb/0x11e0 [ 2539.400610] vm_mmap_pgoff+0x198/0x1f0 [ 2539.401515] ? randomize_page+0xb0/0xb0 [ 2539.402465] ksys_mmap_pgoff+0x41c/0x560 [ 2539.403406] ? find_mergeable_anon_vma+0x250/0x250 [ 2539.404574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.405790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2539.407008] do_syscall_64+0x33/0x40 [ 2539.407871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2539.409090] RIP: 0033:0x7fb414601b62 [ 2539.409956] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2539.414346] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2539.416123] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2539.417837] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2539.419561] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2539.421295] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2539.423012] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2539.456018] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2552.130976] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:58:29 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 10:58:29 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:29 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0x91540000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0xc00, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2552.153398] FAULT_INJECTION: forcing a failure. [ 2552.153398] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.155026] CPU: 1 PID: 36965 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2552.155957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.157026] Call Trace: [ 2552.157381] dump_stack+0x107/0x167 [ 2552.157875] should_fail.cold+0x5/0xa [ 2552.158389] ? create_object.isra.0+0x3a/0xa20 [ 2552.159000] should_failslab+0x5/0x20 [ 2552.159516] kmem_cache_alloc+0x5b/0x310 [ 2552.160057] create_object.isra.0+0x3a/0xa20 [ 2552.160656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2552.161337] kmem_cache_alloc+0x159/0x310 [ 2552.161897] anon_vma_clone+0xdc/0x590 [ 2552.162001] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2552.162422] __split_vma+0x17c/0x4e0 [ 2552.162435] __do_munmap+0x365/0x1260 [ 2552.162458] ? arch_get_unmapped_area+0x450/0x450 [ 2552.165318] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2552.167168] ? lock_release+0x680/0x680 [ 2552.167262] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2552.167719] mmap_region+0x7c8/0x1500 [ 2552.167748] do_mmap+0xcdb/0x11e0 [ 2552.170518] vm_mmap_pgoff+0x198/0x1f0 [ 2552.171068] ? randomize_page+0xb0/0xb0 [ 2552.171635] ksys_mmap_pgoff+0x41c/0x560 [ 2552.172198] ? find_mergeable_anon_vma+0x250/0x250 [ 2552.172900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.173632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.174364] do_syscall_64+0x33/0x40 [ 2552.174885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2552.175616] RIP: 0033:0x7fb414601b62 [ 2552.176145] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2552.178746] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2552.179799] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2552.180807] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2552.181800] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2552.182791] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2552.183779] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2552.184957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2552.187038] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:58:29 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x6000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2552.218936] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:58:29 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) 10:58:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2552.310662] FAULT_INJECTION: forcing a failure. 10:58:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2552.310662] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.313313] CPU: 0 PID: 37287 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2552.314789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.316558] Call Trace: [ 2552.317137] dump_stack+0x107/0x167 [ 2552.317916] should_fail.cold+0x5/0xa [ 2552.318736] ? vm_area_dup+0x78/0x290 [ 2552.319550] should_failslab+0x5/0x20 [ 2552.320362] kmem_cache_alloc+0x5b/0x310 [ 2552.321246] vm_area_dup+0x78/0x290 [ 2552.322027] ? find_held_lock+0x2c/0x110 [ 2552.322896] ? __vma_adjust+0x66e/0x2510 [ 2552.323765] ? lock_downgrade+0x6d0/0x6d0 [ 2552.324674] ? up_write+0x191/0x550 [ 2552.325452] ? downgrade_write+0x3a0/0x3a0 [ 2552.326352] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2552.327509] ? vm_area_alloc+0x110/0x110 [ 2552.328372] ? __vma_adjust+0xbb8/0x2510 [ 2552.329261] ? vmacache_find+0x55/0x2a0 [ 2552.330112] __split_vma+0xa8/0x4e0 [ 2552.330889] __do_munmap+0xf40/0x1260 [ 2552.330906] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2552.331696] ? arch_get_unmapped_area+0x450/0x450 [ 2552.331716] ? lock_release+0x680/0x680 [ 2552.331737] mmap_region+0x7c8/0x1500 [ 2552.335486] do_mmap+0xcdb/0x11e0 [ 2552.336234] vm_mmap_pgoff+0x198/0x1f0 [ 2552.337078] ? randomize_page+0xb0/0xb0 [ 2552.337938] ksys_mmap_pgoff+0x41c/0x560 [ 2552.338805] ? find_mergeable_anon_vma+0x250/0x250 [ 2552.339862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.340990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.342094] do_syscall_64+0x33/0x40 [ 2552.342887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2552.343978] RIP: 0033:0x7fb414601b62 [ 2552.344783] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2552.348716] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2552.350345] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2552.351867] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2552.353399] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2552.354917] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2552.356448] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:29 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x80000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2552.363641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x1200, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:29 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x101200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2552.436862] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 10:58:29 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:47 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:47 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xbc000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:47 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x1800, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2570.665895] FAULT_INJECTION: forcing a failure. [ 2570.665895] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.667229] CPU: 1 PID: 37707 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2570.667969] __nla_validate_parse: 4 callbacks suppressed [ 2570.667981] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2570.668072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.668076] Call Trace: [ 2570.668095] dump_stack+0x107/0x167 [ 2570.668107] should_fail.cold+0x5/0xa [ 2570.668120] ? create_object.isra.0+0x3a/0xa20 [ 2570.668141] should_failslab+0x5/0x20 [ 2570.673149] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2570.673500] kmem_cache_alloc+0x5b/0x310 [ 2570.673518] create_object.isra.0+0x3a/0xa20 [ 2570.676314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2570.676947] kmem_cache_alloc+0x159/0x310 [ 2570.677461] vm_area_dup+0x78/0x290 [ 2570.677894] ? find_held_lock+0x2c/0x110 [ 2570.678377] ? __vma_adjust+0x66e/0x2510 [ 2570.678866] ? lock_downgrade+0x6d0/0x6d0 [ 2570.679374] ? up_write+0x191/0x550 [ 2570.679798] ? downgrade_write+0x3a0/0x3a0 [ 2570.680301] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2570.680964] ? vm_area_alloc+0x110/0x110 [ 2570.681459] ? __vma_adjust+0xbb8/0x2510 [ 2570.681953] ? vmacache_find+0x55/0x2a0 [ 2570.682432] __split_vma+0xa8/0x4e0 [ 2570.682862] __do_munmap+0xf40/0x1260 [ 2570.683291] ? arch_get_unmapped_area+0x450/0x450 [ 2570.683874] ? lock_release+0x680/0x680 [ 2570.684359] mmap_region+0x7c8/0x1500 [ 2570.684794] do_mmap+0xcdb/0x11e0 [ 2570.685207] vm_mmap_pgoff+0x198/0x1f0 [ 2570.685674] ? randomize_page+0xb0/0xb0 [ 2570.686152] ksys_mmap_pgoff+0x41c/0x560 [ 2570.686612] ? find_mergeable_anon_vma+0x250/0x250 [ 2570.687196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.687798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.688397] do_syscall_64+0x33/0x40 [ 2570.688839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.689463] RIP: 0033:0x7fb414601b62 10:58:47 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) 10:58:47 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:47 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:47 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x121000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:47 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2570.689895] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2570.692439] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2570.693357] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2570.693948] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2570.694182] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2570.694188] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2570.694194] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2570.694200] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2570.717906] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.722768] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2570.727149] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:58:47 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x400000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:47 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) 10:58:47 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2570.816038] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.827648] FAULT_INJECTION: forcing a failure. [ 2570.827648] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.830919] CPU: 0 PID: 38022 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2570.832463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.834363] Call Trace: [ 2570.834966] dump_stack+0x107/0x167 [ 2570.835771] should_fail.cold+0x5/0xa [ 2570.836554] ? anon_vma_clone+0xdc/0x590 [ 2570.837463] should_failslab+0x5/0x20 [ 2570.838319] kmem_cache_alloc+0x5b/0x310 [ 2570.839209] anon_vma_clone+0xdc/0x590 [ 2570.840222] __split_vma+0x17c/0x4e0 [ 2570.841069] __do_munmap+0xf40/0x1260 [ 2570.841921] ? arch_get_unmapped_area+0x450/0x450 [ 2570.842970] ? lock_release+0x680/0x680 [ 2570.843799] mmap_region+0x7c8/0x1500 [ 2570.844666] do_mmap+0xcdb/0x11e0 [ 2570.845452] vm_mmap_pgoff+0x198/0x1f0 [ 2570.846327] ? randomize_page+0xb0/0xb0 [ 2570.847183] ksys_mmap_pgoff+0x41c/0x560 [ 2570.848065] ? find_mergeable_anon_vma+0x250/0x250 [ 2570.849178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.850345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.851503] do_syscall_64+0x33/0x40 [ 2570.852351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.853454] RIP: 0033:0x7fb414601b62 [ 2570.854224] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2570.858343] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2570.859996] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2570.861560] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2570.863163] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2570.864780] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2570.866271] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:47 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x600000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:58:47 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:58:47 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2570.889694] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:58:47 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x1e00, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2570.918966] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:58:47 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2570.955689] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:59:02 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xca030000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2585.744875] __nla_validate_parse: 1 callbacks suppressed [ 2585.744888] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2585.760404] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:59:02 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:02 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 10:59:02 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 68) 10:59:02 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:02 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x80ffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2585.766202] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2585.778568] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2585.782257] FAULT_INJECTION: forcing a failure. [ 2585.782257] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.784739] CPU: 1 PID: 38358 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2585.786223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.787986] Call Trace: [ 2585.788552] dump_stack+0x107/0x167 [ 2585.789346] should_fail.cold+0x5/0xa [ 2585.790164] ? create_object.isra.0+0x3a/0xa20 [ 2585.791138] should_failslab+0x5/0x20 [ 2585.791944] kmem_cache_alloc+0x5b/0x310 [ 2585.792810] create_object.isra.0+0x3a/0xa20 [ 2585.793750] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.794833] kmem_cache_alloc+0x159/0x310 [ 2585.795724] anon_vma_clone+0xdc/0x590 [ 2585.796555] __split_vma+0x17c/0x4e0 [ 2585.797390] __do_munmap+0xf40/0x1260 [ 2585.798382] ? arch_get_unmapped_area+0x450/0x450 [ 2585.799671] ? lock_release+0x680/0x680 [ 2585.800610] mmap_region+0x7c8/0x1500 [ 2585.801465] do_mmap+0xcdb/0x11e0 [ 2585.802206] vm_mmap_pgoff+0x198/0x1f0 [ 2585.803034] ? randomize_page+0xb0/0xb0 [ 2585.803887] ksys_mmap_pgoff+0x41c/0x560 [ 2585.804750] ? find_mergeable_anon_vma+0x250/0x250 [ 2585.805807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.806926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.808024] do_syscall_64+0x33/0x40 [ 2585.808815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.809924] RIP: 0033:0x7fb414601b62 [ 2585.810715] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2585.814676] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2585.816285] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2585.817830] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2585.819346] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2585.820863] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2585.822405] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2585.825588] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2585.831076] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:59:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:02 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xc0ff20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2585.959248] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:59:18 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC, @ANYBLOB=',\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r4, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:18 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:18 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:18 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:18 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) 10:59:18 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2101, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:18 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 69) [ 2601.399408] FAULT_INJECTION: forcing a failure. [ 2601.399408] name failslab, interval 1, probability 0, space 0, times 0 [ 2601.402452] CPU: 1 PID: 38771 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2601.404232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.406343] Call Trace: [ 2601.407033] dump_stack+0x107/0x167 [ 2601.408007] should_fail.cold+0x5/0xa [ 2601.409015] ? vm_area_alloc+0x1c/0x110 [ 2601.410074] should_failslab+0x5/0x20 [ 2601.411074] kmem_cache_alloc+0x5b/0x310 [ 2601.412159] vm_area_alloc+0x1c/0x110 [ 2601.413161] mmap_region+0x97e/0x1500 [ 2601.414212] do_mmap+0xcdb/0x11e0 [ 2601.415136] vm_mmap_pgoff+0x198/0x1f0 [ 2601.416163] ? randomize_page+0xb0/0xb0 [ 2601.417252] ksys_mmap_pgoff+0x41c/0x560 [ 2601.418112] ? find_mergeable_anon_vma+0x250/0x250 [ 2601.419145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2601.420245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2601.421349] do_syscall_64+0x33/0x40 [ 2601.422134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2601.423214] RIP: 0033:0x7fb414601b62 [ 2601.424003] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2601.426274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2601.427895] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2601.427916] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2601.427927] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2601.427937] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2601.427947] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2601.427958] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2601.440716] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2601.454797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2601.458635] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2601.460862] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2601.463638] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:59:18 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:18 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2601.615027] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:59:31 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 70) 10:59:31 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xfeffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2614.604778] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 10:59:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) 10:59:31 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2400, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2614.628618] FAULT_INJECTION: forcing a failure. [ 2614.628618] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.631092] CPU: 0 PID: 39197 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2614.632578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.634365] Call Trace: [ 2614.634934] dump_stack+0x107/0x167 [ 2614.635717] should_fail.cold+0x5/0xa [ 2614.636536] ? create_object.isra.0+0x3a/0xa20 [ 2614.637527] should_failslab+0x5/0x20 [ 2614.638341] kmem_cache_alloc+0x5b/0x310 [ 2614.639214] create_object.isra.0+0x3a/0xa20 [ 2614.640151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.641243] kmem_cache_alloc+0x159/0x310 [ 2614.642145] vm_area_alloc+0x1c/0x110 [ 2614.642958] mmap_region+0x97e/0x1500 [ 2614.643790] do_mmap+0xcdb/0x11e0 [ 2614.644542] vm_mmap_pgoff+0x198/0x1f0 [ 2614.645390] ? randomize_page+0xb0/0xb0 [ 2614.646256] ksys_mmap_pgoff+0x41c/0x560 [ 2614.646439] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2614.647125] ? find_mergeable_anon_vma+0x250/0x250 [ 2614.647152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.650351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.651456] do_syscall_64+0x33/0x40 [ 2614.652254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.653383] RIP: 0033:0x7fb414601b62 [ 2614.654182] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2614.658140] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2614.659776] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2614.661322] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2614.662856] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2614.664387] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2614.665931] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2614.678308] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2614.687116] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2614.689048] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2614.692154] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 10:59:31 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2614.746351] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2614.762533] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:59:31 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:31 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x2a00, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2614.876268] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2614.877455] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:59:31 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 10:59:31 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:31 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 71) 10:59:31 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x6000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2614.960703] FAULT_INJECTION: forcing a failure. [ 2614.960703] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.962170] CPU: 1 PID: 39737 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2614.962975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.963959] Call Trace: [ 2614.964273] dump_stack+0x107/0x167 [ 2614.964697] should_fail.cold+0x5/0xa [ 2614.965136] ? vm_area_dup+0x78/0x290 [ 2614.965592] should_failslab+0x5/0x20 [ 2614.966038] kmem_cache_alloc+0x5b/0x310 [ 2614.966506] vm_area_dup+0x78/0x290 [ 2614.966934] ? mark_lock+0xf5/0x2df0 [ 2614.967365] ? lock_chain_count+0x20/0x20 [ 2614.967851] ? __lock_acquire+0x1657/0x5b00 [ 2614.968351] ? mark_lock+0xf5/0x2df0 [ 2614.968788] ? find_held_lock+0x2c/0x110 [ 2614.969263] ? vm_area_alloc+0x110/0x110 [ 2614.969732] ? __lock_acquire+0x1657/0x5b00 [ 2614.970241] ? lock_acquire+0x197/0x470 [ 2614.970700] ? __mm_populate+0x24e/0x360 [ 2614.971175] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2614.971793] ? vmacache_find+0x55/0x2a0 [ 2614.972254] __split_vma+0xa8/0x4e0 [ 2614.972671] __do_munmap+0x365/0x1260 [ 2614.973121] ? arch_get_unmapped_area+0x450/0x450 [ 2614.973691] ? lock_release+0x680/0x680 [ 2614.974146] mmap_region+0x7c8/0x1500 [ 2614.974598] do_mmap+0xcdb/0x11e0 [ 2614.974996] vm_mmap_pgoff+0x198/0x1f0 [ 2614.975456] ? randomize_page+0xb0/0xb0 [ 2614.975932] ksys_mmap_pgoff+0x41c/0x560 [ 2614.976411] ? find_mergeable_anon_vma+0x250/0x250 [ 2614.976973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.977594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.978184] do_syscall_64+0x33/0x40 [ 2614.978622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.979219] RIP: 0033:0x7fb414601b62 [ 2614.979648] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2614.981826] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2614.982703] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2614.983538] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2614.984367] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2614.985207] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2614.986053] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:59:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2629.447526] __nla_validate_parse: 5 callbacks suppressed [ 2629.447534] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:59:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x78, 0x0, 0x0}, 0x58) 10:59:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x3000, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 72) 10:59:46 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2629.474467] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2629.477432] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2629.493021] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2629.494212] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2629.500627] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2629.502494] FAULT_INJECTION: forcing a failure. [ 2629.502494] name failslab, interval 1, probability 0, space 0, times 0 10:59:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2629.504997] CPU: 1 PID: 40174 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2629.506679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.508426] Call Trace: [ 2629.508993] dump_stack+0x107/0x167 [ 2629.509786] should_fail.cold+0x5/0xa [ 2629.510593] ? create_object.isra.0+0x3a/0xa20 [ 2629.511570] should_failslab+0x5/0x20 [ 2629.512385] kmem_cache_alloc+0x5b/0x310 [ 2629.513245] create_object.isra.0+0x3a/0xa20 [ 2629.514184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2629.515262] kmem_cache_alloc+0x159/0x310 [ 2629.516158] vm_area_dup+0x78/0x290 [ 2629.516934] ? mark_lock+0xf5/0x2df0 [ 2629.517738] ? lock_chain_count+0x20/0x20 [ 2629.517912] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2629.518633] ? __lock_acquire+0x1657/0x5b00 [ 2629.518660] ? mark_lock+0xf5/0x2df0 [ 2629.521337] ? find_held_lock+0x2c/0x110 [ 2629.522215] ? vm_area_alloc+0x110/0x110 [ 2629.523094] ? __lock_acquire+0x1657/0x5b00 [ 2629.524016] ? lock_acquire+0x197/0x470 [ 2629.524860] ? __mm_populate+0x24e/0x360 [ 2629.525720] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2629.526839] ? vmacache_find+0x55/0x2a0 [ 2629.527677] __split_vma+0xa8/0x4e0 [ 2629.528460] __do_munmap+0x365/0x1260 [ 2629.529377] ? arch_get_unmapped_area+0x450/0x450 [ 2629.530516] ? lock_release+0x680/0x680 [ 2629.531356] mmap_region+0x7c8/0x1500 [ 2629.532179] do_mmap+0xcdb/0x11e0 [ 2629.532915] vm_mmap_pgoff+0x198/0x1f0 [ 2629.533754] ? randomize_page+0xb0/0xb0 [ 2629.534602] ksys_mmap_pgoff+0x41c/0x560 [ 2629.535461] ? find_mergeable_anon_vma+0x250/0x250 [ 2629.536498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.537611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.538717] do_syscall_64+0x33/0x40 [ 2629.539523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2629.540631] RIP: 0033:0x7fb414601b62 [ 2629.541434] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2629.545411] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2629.547075] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2629.548610] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2629.550174] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2629.551697] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2629.553254] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:59:46 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:46 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xc000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2629.631805] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2629.634021] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2629.676358] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 10:59:46 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:46 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x10000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0xbc, 0x0, 0x0}, 0x58) 10:59:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x3600, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:59:46 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x12000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 10:59:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,a', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 10:59:46 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 73) [ 2629.873457] FAULT_INJECTION: forcing a failure. [ 2629.873457] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.874744] CPU: 0 PID: 40803 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2629.875483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.876373] Call Trace: [ 2629.876672] dump_stack+0x107/0x167 [ 2629.877072] should_fail.cold+0x5/0xa [ 2629.877512] ? anon_vma_clone+0xdc/0x590 [ 2629.877955] should_failslab+0x5/0x20 [ 2629.878384] kmem_cache_alloc+0x5b/0x310 [ 2629.878824] anon_vma_clone+0xdc/0x590 [ 2629.879251] __split_vma+0x17c/0x4e0 [ 2629.879667] __do_munmap+0x365/0x1260 [ 2629.880079] ? arch_get_unmapped_area+0x450/0x450 [ 2629.880602] ? lock_release+0x680/0x680 [ 2629.881032] mmap_region+0x7c8/0x1500 [ 2629.881465] do_mmap+0xcdb/0x11e0 [ 2629.881852] vm_mmap_pgoff+0x198/0x1f0 [ 2629.882274] ? randomize_page+0xb0/0xb0 [ 2629.882726] ksys_mmap_pgoff+0x41c/0x560 [ 2629.883164] ? find_mergeable_anon_vma+0x250/0x250 [ 2629.883700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.884267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.884822] do_syscall_64+0x33/0x40 [ 2629.885238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2629.885797] RIP: 0033:0x7fb414601b62 [ 2629.886203] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2629.888178] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2629.889032] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2629.889841] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2629.890639] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2629.891440] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2629.892239] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2646.764793] __nla_validate_parse: 6 callbacks suppressed [ 2646.764801] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 11:00:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) 11:00:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x3c00, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:03 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x18000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 11:00:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:03 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 74) 11:00:03 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2646.789203] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2646.791211] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2646.792297] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2646.814322] FAULT_INJECTION: forcing a failure. [ 2646.814322] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.816168] CPU: 1 PID: 41095 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2646.817181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.818416] Call Trace: [ 2646.818824] dump_stack+0x107/0x167 [ 2646.819381] should_fail.cold+0x5/0xa [ 2646.819959] ? create_object.isra.0+0x3a/0xa20 [ 2646.820636] should_failslab+0x5/0x20 [ 2646.821204] kmem_cache_alloc+0x5b/0x310 [ 2646.821811] create_object.isra.0+0x3a/0xa20 [ 2646.822454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.823195] kmem_cache_alloc+0x159/0x310 [ 2646.823798] anon_vma_clone+0xdc/0x590 [ 2646.824363] __split_vma+0x17c/0x4e0 [ 2646.824913] __do_munmap+0x365/0x1260 [ 2646.825482] ? arch_get_unmapped_area+0x450/0x450 [ 2646.826200] ? lock_release+0x680/0x680 [ 2646.826785] mmap_region+0x7c8/0x1500 [ 2646.827366] do_mmap+0xcdb/0x11e0 [ 2646.827894] vm_mmap_pgoff+0x198/0x1f0 [ 2646.828479] ? randomize_page+0xb0/0xb0 [ 2646.829075] ksys_mmap_pgoff+0x41c/0x560 [ 2646.829686] ? find_mergeable_anon_vma+0x250/0x250 [ 2646.830421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.831200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.831956] do_syscall_64+0x33/0x40 [ 2646.832503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.833251] RIP: 0033:0x7fb414601b62 [ 2646.833788] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2646.835933] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2646.836796] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2646.837627] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2646.838466] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2646.839303] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2646.840135] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2646.843351] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2646.856728] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2664.215153] FAULT_INJECTION: forcing a failure. [ 2664.215153] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.217655] CPU: 0 PID: 41431 Comm: syz-executor.1 Not tainted 5.10.239 #1 11:00:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1e000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 11:00:21 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 75) [ 2664.219128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.221113] Call Trace: [ 2664.221680] dump_stack+0x107/0x167 [ 2664.222462] should_fail.cold+0x5/0xa [ 2664.223267] ? vm_area_alloc+0x1c/0x110 [ 2664.224115] should_failslab+0x5/0x20 [ 2664.224930] kmem_cache_alloc+0x5b/0x310 [ 2664.225812] vm_area_alloc+0x1c/0x110 [ 2664.226637] mmap_region+0x97e/0x1500 [ 2664.227467] do_mmap+0xcdb/0x11e0 [ 2664.228218] vm_mmap_pgoff+0x198/0x1f0 [ 2664.229060] ? randomize_page+0xb0/0xb0 [ 2664.229938] ksys_mmap_pgoff+0x41c/0x560 [ 2664.230815] ? find_mergeable_anon_vma+0x250/0x250 [ 2664.231733] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2664.231878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2664.234822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.235935] do_syscall_64+0x33/0x40 [ 2664.236738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.237844] RIP: 0033:0x7fb414601b62 [ 2664.238655] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2664.242629] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2664.244264] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2664.245799] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2664.247343] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2664.248876] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2664.250423] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2664.261293] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2664.263298] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2664.265837] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2664.267794] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 11:00:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:21 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 11:00:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2664.297192] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. 11:00:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:21 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x20000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2664.391754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 11:00:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 76) 11:00:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x4200, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2664.499422] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2664.519220] FAULT_INJECTION: forcing a failure. [ 2664.519220] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.521779] CPU: 0 PID: 41853 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2664.523331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.525182] Call Trace: [ 2664.525788] dump_stack+0x107/0x167 [ 2664.526614] should_fail.cold+0x5/0xa [ 2664.527486] ? create_object.isra.0+0x3a/0xa20 [ 2664.528509] should_failslab+0x5/0x20 [ 2664.529361] kmem_cache_alloc+0x5b/0x310 [ 2664.530289] create_object.isra.0+0x3a/0xa20 [ 2664.531261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2664.532396] kmem_cache_alloc+0x159/0x310 [ 2664.533332] vm_area_alloc+0x1c/0x110 [ 2664.534188] mmap_region+0x97e/0x1500 [ 2664.535047] do_mmap+0xcdb/0x11e0 [ 2664.535828] vm_mmap_pgoff+0x198/0x1f0 [ 2664.536703] ? randomize_page+0xb0/0xb0 [ 2664.537602] ksys_mmap_pgoff+0x41c/0x560 [ 2664.538525] ? find_mergeable_anon_vma+0x250/0x250 [ 2664.539630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2664.540805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.541975] do_syscall_64+0x33/0x40 [ 2664.542809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2664.543950] RIP: 0033:0x7fb414601b62 [ 2664.544779] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2664.548913] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2664.550618] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2664.552213] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2664.553805] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2664.555412] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2664.557006] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2664.574691] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2664.591855] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 11:00:21 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x3cc, 0x0, 0x0}, 0x58) 11:00:21 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 11:00:21 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x20ffc000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 11:00:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:21 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x21010000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 11:00:37 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 77) 11:00:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x22c00fff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2680.180549] FAULT_INJECTION: forcing a failure. [ 2680.180549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2680.183176] CPU: 1 PID: 42282 Comm: syz-executor.1 Not tainted 5.10.239 #1 11:00:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) [ 2680.184660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.186726] Call Trace: [ 2680.187403] dump_stack+0x107/0x167 [ 2680.188332] should_fail.cold+0x5/0xa [ 2680.189308] __alloc_pages_nodemask+0x182/0x600 11:00:37 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x408, 0x0, 0x0}, 0x58) 11:00:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,ui', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) [ 2680.190507] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 11:00:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:00:37 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r2, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2680.192268] ? walk_mem_res+0x170/0x170 [ 2680.193420] alloc_pages_current+0x187/0x280 [ 2680.194555] pte_alloc_one+0x16/0x1a0 [ 2680.195527] __pte_alloc+0x1d/0x330 [ 2680.195983] __nla_validate_parse: 5 callbacks suppressed [ 2680.195992] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2680.196458] remap_pfn_range_internal+0x9a3/0xf60 [ 2680.196490] ? lookup_memtype+0x5b/0x200 [ 2680.196529] ? apply_to_existing_page_range+0x40/0x40 [ 2680.196568] remap_pfn_range+0xcd/0x160 [ 2680.201682] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2680.202960] ? remap_pfn_range_notrack+0x70/0x70 [ 2680.202986] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2680.203017] io_uring_mmap+0x398/0x530 [ 2680.209133] mmap_file+0x5e/0xe0 [ 2680.209993] mmap_region+0xc49/0x1500 [ 2680.210991] do_mmap+0xcdb/0x11e0 [ 2680.211883] vm_mmap_pgoff+0x198/0x1f0 [ 2680.212878] ? randomize_page+0xb0/0xb0 [ 2680.213911] ksys_mmap_pgoff+0x41c/0x560 [ 2680.214954] ? find_mergeable_anon_vma+0x250/0x250 [ 2680.216207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2680.217490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2680.218781] do_syscall_64+0x33/0x40 [ 2680.219715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2680.220999] RIP: 0033:0x7fb414601b62 [ 2680.221939] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2680.226594] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2680.228503] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2680.230326] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2680.232098] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2680.233839] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2680.235630] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 11:00:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x22dfffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2680.273652] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2680.277217] ------------[ cut here ]------------ [ 2680.277401] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2680.278386] WARNING: CPU: 1 PID: 42282 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2680.281381] Modules linked in: [ 2680.282070] CPU: 1 PID: 42282 Comm: syz-executor.1 Not tainted 5.10.239 #1 11:00:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) [ 2680.283689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.285691] RIP: 0010:get_pat_info+0x216/0x270 [ 2680.286713] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 41 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 2a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 98 5a 00 e9 [ 2680.295958] RSP: 0018:ffff888024127898 EFLAGS: 00010216 [ 2680.297106] RAX: 0000000000017aa4 RBX: ffff88800db18700 RCX: ffffc900007e7000 [ 2680.298674] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 2680.300224] RBP: ffff888024127950 R08: 0000000000000000 R09: ffff888024127820 [ 2680.301754] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2680.303297] R13: 1ffff11004824f13 R14: 0000000000000000 R15: ffff88800db18750 [ 2680.304838] FS: 00007fb411b77700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2680.306579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2680.307838] CR2: 00007f462a7e03f0 CR3: 0000000017182000 CR4: 0000000000350ee0 [ 2680.309360] Call Trace: [ 2680.309917] ? pgprot_writethrough+0xc0/0xc0 [ 2680.310885] ? finish_task_switch+0x126/0x5d0 [ 2680.311867] ? finish_task_switch+0xef/0x5d0 [ 2680.312525] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2680.312833] untrack_pfn+0xdc/0x240 [ 2680.314738] ? track_pfn_insert+0x150/0x150 [ 2680.315683] ? lock_downgrade+0x6d0/0x6d0 [ 2680.316584] ? uprobe_munmap+0x1c/0x560 [ 2680.317466] unmap_single_vma+0x1bc/0x300 [ 2680.318402] zap_page_range_single+0x2ce/0x450 [ 2680.319407] ? unmap_single_vma+0x300/0x300 [ 2680.320353] ? remap_pfn_range_internal+0xc56/0xf60 [ 2680.321436] ? lookup_memtype+0x5b/0x200 11:00:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x23e00fff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2680.322348] ? apply_to_existing_page_range+0x40/0x40 [ 2680.323689] remap_pfn_range+0x139/0x160 [ 2680.324602] ? remap_pfn_range_notrack+0x70/0x70 [ 2680.325653] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2680.326797] io_uring_mmap+0x398/0x530 [ 2680.327665] mmap_file+0x5e/0xe0 [ 2680.328427] mmap_region+0xc49/0x1500 [ 2680.329252] do_mmap+0xcdb/0x11e0 [ 2680.330001] vm_mmap_pgoff+0x198/0x1f0 [ 2680.330860] ? randomize_page+0xb0/0xb0 [ 2680.331730] ksys_mmap_pgoff+0x41c/0x560 [ 2680.332620] ? find_mergeable_anon_vma+0x250/0x250 [ 2680.333682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2680.334819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2680.335922] do_syscall_64+0x33/0x40 [ 2680.336734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2680.337845] RIP: 0033:0x7fb414601b62 [ 2680.338686] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2680.342659] RSP: 002b:00007fb411b770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2680.344291] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb414601b62 [ 2680.345815] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2680.347346] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2680.348859] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2680.350423] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2680.351969] irq event stamp: 1161 [ 2680.352727] hardirqs last enabled at (1171): [] console_unlock+0x92d/0xb40 [ 2680.354596] hardirqs last disabled at (1182): [] console_unlock+0x839/0xb40 [ 2680.356416] softirqs last enabled at (654): [] asm_call_irq_on_stack+0x12/0x20 [ 2680.358318] softirqs last disabled at (603): [] asm_call_irq_on_stack+0x12/0x20 [ 2680.360230] ---[ end trace 16fdc22f512624ab ]--- [ 2680.368146] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2680.373258] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2680.377465] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.6'. 11:00:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@private}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x49000, &(0x7f00000004c0)=ANY=[@ANYBLOB="9772616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000000010000,version=9p2000.u,debug=0x0000000000000001,nodevmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',bwcache,audit,uid', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) fadvise64(r5, 0xfffffffffffffff8, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 11:00:37 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x23f20fff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 11:00:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1f0000001900250c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0800959da36667c604753d3d0cf5048e2ee01200", @ANYRES32, @ANYBLOB="2f118afc1944facb570232cade1f28b703f994cbf4e8ea2ec1aaaa701f21b7843582b69bb01646421780382230dcea2946e6896fbef3d8ec52614f91c1909b211b73935a49b37854c892239d04413bf94de9776e73443bf11621b031"], 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x43}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000ac0)={0x134124500, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) [ 2680.492056] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2680.508272] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.7'. VM DIAGNOSIS: 11:00:37 Registers: info registers vcpu 0 RAX=ffff88805ff90000 RBX=ffffffff850364a8 RCX=ffffffff8141518f RDX=ffff88805ff90000 RSI=ffffffff814151db RDI=0000000000000006 RBP=ffffffffa0000000 RSP=ffff888022b37698 R8 =0000000000000000 R9 =ffffffff8686e6a7 R10=ffffffffa0000000 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=ffffffff850364a8 R15=0000000000000078 RIP=ffffffff83e7bd7d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556f377400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc09bf0a540 CR3=000000005fdf6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e27c1 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff888024127228 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000065 R13=0000000000000065 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e2818 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb411b77700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f462a7e03f0 CR3=0000000017182000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000