0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 35) [ 1163.675687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1163.696135] FAULT_INJECTION: forcing a failure. [ 1163.696135] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.698887] CPU: 0 PID: 8280 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1163.700484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1163.702527] Call Trace: [ 1163.703174] dump_stack+0x107/0x167 [ 1163.704029] should_fail.cold+0x5/0xa [ 1163.704939] ? create_object.isra.0+0x3a/0xa20 [ 1163.706079] should_failslab+0x5/0x20 [ 1163.707033] kmem_cache_alloc+0x5b/0x310 [ 1163.708006] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1163.709214] ? trace_hardirqs_on+0x5b/0x180 [ 1163.710290] create_object.isra.0+0x3a/0xa20 [ 1163.711373] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1163.712627] kmem_cache_alloc_trace+0x151/0x320 [ 1163.713772] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1163.715047] io_uring_setup+0x14f6/0x2980 [ 1163.716077] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1163.717257] ? wait_for_completion_io+0x270/0x270 [ 1163.718469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1163.719751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1163.720967] do_syscall_64+0x33/0x40 [ 1163.721891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1163.723148] RIP: 0033:0x7f72c981db19 [ 1163.724060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1163.728623] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1163.730429] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1163.732194] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1163.733936] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1163.735648] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1163.737421] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x4, 0x7a16, 0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_open_dev$hidraw(0x0, 0x0, 0x42102) 14:35:17 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 35) [ 1163.802988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1163.810392] FAULT_INJECTION: forcing a failure. [ 1163.810392] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.811641] CPU: 1 PID: 8288 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1163.812372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1163.813260] Call Trace: [ 1163.813563] dump_stack+0x107/0x167 [ 1163.813961] should_fail.cold+0x5/0xa [ 1163.814372] ? create_object.isra.0+0x3a/0xa20 [ 1163.814862] should_failslab+0x5/0x20 [ 1163.815273] kmem_cache_alloc+0x5b/0x310 [ 1163.815712] create_object.isra.0+0x3a/0xa20 [ 1163.816191] kmemleak_alloc_percpu+0xa0/0x100 [ 1163.816676] pcpu_alloc+0x4e2/0x1240 [ 1163.817088] ? io_async_queue_proc+0x80/0x80 [ 1163.817568] percpu_ref_init+0x31/0x3d0 [ 1163.817997] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1163.818577] io_uring_setup+0x14f6/0x2980 [ 1163.819027] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1163.819574] ? wait_for_completion_io+0x270/0x270 [ 1163.820109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1163.820669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1163.821225] do_syscall_64+0x33/0x40 [ 1163.821637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1163.822193] RIP: 0033:0x7f2db9fa8b19 [ 1163.822592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1163.824553] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1163.825380] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1163.826140] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1163.826901] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1163.827663] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1163.828429] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 36) 14:35:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001780), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0xa8, 0x2e, 0x100, 0x70bd25, 0x25dfdbfd, {0x1b}, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0xb5c1}, @generic="8bd54884c1a4cfb235853760accd56d292d27da22771011e0cf6544c277bed75bbd352c4d0d1614988ac43494b5269175a2ab838999243cbd285231296e6d771ed788431549b3668ac9e8a1b2f2b817bc5975bd439641ce7df1813f8db638f414e4550b2467e0faf89e95e6c0fe844261dfd59c77fbe6ae382d75c35d7d7ec60773afe787627baeea18be5"]}, 0xa8}}, 0x40001) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000001940)={0xfe, "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"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8003, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0xff}], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d93118", ['\x00']}, 0x25f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup2(r6, r6) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000000)=""/69, 0x45}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000200)=""/99, 0x63}], 0x4, &(0x7f00000002c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x10000) stat(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@fowner_gt={'fowner>', r9}}, {@uid_gt={'uid>', r8}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 14:35:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:30 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 37) [ 1176.854499] FAULT_INJECTION: forcing a failure. [ 1176.854499] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.855983] CPU: 0 PID: 8302 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1176.856823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.857270] FAULT_INJECTION: forcing a failure. [ 1176.857270] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.857844] Call Trace: [ 1176.857871] dump_stack+0x107/0x167 [ 1176.860917] should_fail.cold+0x5/0xa [ 1176.861390] ? create_object.isra.0+0x3a/0xa20 [ 1176.861959] should_failslab+0x5/0x20 [ 1176.862429] kmem_cache_alloc+0x5b/0x310 [ 1176.862931] create_object.isra.0+0x3a/0xa20 [ 1176.863488] kmemleak_alloc_percpu+0xa0/0x100 [ 1176.864044] pcpu_alloc+0x4e2/0x1240 [ 1176.864507] ? io_async_queue_proc+0x80/0x80 [ 1176.865048] percpu_ref_init+0x31/0x3d0 [ 1176.865547] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1176.866202] io_uring_setup+0x14f6/0x2980 [ 1176.866715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1176.867341] ? wait_for_completion_io+0x270/0x270 [ 1176.867948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.868586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.869228] do_syscall_64+0x33/0x40 [ 1176.869694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.870332] RIP: 0033:0x7f2db9fa8b19 [ 1176.870780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.873046] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1176.873987] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1176.874854] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1176.875712] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1176.876581] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1176.877438] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1176.878338] CPU: 1 PID: 8300 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1176.879766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.881522] Call Trace: [ 1176.882092] dump_stack+0x107/0x167 [ 1176.882871] should_fail.cold+0x5/0xa 14:35:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000140), 0xa0, 0x323382) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x10000}, 0x16, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101081, 0x8d) inotify_init1(0x0) r3 = pidfd_getfd(r2, r2, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000de5566aad9ce8e4400f8898e7ed1d78226e665bef11ff5c22a3119ff852a70adea9dbb855c9220be4b631564eb58"]) syz_open_dev$hidraw(0x0, 0x0, 0x42102) 14:35:30 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 36) 14:35:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:30 executing program 0: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x500, &(0x7f00000004c0)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) io_uring_enter(r0, 0x1a63, 0x17, 0x2, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1bc}}, 0x20004000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc9a, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r4, 0x5608, &(0x7f0000000200)) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES32], 0x1c}}, 0x404c845) [ 1176.883800] ? create_object.isra.0+0x3a/0xa20 [ 1176.884820] should_failslab+0x5/0x20 [ 1176.885614] kmem_cache_alloc+0x5b/0x310 [ 1176.886447] create_object.isra.0+0x3a/0xa20 [ 1176.887367] kmemleak_alloc_percpu+0xa0/0x100 [ 1176.888296] pcpu_alloc+0x4e2/0x1240 [ 1176.889069] ? io_async_queue_proc+0x80/0x80 [ 1176.890002] percpu_ref_init+0x31/0x3d0 [ 1176.890859] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1176.891456] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1176.892007] io_uring_setup+0x14f6/0x2980 [ 1176.892036] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1176.894963] ? wait_for_completion_io+0x270/0x270 [ 1176.895976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.897041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.898121] do_syscall_64+0x33/0x40 [ 1176.898140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.898152] RIP: 0033:0x7f72c981db19 [ 1176.898170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.898180] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1176.898201] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1176.898216] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1176.898226] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1176.898237] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1176.898247] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1176.922286] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. 14:35:31 executing program 0: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00^\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="456702d0a796310c100d4c25d1abda36246f31823b3e4275fc3e48bc7eee5af1b978f242544184438be2de1ee6db3a695163fee74f60f8ad9376925a9f57ab39a5f2ebabb1904871c3adbf4e36779d5f5891e60b2053441f82931641cf5f430d596f73e33419f9c8eb99b3bed0b82a666fdcf14801de1e49b07f3fbfd2d9652308fbd57a2957d44cbc091ecbb0d9691c8a4032e1872cd039f4a187f60ba08e000b364130e0a5f56202903f653739141aa25784e6ff", @ANYRES64, @ANYBLOB="0006000000000000c07db189fcadb962524585a3805f67e87bbdef277ff0855badf644eb988cba7fdbf9da659c4f2f71ba6d17"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x7) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x48020200) [ 1176.948734] FAULT_INJECTION: forcing a failure. [ 1176.948734] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.950165] CPU: 0 PID: 8315 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1176.950998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.952014] Call Trace: [ 1176.952347] dump_stack+0x107/0x167 [ 1176.952809] should_fail.cold+0x5/0xa [ 1176.953291] ? percpu_ref_init+0xd8/0x3d0 [ 1176.953817] should_failslab+0x5/0x20 [ 1176.954287] kmem_cache_alloc_trace+0x55/0x320 [ 1176.954852] ? io_async_queue_proc+0x80/0x80 [ 1176.955394] percpu_ref_init+0xd8/0x3d0 [ 1176.955894] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1176.956560] io_uring_setup+0x14f6/0x2980 [ 1176.957082] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1176.957711] ? wait_for_completion_io+0x270/0x270 [ 1176.958327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.958982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.959621] do_syscall_64+0x33/0x40 [ 1176.960078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.960708] RIP: 0033:0x7f9af1df9b19 [ 1176.961160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.963406] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1176.964343] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1176.965250] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1176.966142] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1176.967030] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1176.967900] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:31 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 37) 14:35:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x43) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x436) dup3(r1, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x1000008) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_open_dev$hidraw(0x0, 0x1, 0x420000) [ 1177.040896] FAULT_INJECTION: forcing a failure. [ 1177.040896] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.043907] CPU: 1 PID: 8325 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1177.045373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.047106] Call Trace: [ 1177.047796] dump_stack+0x107/0x167 [ 1177.048557] should_fail.cold+0x5/0xa [ 1177.049361] ? percpu_ref_init+0xd8/0x3d0 [ 1177.050248] should_failslab+0x5/0x20 [ 1177.051047] kmem_cache_alloc_trace+0x55/0x320 [ 1177.052216] ? io_async_queue_proc+0x80/0x80 [ 1177.053345] percpu_ref_init+0xd8/0x3d0 [ 1177.054399] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1177.055575] io_uring_setup+0x14f6/0x2980 [ 1177.056455] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1177.057553] ? wait_for_completion_io+0x270/0x270 [ 1177.058640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.059772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.060901] do_syscall_64+0x33/0x40 [ 1177.061732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.062848] RIP: 0033:0x7f2db9fa8b19 [ 1177.063652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.067485] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1177.069060] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1177.070546] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1177.072010] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1177.073534] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1177.075058] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:31 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe800000"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaaaaaa000c040000c004010000004ae69c7c4765c9"], &(0x7f0000000200)={0x0, 0x3, [0xf03, 0xf7b, 0x49, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() getpgrp(0x0) r1 = getpgid(r0) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/3, 0x3}], 0x2, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140), 0x100000000000009c, &(0x7f0000000300)=[@rights, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred], 0xa}, 0x12103) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) recvmsg$unix(r3, &(0x7f00000013c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/6, 0x6}], 0x3}, 0x20) recvmsg$unix(r2, &(0x7f0000001700)={&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/110, 0x6e}, {&(0x7f0000001500)=""/169, 0xa9}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x2) 14:35:31 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 38) 14:35:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 37) [ 1177.225546] FAULT_INJECTION: forcing a failure. [ 1177.225546] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.228536] CPU: 1 PID: 8337 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1177.230300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.232074] Call Trace: [ 1177.232716] dump_stack+0x107/0x167 14:35:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x43) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x1, 0xffffffffffffffff, 0xc) capset(&(0x7f0000000180)={0x20080522, r2}, &(0x7f00000000c0)={0x0, 0x2, 0xfffffaf3, 0x6, 0xffffffff}) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24d8, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000140)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0xf7, 0x77, 0x0, 0x3, 0xa84, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x2}, 0x8a20, 0xfffffffffffff801, 0x3f, 0x5, 0x7, 0x401, 0x1, 0x0, 0x1, 0x0, 0xd1}, r2, 0x3, r3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_setup(0x1b03, &(0x7f0000000280)={0x0, 0x1601, 0x4, 0x3, 0x316, 0x0, r3}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$VT_SETMODE(r4, 0x5608, &(0x7f0000000200)) dup3(r4, r0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x42102) [ 1177.233495] should_fail.cold+0x5/0xa [ 1177.234631] ? create_object.isra.0+0x3a/0xa20 [ 1177.235618] should_failslab+0x5/0x20 [ 1177.236397] kmem_cache_alloc+0x5b/0x310 [ 1177.237248] create_object.isra.0+0x3a/0xa20 [ 1177.238174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1177.239229] kmem_cache_alloc_trace+0x151/0x320 [ 1177.240191] ? io_async_queue_proc+0x80/0x80 [ 1177.241116] percpu_ref_init+0xd8/0x3d0 [ 1177.241948] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1177.243118] io_uring_setup+0x14f6/0x2980 [ 1177.244178] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1177.245302] ? wait_for_completion_io+0x270/0x270 [ 1177.246472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.247547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.248626] do_syscall_64+0x33/0x40 [ 1177.249490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.250542] RIP: 0033:0x7f9af1df9b19 [ 1177.251301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.255125] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1177.256701] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1177.258156] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1177.259613] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1177.261062] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1177.262531] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1177.339929] FAULT_INJECTION: forcing a failure. [ 1177.339929] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.341499] CPU: 0 PID: 8343 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1177.342346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.343346] Call Trace: [ 1177.343680] dump_stack+0x107/0x167 [ 1177.344123] should_fail.cold+0x5/0xa [ 1177.344588] ? percpu_ref_init+0xd8/0x3d0 [ 1177.345089] should_failslab+0x5/0x20 [ 1177.345565] kmem_cache_alloc_trace+0x55/0x320 [ 1177.346121] ? io_async_queue_proc+0x80/0x80 [ 1177.346663] percpu_ref_init+0xd8/0x3d0 [ 1177.347154] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1177.347807] io_uring_setup+0x14f6/0x2980 [ 1177.348316] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1177.348926] ? wait_for_completion_io+0x270/0x270 [ 1177.349547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.350202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.350836] do_syscall_64+0x33/0x40 [ 1177.351294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1177.351922] RIP: 0033:0x7f72c981db19 [ 1177.352385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.354656] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1177.355590] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1177.356469] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1177.357343] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1177.358212] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1177.359071] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1191.435522] FAULT_INJECTION: forcing a failure. [ 1191.435522] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.437222] CPU: 1 PID: 8356 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1191.438143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.439252] Call Trace: [ 1191.439610] dump_stack+0x107/0x167 [ 1191.440094] should_fail.cold+0x5/0xa [ 1191.440600] ? create_object.isra.0+0x3a/0xa20 [ 1191.441207] should_failslab+0x5/0x20 [ 1191.441726] kmem_cache_alloc+0x5b/0x310 [ 1191.442265] create_object.isra.0+0x3a/0xa20 [ 1191.442844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1191.443520] kmem_cache_alloc_trace+0x151/0x320 [ 1191.444136] ? io_async_queue_proc+0x80/0x80 [ 1191.444731] percpu_ref_init+0xd8/0x3d0 [ 1191.445270] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1191.445987] io_uring_setup+0x14f6/0x2980 [ 1191.446530] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.447191] ? wait_for_completion_io+0x270/0x270 [ 1191.447857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.448547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.449243] do_syscall_64+0x33/0x40 [ 1191.449740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.450417] RIP: 0033:0x7f2db9fa8b19 [ 1191.450903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.453333] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.454340] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1191.455290] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.456230] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.457179] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.458123] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000940)="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", 0x1000, 0x5}], 0x80000, &(0x7f0000000280)={[{'/{{^:^('}, {'ext4\x00'}, {'$'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '}'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x40) mq_open(0x0, 0x0, 0x0, 0x0) 14:35:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 38) 14:35:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xb55c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) creat(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x6bd, &(0x7f0000000140)={0x0, 0xcee8, 0x10, 0x1, 0x190, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) 14:35:45 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 38) 14:35:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = getpgrp(0x0) ioprio_set$pid(0x2, r3, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) getpgrp(r3) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001c2323805a4c5200100000000000000000000000018000080080086001ea6dfafadc3c38559129a943bfafd3c587448ceeaf9bd45cf9f50130ef511e03f334c61bbf9071bf65371493a0684fbc36f6b80edaa21b7d743438a4a88cf04e621dee2a8c4c52e1d022bf9233305bbf78311069b0adc2eba04f3efdf3b80811d0e03170f176a0cfadbea0988913fd04815785907b20d2ca56c1e22b14d727282ab3514", @ANYRES32=0x0, @ANYBLOB='\f\x00'/12], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="f27e13ed587a9828994b06140000001f7653d3aab397409a4dccec9921624a4bb55d50df0803000000"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x80000017) inotify_rm_watch(0xffffffffffffffff, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/67, 0x43}], 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r1, 0xffffffffffffffff], 0x7, 0x0, 0x0, {0x0, r6}}, 0x7) sendfile(r2, r1, &(0x7f0000000040)=0xb, 0x80000001) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x40, 0x80, 0x26, 0x81, 0x0, 0x4, 0x10, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x4, @perf_config_ext={0xd42, 0x1000000000000}, 0x4094, 0x5, 0x10001, 0x9, 0x9, 0x3b, 0xfa36, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, r0, 0x0) r7 = getpgrp(0x0) pidfd_open(r7, 0x0) gettid() clone3(&(0x7f0000000440)={0x210081000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0x1d}, &(0x7f00000006c0)=""/153, 0x99, &(0x7f0000000240)=""/96, &(0x7f0000000000)=[0x0, r7, 0x0], 0x3, {r1}}, 0x58) 14:35:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:45 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 39) [ 1191.480722] FAULT_INJECTION: forcing a failure. [ 1191.480722] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.483588] CPU: 0 PID: 8361 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1191.485137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.487023] Call Trace: [ 1191.487621] dump_stack+0x107/0x167 [ 1191.488444] should_fail.cold+0x5/0xa [ 1191.489306] ? create_object.isra.0+0x3a/0xa20 [ 1191.490361] should_failslab+0x5/0x20 [ 1191.491220] kmem_cache_alloc+0x5b/0x310 [ 1191.492147] create_object.isra.0+0x3a/0xa20 [ 1191.493142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1191.494303] kmem_cache_alloc_trace+0x151/0x320 [ 1191.495357] ? io_async_queue_proc+0x80/0x80 [ 1191.496347] percpu_ref_init+0xd8/0x3d0 [ 1191.497256] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1191.498482] io_uring_setup+0x14f6/0x2980 [ 1191.499431] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.500578] ? wait_for_completion_io+0x270/0x270 [ 1191.501701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.502898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.504061] do_syscall_64+0x33/0x40 [ 1191.504910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.506078] RIP: 0033:0x7f72c981db19 [ 1191.506920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.511109] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.512830] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1191.514452] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.516075] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.517694] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.519313] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1191.522511] FAULT_INJECTION: forcing a failure. [ 1191.522511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.525187] CPU: 0 PID: 8365 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1191.526745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.528643] Call Trace: [ 1191.529244] dump_stack+0x107/0x167 14:35:45 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 39) [ 1191.530096] should_fail.cold+0x5/0xa [ 1191.531145] _copy_to_user+0x2e/0x180 [ 1191.532031] io_uring_setup+0x11b5/0x2980 [ 1191.533009] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.534179] ? wait_for_completion_io+0x270/0x270 [ 1191.535334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.536539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.537738] do_syscall_64+0x33/0x40 [ 1191.538597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.539768] RIP: 0033:0x7f9af1df9b19 [ 1191.540622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.544776] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.546524] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1191.548140] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.549792] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.551430] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.553066] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1191.566668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.567461] FAULT_INJECTION: forcing a failure. [ 1191.567461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.570198] CPU: 1 PID: 8374 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1191.571094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.572189] Call Trace: [ 1191.572530] dump_stack+0x107/0x167 [ 1191.573013] should_fail.cold+0x5/0xa [ 1191.573507] _copy_to_user+0x2e/0x180 [ 1191.574037] io_uring_setup+0x11b5/0x2980 [ 1191.574565] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.575200] ? wait_for_completion_io+0x270/0x270 [ 1191.575825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.576486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.577142] do_syscall_64+0x33/0x40 [ 1191.577634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.578314] RIP: 0033:0x7f2db9fa8b19 [ 1191.578788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.581152] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.582131] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1191.583044] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.583972] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.584881] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.585792] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:45 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat(r8, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) syz_io_uring_setup(0x588f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x242}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x621a, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r0, 0x0, &(0x7f0000000500)="5b37fa3472cd1b8f474d4ad10f4dd6edc44d9414031801fd3c3426b6de0b24765e9731aa0c51ba765d7ff14376b696ebefd7a988307432d9a61f9b9fb868dd7bc949dbc50365223b0206b5278616", 0x4e}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:45 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 40) [ 1191.723324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.739976] FAULT_INJECTION: forcing a failure. [ 1191.739976] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.741406] CPU: 1 PID: 8382 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1191.742232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.743211] Call Trace: [ 1191.743524] dump_stack+0x107/0x167 [ 1191.743956] should_fail.cold+0x5/0xa [ 1191.744407] ? create_object.isra.0+0x3a/0xa20 [ 1191.744935] should_failslab+0x5/0x20 [ 1191.745382] kmem_cache_alloc+0x5b/0x310 [ 1191.745867] create_object.isra.0+0x3a/0xa20 [ 1191.746387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1191.746983] kmem_cache_alloc_trace+0x151/0x320 [ 1191.747537] ? io_async_queue_proc+0x80/0x80 [ 1191.748051] percpu_ref_init+0xd8/0x3d0 [ 1191.748520] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1191.749155] io_uring_setup+0x14f6/0x2980 [ 1191.749658] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.750253] ? wait_for_completion_io+0x270/0x270 [ 1191.750833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.751443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.752041] do_syscall_64+0x33/0x40 [ 1191.752475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.753069] RIP: 0033:0x7f9af1df9b19 [ 1191.753501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.755638] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.756533] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1191.757356] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.758202] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.759037] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.759870] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 39) 14:35:45 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 40) [ 1191.804654] FAULT_INJECTION: forcing a failure. [ 1191.804654] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.806056] CPU: 1 PID: 8388 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1191.806850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.807801] Call Trace: [ 1191.808104] dump_stack+0x107/0x167 [ 1191.808528] should_fail.cold+0x5/0xa [ 1191.808966] ? __d_alloc+0x2a/0x990 [ 1191.809384] should_failslab+0x5/0x20 [ 1191.809829] kmem_cache_alloc+0x5b/0x310 [ 1191.810315] __d_alloc+0x2a/0x990 [ 1191.810709] ? find_held_lock+0x2c/0x110 [ 1191.811177] d_alloc_pseudo+0x19/0x70 [ 1191.811617] alloc_file_pseudo+0xce/0x250 [ 1191.812092] ? trace_hardirqs_on+0x5b/0x180 [ 1191.812585] ? alloc_file+0x5a0/0x5a0 [ 1191.813031] anon_inode_getfile+0xc8/0x1f0 [ 1191.813524] io_uring_setup+0x138b/0x2980 [ 1191.814010] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.814589] ? wait_for_completion_io+0x270/0x270 [ 1191.815154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.815760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.816362] do_syscall_64+0x33/0x40 [ 1191.816788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.817381] RIP: 0033:0x7f2db9fa8b19 [ 1191.817813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.819916] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.820792] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1191.821619] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.822447] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.823262] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.824081] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:45 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x0, 0xf4b2}]) setresuid(0xee00, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x2f, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/211, 0xd3}], 0x3, &(0x7f0000000280)=""/58, 0x3a}, 0x0, 0x1, 0x1, {0x2}}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r6 = dup2(r5, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1191.829475] FAULT_INJECTION: forcing a failure. [ 1191.829475] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.830833] CPU: 1 PID: 8387 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1191.831619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.832580] Call Trace: [ 1191.832881] dump_stack+0x107/0x167 [ 1191.833300] should_fail.cold+0x5/0xa [ 1191.833751] ? create_object.isra.0+0x3a/0xa20 [ 1191.834276] should_failslab+0x5/0x20 [ 1191.834709] kmem_cache_alloc+0x5b/0x310 [ 1191.835176] create_object.isra.0+0x3a/0xa20 [ 1191.835680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1191.836277] kmem_cache_alloc_trace+0x151/0x320 [ 1191.836809] ? io_async_queue_proc+0x80/0x80 [ 1191.837311] percpu_ref_init+0xd8/0x3d0 [ 1191.837776] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1191.838393] io_uring_setup+0x14f6/0x2980 [ 1191.838867] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.839441] ? wait_for_completion_io+0x270/0x270 [ 1191.840015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.840619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.841213] do_syscall_64+0x33/0x40 [ 1191.841644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.842240] RIP: 0033:0x7f72c981db19 [ 1191.842669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.844764] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.845640] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1191.846473] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.847287] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.848097] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.848908] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:35:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000008c0)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) sendmsg$inet(r0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x200, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) 14:35:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 40) [ 1191.963732] FAULT_INJECTION: forcing a failure. [ 1191.963732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.965197] CPU: 1 PID: 8401 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1191.965989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.966951] Call Trace: [ 1191.967259] dump_stack+0x107/0x167 [ 1191.967680] should_fail.cold+0x5/0xa [ 1191.968123] _copy_to_user+0x2e/0x180 [ 1191.968561] io_uring_setup+0x11b5/0x2980 [ 1191.969038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1191.969617] ? wait_for_completion_io+0x270/0x270 [ 1191.970200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.970807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.971413] do_syscall_64+0x33/0x40 [ 1191.971837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.972430] RIP: 0033:0x7f72c981db19 [ 1191.972855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.974987] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1191.975864] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1191.976688] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1191.977501] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1191.978325] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1191.979149] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1192.346682] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=191s [ 1192.347829] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1192.348672] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1192.349453] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1192.350326] print_req_error: 26 callbacks suppressed [ 1192.350336] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.352156] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1192.355728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.357973] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.360399] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.360471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.361628] buffer_io_error: 6 callbacks suppressed [ 1192.361643] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1192.362859] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.367503] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.367655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.368731] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1192.371883] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.374268] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.374339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.375493] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1192.378435] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.381263] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1192.381913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.382535] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1192.385840] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1192.385918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.387992] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1192.388091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.390274] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1192.390343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.392418] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1192.445846] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=191s [ 1192.447156] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1192.447915] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1192.448676] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1192.450030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.452082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.453582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.455168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.456446] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1192.458208] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1192.461363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.462770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.464332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1192.465736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:36:00 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 41) 14:36:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1206.025596] FAULT_INJECTION: forcing a failure. [ 1206.025596] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.028032] CPU: 1 PID: 8413 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1206.029465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.031229] Call Trace: [ 1206.031786] dump_stack+0x107/0x167 [ 1206.032553] should_fail.cold+0x5/0xa [ 1206.033355] ? create_object.isra.0+0x3a/0xa20 [ 1206.034327] should_failslab+0x5/0x20 [ 1206.035127] kmem_cache_alloc+0x5b/0x310 [ 1206.035987] create_object.isra.0+0x3a/0xa20 [ 1206.036919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1206.038018] kmem_cache_alloc+0x159/0x310 [ 1206.038448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.038905] __d_alloc+0x2a/0x990 [ 1206.040991] ? find_held_lock+0x2c/0x110 [ 1206.041858] d_alloc_pseudo+0x19/0x70 [ 1206.042686] alloc_file_pseudo+0xce/0x250 [ 1206.043566] ? trace_hardirqs_on+0x5b/0x180 [ 1206.044490] ? alloc_file+0x5a0/0x5a0 [ 1206.045313] anon_inode_getfile+0xc8/0x1f0 [ 1206.046228] io_uring_setup+0x138b/0x2980 [ 1206.047124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.048207] ? wait_for_completion_io+0x270/0x270 [ 1206.049250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.050379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.051471] do_syscall_64+0x33/0x40 [ 1206.052255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.053342] RIP: 0033:0x7f2db9fa8b19 [ 1206.054131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.058038] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.059643] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1206.061148] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.062661] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1206.064168] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.065679] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1206.078537] FAULT_INJECTION: forcing a failure. [ 1206.078537] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.080965] CPU: 1 PID: 8417 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1206.080982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.083886] Call Trace: [ 1206.084445] dump_stack+0x107/0x167 [ 1206.085225] should_fail.cold+0x5/0xa [ 1206.086053] ? create_object.isra.0+0x3a/0xa20 [ 1206.087024] should_failslab+0x5/0x20 [ 1206.087831] kmem_cache_alloc+0x5b/0x310 [ 1206.088706] create_object.isra.0+0x3a/0xa20 [ 1206.089633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1206.090740] kmem_cache_alloc+0x159/0x310 [ 1206.091627] __d_alloc+0x2a/0x990 [ 1206.092361] ? find_held_lock+0x2c/0x110 [ 1206.093228] d_alloc_pseudo+0x19/0x70 [ 1206.094040] alloc_file_pseudo+0xce/0x250 [ 1206.094917] ? trace_hardirqs_on+0x5b/0x180 [ 1206.095835] ? alloc_file+0x5a0/0x5a0 [ 1206.096663] anon_inode_getfile+0xc8/0x1f0 [ 1206.097290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.097570] io_uring_setup+0x138b/0x2980 [ 1206.098716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.099548] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.099571] ? wait_for_completion_io+0x270/0x270 [ 1206.102699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.103812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.104904] do_syscall_64+0x33/0x40 [ 1206.105686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.106779] RIP: 0033:0x7f9af1df9b19 [ 1206.107199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1206.107565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.107581] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.114075] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1206.115580] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.117086] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 14:36:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xb55c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) creat(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x6bd, &(0x7f0000000140)={0x0, 0xcee8, 0x10, 0x1, 0x190, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) 14:36:00 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 41) 14:36:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '/{\x8e[#9]]\x00'}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) dup(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:36:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 41) 14:36:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[]}, @devid=r3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x40, 0x1f, 0xac, 0x0, 0x6, 0x1c00, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x20, 0x1, 0x5, 0x4, 0x1cbd80000000000, 0xfffff763, 0x2b5, 0x0, 0x3, 0x0, 0x172}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000003080)={r3, "1f97da2d965551153358c180300791a3"}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r4, 0x5608, &(0x7f0000000200)) fcntl$dupfd(r4, 0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001e00210c00a900f24de8e786f614bb93706c33824a"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6771a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b00d60935a8bdea24680cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e79449f451dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbda8c70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca97391"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB, @ANYRES32=r5, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1206.117097] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.117108] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1206.143009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1206.147405] FAULT_INJECTION: forcing a failure. [ 1206.147405] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.150087] CPU: 1 PID: 8425 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1206.151549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.153288] Call Trace: [ 1206.153865] dump_stack+0x107/0x167 [ 1206.154635] should_fail.cold+0x5/0xa [ 1206.155441] ? create_object.isra.0+0x3a/0xa20 [ 1206.156402] should_failslab+0x5/0x20 [ 1206.157207] kmem_cache_alloc+0x5b/0x310 [ 1206.158077] create_object.isra.0+0x3a/0xa20 [ 1206.158999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1206.160073] kmem_cache_alloc+0x159/0x310 [ 1206.160957] __d_alloc+0x2a/0x990 [ 1206.161690] ? find_held_lock+0x2c/0x110 [ 1206.162555] d_alloc_pseudo+0x19/0x70 [ 1206.163361] alloc_file_pseudo+0xce/0x250 [ 1206.164230] ? trace_hardirqs_on+0x5b/0x180 [ 1206.165135] ? alloc_file+0x5a0/0x5a0 [ 1206.165971] anon_inode_getfile+0xc8/0x1f0 [ 1206.166875] io_uring_setup+0x138b/0x2980 [ 1206.167778] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.168847] ? wait_for_completion_io+0x270/0x270 [ 1206.169908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.171019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.172121] do_syscall_64+0x33/0x40 [ 1206.172911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.174011] RIP: 0033:0x7f72c981db19 [ 1206.174808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.178739] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.180360] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1206.181890] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.183417] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1206.184941] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.186489] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:00 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2, "0000b44dfd1808a70e0008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x208c02) ioctl$KDENABIO(r1, 0x4b36) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000580)={'syz_tun\x00'}) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x2, 0x0, &(0x7f0000000480), 0x80000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/462]) openat(r5, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 14:36:00 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 42) 14:36:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[]}, @devid=r3}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x40, 0x1f, 0xac, 0x0, 0x6, 0x1c00, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x20, 0x1, 0x5, 0x4, 0x1cbd80000000000, 0xfffff763, 0x2b5, 0x0, 0x3, 0x0, 0x172}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000003080)={r3, "1f97da2d965551153358c180300791a3"}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r4, 0x5608, &(0x7f0000000200)) fcntl$dupfd(r4, 0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001e00210c00a900f24de8e786f614bb93706c33824a"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB, @ANYRES32=r5, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:36:00 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x401, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget(0x1, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 1206.334870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:36:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 42) 14:36:00 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 42) [ 1206.406339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.407798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.409175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1206.410348] FAULT_INJECTION: forcing a failure. [ 1206.410348] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.412915] CPU: 1 PID: 8447 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1206.414389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.416152] Call Trace: [ 1206.416720] dump_stack+0x107/0x167 [ 1206.417495] should_fail.cold+0x5/0xa [ 1206.418315] ? __alloc_file+0x21/0x320 [ 1206.419069] FAULT_INJECTION: forcing a failure. [ 1206.419069] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.419144] should_failslab+0x5/0x20 [ 1206.421557] kmem_cache_alloc+0x5b/0x310 [ 1206.422432] __alloc_file+0x21/0x320 [ 1206.423223] alloc_empty_file+0x6d/0x170 [ 1206.424071] alloc_file+0x5e/0x5a0 [ 1206.424823] alloc_file_pseudo+0x16a/0x250 [ 1206.425712] ? alloc_file+0x5a0/0x5a0 [ 1206.426540] anon_inode_getfile+0xc8/0x1f0 [ 1206.427437] io_uring_setup+0x138b/0x2980 [ 1206.428324] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.429391] ? wait_for_completion_io+0x270/0x270 [ 1206.430440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.431547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.432629] do_syscall_64+0x33/0x40 [ 1206.433415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.434504] RIP: 0033:0x7f72c981db19 [ 1206.435286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.439185] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.440795] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1206.442316] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.443828] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1206.445338] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.446854] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1206.448390] CPU: 0 PID: 8450 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1206.449380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.450581] Call Trace: [ 1206.450966] dump_stack+0x107/0x167 [ 1206.451482] should_fail.cold+0x5/0xa [ 1206.452032] ? __alloc_file+0x21/0x320 [ 1206.452594] should_failslab+0x5/0x20 [ 1206.453130] kmem_cache_alloc+0x5b/0x310 [ 1206.453707] __alloc_file+0x21/0x320 [ 1206.454239] alloc_empty_file+0x6d/0x170 [ 1206.454817] alloc_file+0x5e/0x5a0 [ 1206.455317] alloc_file_pseudo+0x16a/0x250 [ 1206.455908] ? alloc_file+0x5a0/0x5a0 [ 1206.456454] anon_inode_getfile+0xc8/0x1f0 [ 1206.457068] io_uring_setup+0x138b/0x2980 [ 1206.457658] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.458387] ? wait_for_completion_io+0x270/0x270 [ 1206.459113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.459863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.460613] do_syscall_64+0x33/0x40 [ 1206.461141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.461877] RIP: 0033:0x7f2db9fa8b19 [ 1206.462403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.465002] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.466085] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1206.467092] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.468091] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1206.469097] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.470105] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1206.485737] FAULT_INJECTION: forcing a failure. [ 1206.485737] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.488180] CPU: 1 PID: 8453 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1206.489620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.491377] Call Trace: [ 1206.491951] dump_stack+0x107/0x167 [ 1206.492721] should_fail.cold+0x5/0xa [ 1206.493528] ? __alloc_file+0x21/0x320 [ 1206.494360] should_failslab+0x5/0x20 [ 1206.495164] kmem_cache_alloc+0x5b/0x310 [ 1206.496028] __alloc_file+0x21/0x320 [ 1206.496813] alloc_empty_file+0x6d/0x170 [ 1206.497677] alloc_file+0x5e/0x5a0 [ 1206.498450] alloc_file_pseudo+0x16a/0x250 [ 1206.499347] ? alloc_file+0x5a0/0x5a0 [ 1206.500170] anon_inode_getfile+0xc8/0x1f0 [ 1206.501067] io_uring_setup+0x138b/0x2980 [ 1206.501968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1206.503035] ? wait_for_completion_io+0x270/0x270 [ 1206.504081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.505193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.506296] do_syscall_64+0x33/0x40 [ 1206.507083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1206.508161] RIP: 0033:0x7f9af1df9b19 [ 1206.508949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.512862] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1206.514483] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1206.515990] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1206.517497] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1206.519005] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1206.520522] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x2}, 0x1c) r1 = syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd, 0x10000000}) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="5654a1abbc8dd937873851c4adaec269b4c4bdc163a0fb3fe7c9d3415b3caf9b041807d8ea115a540a42f50a8fdda625101e57f9e4745eb6a49fb4558c9e6e726af0a9875a89f5385edb520bc83027f5efdd4c29c2e7bd58e40eef4dd284dee2a53501e74a2db1b0734badfbef563c63d6f84d0d9a94b4cbdf091f57ca52c3ae0965088430b459", 0x87}, {&(0x7f0000000280)="68045a189f063948c3641b5bd826e4e9bb9b6ba2732e227325e9beda4037109b2fbd23d6eac6772d9eed2d10b138567389e50da3847252fae238c0b6d94ba2ce6f8cb1e481930de6a57389e657f0c53895f4d23c6e4d583e44830b52f1d77df01e75e2d2a3de0da2013e3b9cfee51c7fa0d6256be25a2542456d525df5932fcefa4f912a4cdef91c67dab95f9eff0b05a1a2ffe04b0e14c45ceaccd1eca1ac6c67c33174d6856efc62de5d5ad29f0565e9c02dd7d5a3bb2636d751eefa3eea610c582a1866ea93fea67e6aa1", 0xcc}, {&(0x7f0000000940)="c2dcbc94c2c8d247d24579bc24b0a9d2ae9d1a2140b886ff7324ee4befdc54a15365f24c08520037fa0bc93f34ae32e0954933db7b95235f270350bb8da7dd83f342fc83e7e1d7da199d391037b176e2bcf5d59f4d9de001daf5388991688d36d701a61848fc2d2a8ef2cd699080381e5cbeabc810993e7d39bbc91db4970cf9d9ff41be37a6dd9bca46c8dcea9e1acadeb2a4395a8cdb56b5d0ec1977841f9551b5f7cb64eb2f11edb7a9e8aaa5e989e079b2816d90db4178e1aa9e7152574bdf6a167313914aff5adea769780f5a5dc5caca5acdecf20a7f058ab181372fe8c868963fb5ed885106c2bf18435b1fc33a39cc8d4ede0e28108081679ea0730ce752c2df9ca0bc3f35a9620b44d8f0b7a487896a572c7d970594a919b7649873a6f0f856d1dcbd9e074b0e00a644e797965ef4cff22e631f8ef3f03e9dea53d295ebd5d249eeff1308af5ed9b0c606b9d6fe0a2caaddd1b527425f21ce8f9685d20ac7597d2f421603c240653b42dcd9e3d3f0fc55acd326779c8c611d5b5f413db488fd8bbea2a486beeb7e77fedbd961dd5a5a5d3edf255e2e6224b411820485791d47ac89af4e7c9f8ec759ae94bac50fd8ceb62a625cafdbe4b99ae3fb5c13c6865605e0e2d623b1a26077bdf425bb6c1bfbf4a79f31a4cd688dc068d593f2b99d07c91a45314f0210dda258b51f063d4b69e393fa2a5345fe5c1728789f64115f386fa803516e7dd3de5d32d0410736e4ec2c7b99d9a60f63c2aa43e4f55846866ab6654042f4ef607a05591105da69216d2c574aba01e5a869d246494c80568bcba496ea89556644df38dcd4b4deee15ee383481feba8719ff422f19c9959293cdf57d25a3faa0ff84d278624422ec2c0812032fb63af10d304290e32f3ed51ff84f56e3cd3241dbc010503cf58b718f0492af1ecaa7d77979265582ce1b5e60423b3419f9c3983e99d52bf43ff95a186ae58d8b8944b428202fe6e56cbc6b2821cbe354f14f7d44743ad201581abe8e97ef445e1c91ecce57f884b6ce25fc2a53a1d24269786caa522cdb32b34597f3f894a470fb023b1c8862c1ed07d5fe09af5412a5e8e2fc2ea80100b259181792ccc84ae97c33191c4431b47eafac1da9f77e777af4b74e79dbd104a0a9c023a15357a96fc0477fa0e2b23541d96d71a9d75bb5a9517cc1feebc5f10983864de3daaab3befa0ad7cee380ace9bc07a0cdb28ff573b6a81d925dd733e6be501ffdeaf972152a37a3bab7e86aeb09351b42fde4d0a2370149f1b4742a27798e32a41227b27572c0237f79ab6322d2e06143d9f292c2267906b02a3f2c0e58cd268b0b1f0de9403c22b90c286bb0c649c1b4959a28a48e4b841a64620bc0c83fac687ecd9e09cc8ddcdf62d099143f0ca3bb1a5692e8e4db7d6a4555d45d18ab7f57879181f8a097da905e64aedfb82c62df9f8143f2ec9a91027537f77cb317adcdbfdab76f54c3c6b6c88cfd5dc51f9f6d97acab200d2dd679930226da391cc8189e9f1da81fc21fdc3a44a69893625d2a6a6d9ddabfc3585c423a67554816b8da8c6b56e0fc967a1e16143d906d94e5855283ad042d78ddb52b1650eef0f2eb8df92d29ce1ac60bdf3da1bb283f05d689b45039b40a1a981dc010f96fc67257896f542f8aa31da9b2c4fbbd77a8d01afe49a8113ccbd80502b756801800c0f6507c0d74907dad9305f35a59f5a4eb60f3808845b0e4e03ba78c848bb0d3b275c9c799c9dede8059b45cf4463bfe9d5fa4b7d4b06b3c0d699defb20d8f9fb09ba74dc9745d90bb54f6919ad8a278770cc193bcaa7abb39d673668a58eed91245cdc52d0ccd36a1c3b1325c1c63381e40ce98a22ea8bed2083bf09a8d557883ae365ddb0ac8b2f9fb2d7217b9f40035461bba71e187218c6c7208157759dd2b5555bf0ede98dcfadfe0bf04286f2a461f682f9f103ec2f8c4231f16c797a98527b14e9d6d2a37469422e7e094009a0e9ce30b70a81d866840e7b0424264e862a629e15dc0f9fc89ba7ad0f551d2dd371c2ee424fe8007651b9577b50541fdf5b3f5a8fc670c46a2a6e982633f3c1fa18ea8df71812b399a40f1dd26401746c4e84bedf39d70e7879bf28ff67094e5eff573ae973b01e027710e28861bbfca314272cc6949232c5f8ce34853d5df7001f4759ae08c9ad7966c7f36bda930709e0217e1a0a6eab6def3e39cd23b1f389ac7da67edd19b19babb27143e1ce4a3e487be9c37acfa369bb16a0b89afcc611b3fc98defc4eea32f6441834675d29f7f8dcead3b6a821ffb1dcbd7b7f52f86400af5d70201cb336dfd5417b680db86d713de42e60e640288ae8cb01c748cb748f2be5df9bd7a570dbf27240dbacd1c62273b822819c7e0a6457a2b57dad5c7468d11977e387fbc54e6fdb4384a99e99612a9993b04fa16828332aab54673d6e27b0678560195842358d2ffd251302f0b2e88d6083f9bf145797d92984e801d1c4d9d9c26a8a78a80a55b02896636073d7864c8dd21df1e8ada3609e6fdc48fe42f8c1adda515fc32614339c86cd6a0665170820e7009476a9c5fd98fb34e1bd092839f27508acbf2857f6827820ed1ad648e7431ccaf1b736e181b5a791b8203893e924da3e8079f38a11d18194f7dfdc38d93014d55aaf726f5dc5be9ed49ac41208a58b625bbf56f84552fa5ce42cb0dcf22e3d0376cf61f30b13319b8fac6a6ac81718ecd370ac49e273d72ec10667f4f9a67c16f74533b323fdd02ba03627ee1ad64af3a544d184e90a3b1b7001d9c4c1f7516147a9c35a501dda774e009fe4148a979c7f3dba6a248714deff8fd94caa3e68038db18463fb294d3ec3fccee39f87e26c504312c2abfd4fd37e3c4462ffa5c20a53145fa7650545c446d236b5c89c65d29443a1f51eb0e27fbba43d9d88882e9ecb7a31ce4a779058b772e0f30e1043aaaa4875c79861aa7f912041c7f773d97381167e41576d9bc68fdc6211226af32acd78d81979f371a434cc57555a7dc70d048948381f5f2f8895071725d6d209b24ec17765cb3868b598c4cc323c030436d04aed90b56914edd6809a674bdf37fe9f2281e336ecd18bd9c818442e32e6bc468e874cf28d60ad307502f0c3f5f56659fd995be78b4afa13a90312c1d17e6cf367218ef0585d237f70b13734f21404a8277f14c5b82b92e4bf3e74027560e7b4fa16856bfbdfe0438eabbf1c46161d8469b406a4d6c62ef4f660871621246066b4aac588199aac57e71d5ddad32dcddf91743afae9aee45da7fcc04978ec074abc76cca073281fddd3549522e89176e0f0f751cb7f9aa3496a5b6e53921a02bef1d05ef12d59ac5165fa1b8a61fe522b8b7c2e79edd0fc3a5762be9f0488e5136b2c38b7d9cfbaa287c5190334df26c02a9d8bd4961c898f0a1e2f56cde2ae38f887750ec67d4a62a1ecf634a10ba0f5f892e4233d8a0208bcd981aa68aa39a5c61413a8ee7e89ac026c0179086177364a08991e8422587d0caddc20e8cb4015cc5cf711961a2f94e7cb1bb84d33da1c5a5f66e1fab53140305da36572059ad40a2a8a280753ab3f4f29f69b1b623458513408f9331a90f6ab73a565986d1d52b82cd7f484f276652cd47b5d5124d9a5484983cfb3250abe31abef552c44756792ebd458c550fce4ed8c115ad1155b34f516ab53b54217afa7100ed39afc2f386554f27b08ae5e90185dfaf645fe6a55d1b48c4c30f0c7d895c8e9b14c7c51667b32d123bfb217de710d2b5b04d71d38b5604af9aa497b6ed0254d9131d39a90f1f8d7f364eec40c600d2c4f9a688ce6beb01fd6a9360e6aa469e46a0e149cc76449fa41bf0419ee7ade0becad8377b27def9e071a82b355f367b68f400565f08e7217e84e1cc76f942284ae2aab1a119d32282f7a4bb2e45119f71ecc74141509eb14c006e89bc1ea97a9829d6094bd65fd616709832d735793582971d7b8c2dfae369669e05b05f9ac479b5b0eb70afc1404633f7f162f783f964cdbbe1830d6d749dc1cd6a48b6f68e0d16930ecace6a7b19c745835bc13619e86bbb8da555b7a829723a595a64b663c44e9a87098ec6c09c941379355009f641c1aa6652ef0a74c95e6ed58bee5e393ccef0a4be2eab62dbad2941fbfdb4156a4371c21d9af8210be11ba275ec375583632b8b49b9853b4479e18383e57ce60ce599d277ec70db14d2045976464cfe446686040183382b3e812ab3e6141297d00659296e2deb69767d6d5354b1b1c6afb5e66d5908e0a46be04d79bc18dc3795290c8d402990240eeacc4be54d1474e982a6d7a1cb7ee1e525a08f1589b7c42022cd7166ad189964fe5833f3fef591c509ae91e02db78cccac8c26d57b3c5dd2066ab248367e3259a7d6f03fdfa83f7e380a5da62903db944915e26d4d912ce62d6f414f6c760dfb8e02f9784d61a0cb9f8f0013b996473b5b1b49c4129f0dbd4a2070b38b5c4608ebbc79cc0297bfcc530f45bad787476ffcaf19b8a6ac538c0016461eedebf0ef31bcf790d4bec9c27c9925126e04ad5c6003959de7ec248e33261e129f08aceccf5fcb8509c42c4a6bcc3e309334359e24df82e2d3d5e7120b2b9c6cb4b14b6739a2a89bf7e7c8471e782cb5c4319a031b15234056068ad9cdef907d78965fdbbacd8d40bdeaa0313cb1dbf92c2b8d8ea24ab2f62bec5b15cbcb734de56b22fcd5663e76c26a758ef959499945a6f80a0d298e93297a5e86c6600d99c74e3610ad78021f18a487407cb70bcb1b58012afe620435507e192b467a4cad45db50dc03d2d20117c72956bd37bb18ae428c7d94c1da2ff282e437e81a1b2e0d9d00aeda60cca85ed618c36d36911f74cba27900dd1e7050fcfc8c87359352274c25083d66f7d0af35ba69200fe015896904b835b517b9c7eea7347e093e7bca162e2096b95dfa534bb17329bb2fadd95fa540ff48941b8e0005edf4d21f2e3b07fd930df96a71400c11b603b0eaca17178cf9917a9ea54f0c510bb9e095c6ade53d7b1fbd8b1077ab89ee0459384902b4dbd9bd3e5072bca3f785cb0f29c76a073f6093fbc1f8422930c19bd0ccf78511a9a427894c5289593a7ce723c77684af1c7678607d3f44f029146d33b916796cba165d27351afc5039b04d0af8355b3f67ebf64948524ac5689bd21d1b182c26c1757c92e75cb8dbe84c242e9e683047a78ad6c7b4d8258348ede67afa48e69a6aad3a003648e5bca91f2d1f7ec79da7254a4ff11cfd188f7b3597e5dbbd5603e16e1e20d34561dc1be8d9625e4d8b966593ba2f2d651a67b946c47f1df71211528a3ce07d6f996108fc93996ebb091f6891fc781596b24ecc59fd398cf6b58277f94226b2111d949812cc4acfd8b60807beb5890b736419cfcea4def204cb5b429d7eb55a72fc9c3abc14236bd852aea0aa3888c35a37e9ed6351093fbcfb9fa6633f15dd94cd2a3c3ced383c81a8d179e247cf24443951a158f413d88ca81eb3378b9ca1d445cfc9f703fdb032add94875e3eb67f2059c82766228042560e9ce0935a940733ea5db3466466a00834e2396dbba08a9c62e6ae1a66dc7e40f2952b5b4645ade5283090e4df313c2971daa17253c1f4fec6dfc26d739eb9a209ed223ad54276d7c32bbc1afe4932098a6dfe440f121ea0d8b32d820947b0d8f1714f954945e1fe8ff9ea261dfae2b9513bf2deb0988dc45b224763225b8e387ac99696e1be96593afdb548e908cb443da8bb5603af76146d8feb921ac5f5841bbc03d73cd42d2610b4d4dd8e359bd1bf97cd956dbb0aebe", 0x1000}], 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000100)={0x0, 0x3}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000003c0)="3794cf0d7bfead50d60db8a2259c0c20106799896db6e817a06bb1616347ea3333d96ed9b9bf9fc897ea9380f79f8ab186d3154fe617105f8c5011a87fd1dfeabb61f489037646efad4fceebf741dd37ab3a31763827fbc25d8198fb20d1eca41c1c38e2e73c8ad1a0fa", 0x6a}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000480)="1813288837fe3fa2a5d8913b2d1475436c42a037c5208af7367db8f384944c7fa4ce073c7899978e18878254c4a083395d232ee218a47749529073af60f6db2c6c9627c5d2c0dea7a7246733b639c372e4818842631e31985b017a78827c384981742eb12554fe6fa850efca05b5f4878cb967f373d2581fdcc7fb20dda98c4caed235d04aaa7dbbd5325bd611c8a1f46fbe7a190b5c020c3772c739d3a01e", 0x9f}, {&(0x7f0000000580)="ac130d402a5dfe84ec1e49b286d0c13d915699215601f37b8ce1d185ad677f82c5cf0d0ab54aa9633b55", 0x2a}, {&(0x7f00000005c0)="c7d3741b9e48faeb6ec99911b0ca61c498bab66ada6a77fdefdd4fcfc54f697b14b49ab0194823a73d545a5dfdafa7ad880a34c3ad770f11922c17b2b9439d442a8a5da86bea261bd3ac75c006", 0x4d}, {&(0x7f0000000680)="e54d97a1616b1cdf3bee8cf30bffb17a015993c1d5a23d43673190ba6819de615440376a2e79bb8ba409748cc9fab40dd96fd830993fd725a22a0d216b971f", 0x3f}], 0x6, &(0x7f0000002e00)=[@dstopts={{0x78, 0x29, 0x37, {0x4d, 0xb, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x2, [0x6]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x4, [0x7f]}}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x8, [0x10000, 0x100, 0x100000000, 0x4, 0x1ff]}}]}}}, @tclass={{0x14}}, @hopopts={{0x100, 0x29, 0x36, {0x3b, 0x1c, '\x00', [@enc_lim, @generic={0x1, 0xd9, "b6c990d42374dbda854f14e1433f3e79718ba497fefd32647f739db6e5e10019ec6b9e369b8ce695990801e326eda82afe33c63c1135a23ed92764bbc00c2d34711c0264f66708987c065a51cddcdf9d8f3b864501beb8c2c365769b9d21c96be8e2de22906d16e25f18109c88006ac7599bac735325ed986168977f79ca7abb494f7f0c63e43ae4bc53b65ef59b86b3c8248a6f6e453125629ae51aa822aa441b4a452cf0cd3ab9f0aee6501dbff248046b031e26e2c0e410e5ea0407ad7f915f7f732aca5fb0dfbfba90051bef7b27e24e8ff96fa5336ebb"}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}}}, @hopopts={{0x30, 0x29, 0x36, {0x88, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x20, 0x7f, [0x4]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x178, 0x29, 0x4, {0x1d, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x5, 0x3b, "c4bb1894f3b8d85c8cfabdf04c9d1b0fac65a713b62ecf51e47fc9171303e4aabddd2221502a89a53fe53c7ec6fdb01d7272e77d5740aa2caf63de"}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x1, 0xf2, "7b2668988a8caa9aa2da90d728212eb5171d809d38f09ede8295034c8eb35226403bc1cbe2bef2b07bdb46286f959ae4277abec8d50570c8d8f3fa05d72981d9b265ac3428a7813104a5e76a6971f527347e11ff1f10f896bbf17e4fbd10a632baa1fcf69eec220de33f7493b9f40e16c41a1e053d305c8dcb56ba3f51900943c0d6f69b64967fd65a91a3a6302108b2a32fde87c7c44f3107ac5f1602e0ffebeb6293d70fc4ce184bd21acc6c6f6ea9622c79d3b18e6d602eb1bad6a6e03ea0686d9b0b7efe6c619a23a509d6074f8ffc4c3292e5fe129d3c66dc8aacfd1e2b69f7667d9677d031c3883ecf12e13ec7635c"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x33, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x68b}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x100}, @enc_lim={0x4, 0x1, 0x20}, @generic={0xd1, 0x80, "5bb257c330d926fa49f8e1a0793d727a81b6b5440dd6c4288a9c5971a0754a4a449b478b56b915971364bdf706f1725fee8d1abd727235e52e1c5a15cf37da21ed03f17b0201d15cf1a0922bf1af8f95c98d3ea975ac758db22ef19f59f9b2b488db203bc85563b98f4b3f89f74de1fafba89ae1a5eda7101517924a1a0a8d7f"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3a, 0x14, 0x1, 0x1, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @remote, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x4f0}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x7f, @empty, 0x101}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000780)="07025ca8bc587831dc633a4fd5f1716c7a465c66052582536c41273d95e3f647e91d60bb5fdf685bdc2ed0fefa7ddeb832d965bf40eed68a2d89446dbbdf5ff8bae79e29e5955a46678c1d9165a8e28f7967c571ad34d1170153b872a43be61935a68a7c6f2b53ae1050b87a3168e9c9215d1a5cafcfd43af4b24d3837c802c18c93b70f885614afe5744e80ad33c9c8dbd36419341049e34986685f77b5a8faec7515790da7baf19e83620193674f5ac13c47217a4180f423e707be6c9e469edf9e2303ef4ab8", 0xc7}, {&(0x7f0000001940)="fff8892939d0c66b9963e8f58057f29fa6fa660daf7cb867f9a33fc8e046068ac15733430b972d59a81b18b1bf75eb70911df388df8a32b73acba6499802918ff38b1c4fdd3205a86bc944c8d7779e3efe5ef5dec878bb0943a899980b80660a7d8e1a2090f36615875822dd75df2b0ef1593cca90bff6f93cc1c8b6fe78c60714e73043a81f90380b3c64ed0afe46f3a7f66ede69508e53732e04b503f7309284f45635f634280d86a0cdb6049d", 0xae}, {&(0x7f0000001a00)="143799703888a2b8ccb47300ad61effb4619d841403307156ec5cd63eb730efeead91ed43e1326180061c06702f8e19acc1d6fbc9a6d4c63a393ca192c2783b17f5ca9368635e22a4b12f64382c580d9a7519790f62e7468b04299bf64aeb6602ee9288333827af3758424bdd5", 0x6d}, {&(0x7f0000000880)="f13aef05fd5db262a13e206ecded16a0d9e97e5e1524add6f3fd1fb299996a679caa9d5967e81b897f45ae16b93633", 0x2f}], 0x4, &(0x7f0000003300)}}], 0x5, 0x8080) sendmsg$inet6(r5, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0xff18da7307058fc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x9) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:36:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$CDROMSTOP(r2, 0x5307) ioctl$CDROM_CHANGER_NSLOTS(r2, 0x5328) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468e334a0dd5a6d1bdfcb9fe5886d8106ba804cdb4a5fbdb5b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d4605e9687c189bd3c9af4818309472fdafad9501944faeeec4a9a2d51a6ce7e9592562f94bf358e76b856032804da315aa7f0485a20b1459fe08e1fcc9234c75023acee2d1c3f3ddf3590e334aa4c308216f651492532a6ad1ac8a1445"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x4c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}}, 0x800) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) unshare(0x48020200) 14:36:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1206.589242] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1206.745876] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 14:36:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 43) 14:36:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff7f, 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x241808, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01001d000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x88000, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)=0x0) getgroups(0x6, &(0x7f0000000440)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="017700000100000018000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB='./file}2']) setxattr$system_posix_acl(0x0, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="28f847482621b78fa8aa333ae8aa02000202", @ANYRES32=0x0, @ANYBLOB="0200dad9", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="040006000000000008000500", @ANYRES32=r8, @ANYBLOB="10000000000000002000050000000000"], 0x6c, 0x3) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 14:36:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1220.123687] FAULT_INJECTION: forcing a failure. [ 1220.123687] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.126290] CPU: 0 PID: 8473 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1220.127841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.129714] Call Trace: [ 1220.130329] dump_stack+0x107/0x167 [ 1220.131155] should_fail.cold+0x5/0xa [ 1220.132017] ? create_object.isra.0+0x3a/0xa20 [ 1220.133055] should_failslab+0x5/0x20 [ 1220.133896] FAULT_INJECTION: forcing a failure. [ 1220.133896] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.136378] kmem_cache_alloc+0x5b/0x310 [ 1220.137301] create_object.isra.0+0x3a/0xa20 [ 1220.138308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.139459] kmem_cache_alloc+0x159/0x310 [ 1220.140402] __alloc_file+0x21/0x320 [ 1220.141248] alloc_empty_file+0x6d/0x170 [ 1220.142177] alloc_file+0x5e/0x5a0 [ 1220.142982] alloc_file_pseudo+0x16a/0x250 [ 1220.143934] ? alloc_file+0x5a0/0x5a0 [ 1220.144808] anon_inode_getfile+0xc8/0x1f0 [ 1220.145768] io_uring_setup+0x138b/0x2980 [ 1220.146712] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.147854] ? wait_for_completion_io+0x270/0x270 [ 1220.148969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.150164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.151341] do_syscall_64+0x33/0x40 [ 1220.152188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.153348] RIP: 0033:0x7f72c981db19 [ 1220.154205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.158374] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.160086] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1220.161696] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.163308] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.164917] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.166533] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.168175] CPU: 1 PID: 8481 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1220.169622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.171309] Call Trace: [ 1220.171840] dump_stack+0x107/0x167 [ 1220.172571] should_fail.cold+0x5/0xa [ 1220.173337] ? create_object.isra.0+0x3a/0xa20 [ 1220.174272] should_failslab+0x5/0x20 [ 1220.175037] kmem_cache_alloc+0x5b/0x310 [ 1220.175854] create_object.isra.0+0x3a/0xa20 [ 1220.176732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.177753] kmem_cache_alloc+0x159/0x310 [ 1220.178596] __alloc_file+0x21/0x320 [ 1220.179341] alloc_empty_file+0x6d/0x170 [ 1220.180154] alloc_file+0x5e/0x5a0 [ 1220.180868] alloc_file_pseudo+0x16a/0x250 [ 1220.181709] ? alloc_file+0x5a0/0x5a0 [ 1220.182494] anon_inode_getfile+0xc8/0x1f0 [ 1220.183374] io_uring_setup+0x138b/0x2980 [ 1220.184227] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.185242] ? wait_for_completion_io+0x270/0x270 [ 1220.186260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.187325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.188371] do_syscall_64+0x33/0x40 [ 1220.189117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.190153] RIP: 0033:0x7f2db9fa8b19 [ 1220.190913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.194584] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.196132] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1220.197570] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.197582] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.197592] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 14:36:14 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 43) 14:36:14 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2004c000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x200040, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5608, &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x3f, 0x10, 0x70bd29, 0x25dfdbfd, {0x1d}, [@typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r1}, @generic="89b8d7135150e431c146e0457c29153cb6f4377a3e8dcbff763a8e181cb1bfbf88a9202cc7daa6734cc565b0aeb37bf3befca9ffd549e47267772d970ecc6f52525794ffc2030744c6dec119ff83d0b6239ca4698d62268d04b29bf5c5ec5d94a5f1d640aa21fc59e3dcc867a593d1c7fc220ed4d3e6d435ff928ee2fcaeb34d1284f26055ba1f797089c364df70d2adc8ca59634fd3abb19056"]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c840) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmsg$nl_generic(r3, 0x0, 0x40001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000001d00210c0000000000000000040002000c00118007000000f32b00002ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6060f9ea0235eebdd073e56f754222c96"], 0xd8}}, 0x0) 14:36:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 43) 14:36:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_loaded', 0x8002, 0x183) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0xa, &(0x7f00000010c0)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x1000) recvfrom$inet(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 14:36:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1220.197603] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.215133] FAULT_INJECTION: forcing a failure. [ 1220.215133] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.215212] CPU: 0 PID: 8487 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1220.215223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.215231] Call Trace: [ 1220.215258] dump_stack+0x107/0x167 [ 1220.215285] should_fail.cold+0x5/0xa 14:36:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x111880, 0x0) read(r0, &(0x7f00000002c0)=""/82, 0x52) socket$inet6_udp(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000140)=0x401, 0x4) r3 = fork() fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x3) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x8269, &(0x7f00000000c0)={0x1a, 0x5, 0x9}) [ 1220.215311] ? create_object.isra.0+0x3a/0xa20 [ 1220.215333] should_failslab+0x5/0x20 [ 1220.215353] kmem_cache_alloc+0x5b/0x310 [ 1220.215389] create_object.isra.0+0x3a/0xa20 14:36:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) r1 = fsmount(0xffffffffffffffff, 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"/513]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f, 0x80000000}) close(r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0xa0) openat(r4, &(0x7f0000000140)='./file0\x00', 0x10000, 0x14a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e00000010000000000004fabc6da4dc08a470000000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000002b8575c7db27344c51d04ca791ba0c8f9d8581dbf1358eaf1be10682bd529abce860b01778478a7af3e269eb4b53d346dad0c1036887f91948faaaee66", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000026137e9523018d65049b9626aa6600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bdb80000080000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe45, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xff, 0x101}, 0x4040c, 0x0, 0x1000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f666924d4d19dd3cab20e3f0df7e993898614aa362a9f779e75e4982d737caa6841eb1a2fb9ae4f13a1ece25ba86471c2fe015709bcc25e07a63113adf25c660861b3ed20875e636ab877cc0d1f5cce01a84423a3e9aae19eb6c9083be8c2f28a22a2a000"/116], 0x81) lseek(r2, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1220.215406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 14:36:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 44) [ 1220.215439] kmem_cache_alloc+0x159/0x310 [ 1220.215473] __alloc_file+0x21/0x320 [ 1220.215497] alloc_empty_file+0x6d/0x170 [ 1220.215522] alloc_file+0x5e/0x5a0 [ 1220.215552] alloc_file_pseudo+0x16a/0x250 14:36:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 44) [ 1220.215574] ? alloc_file+0x5a0/0x5a0 [ 1220.215630] anon_inode_getfile+0xc8/0x1f0 [ 1220.215662] io_uring_setup+0x138b/0x2980 [ 1220.215701] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.215717] ? wait_for_completion_io+0x270/0x270 [ 1220.215795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.215816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.215847] do_syscall_64+0x33/0x40 [ 1220.215868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.215882] RIP: 0033:0x7f9af1df9b19 14:36:14 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 44) [ 1220.215901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:36:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 45) [ 1220.215912] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.215936] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1220.215948] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.215960] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.215972] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.215983] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.290973] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1220.413600] FAULT_INJECTION: forcing a failure. [ 1220.413600] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.413624] CPU: 0 PID: 8502 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1220.413635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.413643] Call Trace: [ 1220.413669] dump_stack+0x107/0x167 [ 1220.413697] should_fail.cold+0x5/0xa [ 1220.413721] ? security_file_alloc+0x34/0x170 [ 1220.413743] should_failslab+0x5/0x20 [ 1220.413762] kmem_cache_alloc+0x5b/0x310 [ 1220.413797] security_file_alloc+0x34/0x170 [ 1220.413823] __alloc_file+0xb7/0x320 [ 1220.413847] alloc_empty_file+0x6d/0x170 [ 1220.413872] alloc_file+0x5e/0x5a0 [ 1220.413902] alloc_file_pseudo+0x16a/0x250 [ 1220.413923] ? alloc_file+0x5a0/0x5a0 [ 1220.413978] anon_inode_getfile+0xc8/0x1f0 [ 1220.414024] io_uring_setup+0x138b/0x2980 [ 1220.414068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.414086] ? wait_for_completion_io+0x270/0x270 [ 1220.414156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.414177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.414207] do_syscall_64+0x33/0x40 [ 1220.414228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.414242] RIP: 0033:0x7f9af1df9b19 [ 1220.414260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.414272] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.414294] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1220.414306] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.414318] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.414329] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.414341] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.454107] FAULT_INJECTION: forcing a failure. [ 1220.454107] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.454130] CPU: 1 PID: 8505 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1220.454140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.454146] Call Trace: [ 1220.454171] dump_stack+0x107/0x167 [ 1220.454192] should_fail.cold+0x5/0xa [ 1220.454212] ? security_file_alloc+0x34/0x170 [ 1220.454230] should_failslab+0x5/0x20 [ 1220.454248] kmem_cache_alloc+0x5b/0x310 [ 1220.454272] security_file_alloc+0x34/0x170 [ 1220.454291] __alloc_file+0xb7/0x320 [ 1220.454309] alloc_empty_file+0x6d/0x170 [ 1220.454328] alloc_file+0x5e/0x5a0 [ 1220.454348] alloc_file_pseudo+0x16a/0x250 [ 1220.454365] ? alloc_file+0x5a0/0x5a0 [ 1220.454400] anon_inode_getfile+0xc8/0x1f0 [ 1220.454423] io_uring_setup+0x138b/0x2980 [ 1220.454450] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.454465] ? wait_for_completion_io+0x270/0x270 [ 1220.454510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.454531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.454552] do_syscall_64+0x33/0x40 [ 1220.454571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.454582] RIP: 0033:0x7f72c981db19 [ 1220.454600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.454610] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.454629] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1220.454640] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.454650] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.454661] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.454671] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.580243] FAULT_INJECTION: forcing a failure. [ 1220.580243] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.580265] CPU: 1 PID: 8512 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1220.580275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.580280] Call Trace: [ 1220.580304] dump_stack+0x107/0x167 [ 1220.580324] should_fail.cold+0x5/0xa [ 1220.580344] ? security_file_alloc+0x34/0x170 [ 1220.580361] should_failslab+0x5/0x20 [ 1220.580386] kmem_cache_alloc+0x5b/0x310 [ 1220.580409] security_file_alloc+0x34/0x170 [ 1220.580428] __alloc_file+0xb7/0x320 [ 1220.580446] alloc_empty_file+0x6d/0x170 [ 1220.580464] alloc_file+0x5e/0x5a0 [ 1220.580486] alloc_file_pseudo+0x16a/0x250 [ 1220.580502] ? alloc_file+0x5a0/0x5a0 [ 1220.580536] anon_inode_getfile+0xc8/0x1f0 [ 1220.580559] io_uring_setup+0x138b/0x2980 [ 1220.580586] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.580601] ? wait_for_completion_io+0x270/0x270 [ 1220.580643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.580662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.580686] do_syscall_64+0x33/0x40 [ 1220.580706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.580717] RIP: 0033:0x7f2db9fa8b19 [ 1220.580735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.580744] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.580763] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1220.580774] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.580784] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.580795] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.580805] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1220.608590] FAULT_INJECTION: forcing a failure. [ 1220.608590] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.608613] CPU: 0 PID: 8515 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1220.608625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.608633] Call Trace: [ 1220.608660] dump_stack+0x107/0x167 [ 1220.608688] should_fail.cold+0x5/0xa [ 1220.608714] ? create_object.isra.0+0x3a/0xa20 [ 1220.608737] should_failslab+0x5/0x20 [ 1220.608757] kmem_cache_alloc+0x5b/0x310 [ 1220.608779] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1220.608818] create_object.isra.0+0x3a/0xa20 [ 1220.608835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.608868] kmem_cache_alloc+0x159/0x310 [ 1220.608903] security_file_alloc+0x34/0x170 [ 1220.608929] __alloc_file+0xb7/0x320 [ 1220.608952] alloc_empty_file+0x6d/0x170 [ 1220.608978] alloc_file+0x5e/0x5a0 [ 1220.609007] alloc_file_pseudo+0x16a/0x250 [ 1220.609029] ? alloc_file+0x5a0/0x5a0 [ 1220.609089] anon_inode_getfile+0xc8/0x1f0 [ 1220.609120] io_uring_setup+0x138b/0x2980 [ 1220.609159] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1220.609176] ? wait_for_completion_io+0x270/0x270 [ 1220.609245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.609266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.609296] do_syscall_64+0x33/0x40 [ 1220.609317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.609330] RIP: 0033:0x7f9af1df9b19 [ 1220.609349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.609360] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1220.609383] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1220.609396] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1220.609407] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1220.609419] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1220.609431] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 45) 14:36:28 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2004c000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x200040, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5608, &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x3f, 0x10, 0x70bd29, 0x25dfdbfd, {0x1d}, [@typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r1}, @generic="89b8d7135150e431c146e0457c29153cb6f4377a3e8dcbff763a8e181cb1bfbf88a9202cc7daa6734cc565b0aeb37bf3befca9ffd549e47267772d970ecc6f52525794ffc2030744c6dec119ff83d0b6239ca4698d62268d04b29bf5c5ec5d94a5f1d640aa21fc59e3dcc867a593d1c7fc220ed4d3e6d435ff928ee2fcaeb34d1284f26055ba1f797089c364df70d2adc8ca59634fd3abb19056"]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c840) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmsg$nl_generic(r3, 0x0, 0x40001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000001d00210c0000000000000000040002000c00118007000000f32b00002ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6060f9ea0235eebdd073e56f754222c96"], 0xd8}}, 0x0) 14:36:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:28 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 45) 14:36:28 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5608, &(0x7f0000000200)) fadvise64(0xffffffffffffffff, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000400)="68236e76752caf068d110601b9cc84af7d0de61822b49b18288f1adac6ae01c3181b5ca15f0cd0cdde43df71ac706a5026519886dd12b7885535e3a0f1fcc939b6a58fe6e23a2fa2ec3fbedf736c0a79e16ec214d29e4775f148866ee9f569adfcd0ed083d11274880080000000000000002212481f420d8d5dcd3d887daafb7776e8458f8085a4749a3be270c0f8ac220cad2ab5a64073348743debb3e63abc9b37e516e00b9717488d3d82b39c6f77e2be74e87701adee2e2ca29056dab7300a1c1ada5896eb96052304c2918c591e28e02e0f46bc266c76f7501ba8a361672f4617de5cc0d1723326ab5600") setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000001480)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) dup(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x80) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) unshare(0x48020200) [ 1234.345815] FAULT_INJECTION: forcing a failure. [ 1234.345815] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.348220] CPU: 1 PID: 8529 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1234.349655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.351399] Call Trace: [ 1234.351952] dump_stack+0x107/0x167 [ 1234.352718] should_fail.cold+0x5/0xa [ 1234.353523] ? create_object.isra.0+0x3a/0xa20 [ 1234.354491] should_failslab+0x5/0x20 [ 1234.355295] kmem_cache_alloc+0x5b/0x310 [ 1234.356150] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1234.357324] create_object.isra.0+0x3a/0xa20 [ 1234.358264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.359335] kmem_cache_alloc+0x159/0x310 [ 1234.360219] security_file_alloc+0x34/0x170 [ 1234.361134] __alloc_file+0xb7/0x320 [ 1234.361917] alloc_empty_file+0x6d/0x170 [ 1234.362795] alloc_file+0x5e/0x5a0 [ 1234.363559] alloc_file_pseudo+0x16a/0x250 [ 1234.364455] ? alloc_file+0x5a0/0x5a0 [ 1234.365275] anon_inode_getfile+0xc8/0x1f0 [ 1234.366177] io_uring_setup+0x138b/0x2980 [ 1234.367076] ? __do_sys_io_uring_enter+0x1890/0x1890 14:36:28 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000240)={0x0, ""/80}, 0x58, 0x1, 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/47) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000480)=""/4096) msgctl$IPC_RMID(0x0, 0x0) r0 = getpgrp(0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) msgctl$IPC_SET(0x0, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x5000, 0x0, 0x1002, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000340)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xe0, 0x1, 0x1, 0x5, 0x0, 0xf1a, 0x23200, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x103, 0xda}, 0x1088, 0xffffffffffffffff, 0xc0f, 0x2, 0x4, 0x9, 0x8, 0x0, 0x26, 0x0, 0x10003}, r0, 0xc, r1, 0xb) r2 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000001c0)=""/84) setresuid(0x0, 0x0, 0x0) 14:36:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 46) 14:36:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1234.368437] ? wait_for_completion_io+0x270/0x270 [ 1234.369633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.370754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.371839] do_syscall_64+0x33/0x40 [ 1234.372622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.373693] RIP: 0033:0x7f2db9fa8b19 [ 1234.374480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.378358] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.379965] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1234.381473] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.382989] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.384503] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.384514] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.398690] FAULT_INJECTION: forcing a failure. [ 1234.398690] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.398712] CPU: 1 PID: 8539 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1234.398722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.398728] Call Trace: [ 1234.398751] dump_stack+0x107/0x167 [ 1234.398775] should_fail.cold+0x5/0xa [ 1234.398798] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1234.398815] should_failslab+0x5/0x20 [ 1234.398834] kmem_cache_alloc_trace+0x55/0x320 [ 1234.398860] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.398882] ? io_import_iovec+0x1120/0x1120 [ 1234.398915] ? lock_downgrade+0x6d0/0x6d0 [ 1234.398931] ? do_raw_spin_lock+0x121/0x260 [ 1234.398949] ? rwlock_bug.part.0+0x90/0x90 14:36:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 47) 14:36:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 46) [ 1234.398974] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.398994] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.399010] ? alloc_fd+0x2e7/0x670 [ 1234.399050] io_uring_setup+0x1fbb/0x2980 14:36:28 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 46) [ 1234.399078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.399093] ? wait_for_completion_io+0x270/0x270 14:36:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x40, 0x1, 0x20, 0x0, 0x9, 0x20203, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x1763e986, 0x3ff}, 0x18a2c, 0x0, 0x42ff, 0x6, 0x80, 0x1000, 0x0, 0x0, 0x90d9, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0xa) close(r0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x800, 0x40, 0x15}, 0x18) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x60, 0x20, 0xa3, 0x0, 0xcca3, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x6}, 0x2040, 0xfffffffffffffe01, 0x8, 0x4, 0x12bd, 0x2, 0x4, 0x0, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r0, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x8, r2, &(0x7f0000000180)=0x7, 0x0, 0x0) [ 1234.399138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.399156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.399179] do_syscall_64+0x33/0x40 [ 1234.399197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.399209] RIP: 0033:0x7f9af1df9b19 [ 1234.399225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:36:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 47) [ 1234.399235] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.399255] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1234.399266] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.399277] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.399287] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.399298] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 48) 14:36:28 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 47) [ 1234.403634] FAULT_INJECTION: forcing a failure. [ 1234.403634] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.403652] CPU: 1 PID: 8542 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1234.403662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.403667] Call Trace: 14:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x40003) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x17) [ 1234.403687] dump_stack+0x107/0x167 [ 1234.403708] should_fail.cold+0x5/0xa [ 1234.403737] ? create_object.isra.0+0x3a/0xa20 [ 1234.403754] should_failslab+0x5/0x20 [ 1234.403772] kmem_cache_alloc+0x5b/0x310 14:36:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 48) [ 1234.403791] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1234.403814] create_object.isra.0+0x3a/0xa20 [ 1234.403829] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.403854] kmem_cache_alloc+0x159/0x310 [ 1234.403881] security_file_alloc+0x34/0x170 [ 1234.403901] __alloc_file+0xb7/0x320 [ 1234.403919] alloc_empty_file+0x6d/0x170 [ 1234.403938] alloc_file+0x5e/0x5a0 [ 1234.403960] alloc_file_pseudo+0x16a/0x250 [ 1234.403977] ? alloc_file+0x5a0/0x5a0 [ 1234.404025] anon_inode_getfile+0xc8/0x1f0 [ 1234.404049] io_uring_setup+0x138b/0x2980 [ 1234.404079] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.404094] ? wait_for_completion_io+0x270/0x270 [ 1234.404142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.404161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.404183] do_syscall_64+0x33/0x40 [ 1234.404206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.404217] RIP: 0033:0x7f72c981db19 [ 1234.404234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.404243] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.404263] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1234.404273] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.404283] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.404294] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.404304] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.478506] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1234.576371] FAULT_INJECTION: forcing a failure. [ 1234.576371] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.576395] CPU: 1 PID: 8549 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1234.576404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.576410] Call Trace: [ 1234.576434] dump_stack+0x107/0x167 [ 1234.576454] should_fail.cold+0x5/0xa [ 1234.576476] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1234.576493] should_failslab+0x5/0x20 [ 1234.576511] kmem_cache_alloc_trace+0x55/0x320 [ 1234.576536] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.576555] ? io_import_iovec+0x1120/0x1120 [ 1234.576574] ? lock_downgrade+0x6d0/0x6d0 [ 1234.576590] ? do_raw_spin_lock+0x121/0x260 [ 1234.576606] ? rwlock_bug.part.0+0x90/0x90 [ 1234.576630] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.576649] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.576665] ? alloc_fd+0x2e7/0x670 [ 1234.576695] io_uring_setup+0x1fbb/0x2980 [ 1234.576721] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.576736] ? wait_for_completion_io+0x270/0x270 [ 1234.576778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.576796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.576817] do_syscall_64+0x33/0x40 [ 1234.576836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.576848] RIP: 0033:0x7f72c981db19 [ 1234.576866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.576876] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.576895] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1234.576906] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.576916] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.576926] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.576936] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.613698] FAULT_INJECTION: forcing a failure. [ 1234.613698] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.613724] CPU: 0 PID: 8553 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1234.613737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.613746] Call Trace: [ 1234.613776] dump_stack+0x107/0x167 [ 1234.613807] should_fail.cold+0x5/0xa [ 1234.613835] ? create_object.isra.0+0x3a/0xa20 [ 1234.613860] should_failslab+0x5/0x20 [ 1234.613881] kmem_cache_alloc+0x5b/0x310 [ 1234.613904] ? perf_trace_lock+0x2bd/0x490 [ 1234.613938] create_object.isra.0+0x3a/0xa20 [ 1234.613956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.613993] kmem_cache_alloc_trace+0x151/0x320 [ 1234.614043] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.614077] ? io_import_iovec+0x1120/0x1120 [ 1234.614102] ? lock_downgrade+0x6d0/0x6d0 [ 1234.614123] ? do_raw_spin_lock+0x121/0x260 [ 1234.614146] ? rwlock_bug.part.0+0x90/0x90 [ 1234.614199] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.614226] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.614244] ? alloc_fd+0x2e7/0x670 [ 1234.614292] io_uring_setup+0x1fbb/0x2980 [ 1234.614334] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.614352] ? wait_for_completion_io+0x270/0x270 [ 1234.614425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.614449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.614481] do_syscall_64+0x33/0x40 [ 1234.614504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.614518] RIP: 0033:0x7f9af1df9b19 [ 1234.614538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.614550] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.614576] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1234.614588] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.614601] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.614615] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.614628] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.650582] FAULT_INJECTION: forcing a failure. [ 1234.650582] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.650606] CPU: 0 PID: 8556 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1234.650616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.650622] Call Trace: [ 1234.650647] dump_stack+0x107/0x167 [ 1234.650669] should_fail.cold+0x5/0xa [ 1234.650693] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1234.650711] should_failslab+0x5/0x20 [ 1234.650732] kmem_cache_alloc_trace+0x55/0x320 [ 1234.650758] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.650786] ? io_import_iovec+0x1120/0x1120 [ 1234.650807] ? lock_downgrade+0x6d0/0x6d0 [ 1234.650823] ? do_raw_spin_lock+0x121/0x260 [ 1234.650841] ? rwlock_bug.part.0+0x90/0x90 [ 1234.650866] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.650887] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.650903] ? alloc_fd+0x2e7/0x670 [ 1234.650935] io_uring_setup+0x1fbb/0x2980 [ 1234.650963] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.650980] ? wait_for_completion_io+0x270/0x270 [ 1234.651024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.651043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.651066] do_syscall_64+0x33/0x40 [ 1234.651086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.651098] RIP: 0033:0x7f2db9fa8b19 [ 1234.651116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.651127] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.651149] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1234.651160] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.651171] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.651182] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.651194] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.777587] FAULT_INJECTION: forcing a failure. [ 1234.777587] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.777610] CPU: 1 PID: 8563 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1234.777620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.777626] Call Trace: [ 1234.777649] dump_stack+0x107/0x167 [ 1234.777670] should_fail.cold+0x5/0xa [ 1234.777691] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1234.777708] should_failslab+0x5/0x20 [ 1234.777726] kmem_cache_alloc_trace+0x55/0x320 [ 1234.777751] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.777770] ? io_import_iovec+0x1120/0x1120 [ 1234.777790] ? lock_downgrade+0x6d0/0x6d0 [ 1234.777806] ? do_raw_spin_lock+0x121/0x260 [ 1234.777822] ? rwlock_bug.part.0+0x90/0x90 [ 1234.777846] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.777865] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.777882] ? alloc_fd+0x2e7/0x670 [ 1234.777911] io_uring_setup+0x1fbb/0x2980 [ 1234.777938] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.777953] ? wait_for_completion_io+0x270/0x270 [ 1234.777994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.778013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.778042] do_syscall_64+0x33/0x40 [ 1234.778061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.778073] RIP: 0033:0x7f72c981db19 [ 1234.778091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.778101] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.778121] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1234.778131] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.778142] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.778152] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.778163] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.839469] FAULT_INJECTION: forcing a failure. [ 1234.839469] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.839496] CPU: 0 PID: 8569 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1234.839508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.839517] Call Trace: [ 1234.839547] dump_stack+0x107/0x167 [ 1234.839580] should_fail.cold+0x5/0xa [ 1234.839610] ? create_object.isra.0+0x3a/0xa20 [ 1234.839634] should_failslab+0x5/0x20 [ 1234.839656] kmem_cache_alloc+0x5b/0x310 [ 1234.839696] create_object.isra.0+0x3a/0xa20 [ 1234.839736] kmemleak_alloc_percpu+0xa0/0x100 [ 1234.839772] pcpu_alloc+0x4e2/0x1240 [ 1234.839837] __percpu_counter_init+0x10d/0x2d0 [ 1234.839871] io_uring_alloc_task_context+0xcc/0x6a0 [ 1234.839900] ? io_import_iovec+0x1120/0x1120 [ 1234.839926] ? lock_downgrade+0x6d0/0x6d0 [ 1234.839948] ? do_raw_spin_lock+0x121/0x260 [ 1234.839971] ? rwlock_bug.part.0+0x90/0x90 [ 1234.840019] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.840044] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.840064] ? alloc_fd+0x2e7/0x670 [ 1234.840114] io_uring_setup+0x1fbb/0x2980 [ 1234.840157] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.840175] ? wait_for_completion_io+0x270/0x270 [ 1234.840250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.840274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.840307] do_syscall_64+0x33/0x40 [ 1234.840330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.840345] RIP: 0033:0x7f9af1df9b19 [ 1234.840366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.840379] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.840404] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1234.840417] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.840430] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.840443] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.840456] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.858645] FAULT_INJECTION: forcing a failure. [ 1234.858645] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.858668] CPU: 1 PID: 8572 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1234.858679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.858685] Call Trace: [ 1234.858712] dump_stack+0x107/0x167 [ 1234.858734] should_fail.cold+0x5/0xa [ 1234.858757] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1234.858776] should_failslab+0x5/0x20 [ 1234.858795] kmem_cache_alloc_trace+0x55/0x320 [ 1234.858822] io_uring_alloc_task_context+0x99/0x6a0 [ 1234.858842] ? io_import_iovec+0x1120/0x1120 [ 1234.858863] ? lock_downgrade+0x6d0/0x6d0 [ 1234.858880] ? do_raw_spin_lock+0x121/0x260 [ 1234.858897] ? rwlock_bug.part.0+0x90/0x90 [ 1234.858924] __io_uring_add_tctx_node+0x2c6/0x520 [ 1234.858944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1234.858960] ? alloc_fd+0x2e7/0x670 [ 1234.858992] io_uring_setup+0x1fbb/0x2980 [ 1234.859029] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.859046] ? wait_for_completion_io+0x270/0x270 [ 1234.859091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.859110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.859133] do_syscall_64+0x33/0x40 [ 1234.859152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.859165] RIP: 0033:0x7f2db9fa8b19 [ 1234.859183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.859193] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.859213] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1234.859224] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.859234] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.859244] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.859255] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1234.967591] FAULT_INJECTION: forcing a failure. [ 1234.967591] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.967615] CPU: 1 PID: 8580 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1234.967624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.967630] Call Trace: [ 1234.967654] dump_stack+0x107/0x167 [ 1234.967675] should_fail.cold+0x5/0xa [ 1234.967696] ? create_object.isra.0+0x3a/0xa20 [ 1234.967713] should_failslab+0x5/0x20 [ 1234.967731] kmem_cache_alloc+0x5b/0x310 [ 1234.967750] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1234.967772] create_object.isra.0+0x3a/0xa20 [ 1234.967788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1234.967812] kmem_cache_alloc+0x159/0x310 [ 1234.967837] security_file_alloc+0x34/0x170 [ 1234.967856] __alloc_file+0xb7/0x320 [ 1234.967875] alloc_empty_file+0x6d/0x170 [ 1234.967893] alloc_file+0x5e/0x5a0 [ 1234.967914] alloc_file_pseudo+0x16a/0x250 [ 1234.967931] ? alloc_file+0x5a0/0x5a0 [ 1234.967966] anon_inode_getfile+0xc8/0x1f0 [ 1234.967989] io_uring_setup+0x138b/0x2980 [ 1234.968027] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1234.968043] ? wait_for_completion_io+0x270/0x270 [ 1234.968086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.968105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.968127] do_syscall_64+0x33/0x40 [ 1234.968145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.968157] RIP: 0033:0x7f72c981db19 [ 1234.968174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.968184] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1234.968203] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1234.968214] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1234.968224] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1234.968234] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1234.968244] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 49) 14:36:41 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5608, &(0x7f0000000200)) fadvise64(0xffffffffffffffff, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000400)="68236e76752caf068d110601b9cc84af7d0de61822b49b18288f1adac6ae01c3181b5ca15f0cd0cdde43df71ac706a5026519886dd12b7885535e3a0f1fcc939b6a58fe6e23a2fa2ec3fbedf736c0a79e16ec214d29e4775f148866ee9f569adfcd0ed083d11274880080000000000000002212481f420d8d5dcd3d887daafb7776e8458f8085a4749a3be270c0f8ac220cad2ab5a64073348743debb3e63abc9b37e516e00b9717488d3d82b39c6f77e2be74e87701adee2e2ca29056dab7300a1c1ada5896eb96052304c2918c591e28e02e0f46bc266c76f7501ba8a361672f4617de5cc0d1723326ab5600") setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000001480)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) dup(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x80) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) unshare(0x48020200) 14:36:41 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 48) [ 1247.867945] FAULT_INJECTION: forcing a failure. [ 1247.867945] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.870617] CPU: 1 PID: 8592 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1247.872211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.874347] Call Trace: 14:36:41 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e07ced4d6483fd16af86bddb3f00cc0d4998d86fc1243aa08ab9c46635843b2f862fc9fa5daa708d494af1671aa8d578b67c5879634211c6db634055dab84d1f1335990ea2075a00922bcbe2261cd32390d3315b8aedc0c0a14a026df745c2e27197cc5cb369cdab99db85157628be51d7d3df13e68c4e1c5d3cf550411b0c66d7cf097fd42b1c13f3f1989b8f1491e3a47c37402465ad3411d9c817b1b8b3e85ee53baf05b2a4395005f6c850fd3d036e251c08234883d3ed188551fa3b6faccf6e3731f6c328614fe93e1fa43335f8e99ecfa45d46f25a1672a6f36e8f2eb5dffdb1319552d9b977b38a6ea634a973ae37463e54a5c414500c080ff809428893ab02673b98bb1f459e046ce86e665d77b787f66178680025568e7ecfa2f53ff44cec4cfef534fef39099fa854dda2eb7e26392fa2f7ea83eb1fc9cb3564bf4e6919999059241d12f66b528bff2ed049b4c80aa7b6fd014d049e5cbec4af20e4c2769d9c11a84568f6f243fdf36133fa61e767c3c1e03158b161d15ad6094cf4d371a8b981344a68ded8f7bbb2922f3b174df52151fe569c3ee317e257f96c7924d45231a7518dfe424bc3a75bb79f7713aba4a7dd2b742b99800a32bbd26b5253f925f45e87f92544fb9f470868c8a9616e8109dacc07b29a7d56f94d8d511dc1d7962a2f7558dc0b278d70239a1166d155b946b086cc2cb855299e459132d3a4994ca3e105fe481d4230639cfeff4fa812841c844a07645fd33b4e796260da119e1762b8c9c853d7409983b7643fafe1718592ea22bfe1cd3227fa5751944eaeea91251c77c87eeeed4ce3095386d5796ea8d48414aa9c03d55f023b6fadd817899e53e68868fab9e2524dca8583b9714873afdfbbb1f1053c559b41a55a96f7008d416bcab4c508c7d27be82e94b4ba5a08dcda9ea1019de335a23f84836394a7371596f2087858fc0579af893379ac3a8d010eb35ca19f682b380489dfb9f4d976da44b8e511e3ebd76dbda1f0e89044378db9404ccdf499ffb0f8ced54599f96cc3ba9c0c46cb233548426cc899e135dadd8503b775788ca2a9fc611fffba8c451571f41bcc8c24da387216c71424651b812b1e44cfd17261d31a97caf5331b31f14e0b5f05f740cd7e81d8f0f9c70be3ebd1dd6b307e47768175a3c13e8bf48bdac086b93a1a731c8b45ef8c78c211cfdc815dbcc83f6feccd7731ddc0859fe262603608047c49a3e5e8a147285196efb5d9678abd62a1cf4c7c1e85c788351762032faaebfba4e5aa78e390d8bd31302f39564d9fe4d19208e0a77cfecd53eb6100f8b1986cef6f35d010cd382b9e4fee1398400c16b5baca28cf6ef5f049d69eaa541c5293e2661e99388440a05b9c38bb75109672b545ae760995c35a38feb9c203a82ba5ec55b242270aed928e1bbec210384a29e3068d42aee5ed6d3367812f1202f9c13c34fe619bd933ab5e342341e51fb44d9756960bdd681b0e4a597a08244488cb70ba6a3ce2402c63b4250cbd56bef9824e391b0cd3f6b1d15e36136129b976570cb89a1c870a9394443b3b618cb372904312611d77c230110eb4b0e17fa6da0b6fd289cb768085d20abc67ad679b68d7b8981c47487c58c768f8a77fa2bb62fdfc2587b0bcce66390dc80284c211781d229e3dfc0c313fc24e564ca701d43c8d31b59b5b667df56d76277075ab94b46dcbf1aba47ee9e4c1caf236767b93faef69038550ac89df3e63f9b65a5b45218fe97ea7c4f4ce7b412d9d0802703a185d45312ddc0bbd4f1e6215d8586405450edb8e9536c68b9e95caa4b1b1ca8991462f5cb51775289227fa3476358bb3a262ec7439884054cd0c213978dc26f6039f25041438fbc6f96045d813ba55f23922ca20b2391227da26d078dfa9ca9c8a1db8967b88d46cd7e7ab3bbb17189f3103fab5b4fc3b87c41fda5aac307c593f976b7c8478e58ce7962d90dfcf264f774d6d43ed20966cb3a104fb0b720c6c92a8a5371af537424364aa54ca84ead239aa747e9b2a72fb595bc4e888883efd2bec39aee42c8885f450912bd8aa63ca14ab79fe2ccd392602954fd887a67eaf11fe11b1d94ceba63a7bb180cb9e0139f59bbfb580a3d574121556c6fce6054640c57493f78b55cd8cad715dd65e50101feaf04d11d5590a8ba309c316d109fc71357e105fa604feb73de5b8b74af1d7a04701fa8485856b18dcfd99deca51dd4784c80a0e710c80f529a95af5edecbc68b8e5d37b1ecdbf20315eff9a1763809725787c63da43ffba69418e3af0e114c66d2346d82a6dc1d90b4e2c6ace1a12606d37f91650d56e322353fe9b914f31a7d6ed028761e1009a31f0a7980413af1ae808d780d061c2cf68c610b9613006efe1e2c144edece813a29abeb5f43e602a46620f9a223406909e960049153bb18e6ffe9bcb5befb9960205420c58503ed5847e03caa34dbef90d51b686ee41e687ca972ef822c8446da37459006d596437f2c046663c723bad20de584abef87d646364b18f04bd948fdb04bd04d8338d9d509f8ba978524e7701cb7938c165be6a3d262ab5dd8fe9c0812f1b2f33ddebc7094a864a300f65a97cd5b4f33a10736d300270cf024088c223c7b15d6528051aaee913b087dc1ddd82463757ff1ca88f72b40db32965e195850df33f0579735bf6cad95d4e5300e8d440c461f682bc754ce2718157a5a37b545dcbdac28853d1ccdb023a8327da60e0090362eef64cd1e508ba1192f83be9a0e0a5b983febb24a8775e491859c3cfbfde56d6cd94706424fc170bd6a9f9256af94230c66f7b48faec8213b0e8d74fc393e41232a8c88b42c76c23600f015ffd085d29935bd48f2c02b1242f650ca818f73fddea3f930eac705b71d837cc97720867e189bc24699d1148de1889b1e52106dc6868a24738174fcc58e29f55e3c7da5220b67077bd7cee0076a084c9657102fbb9306dd38786beca2a1fa4217bff42d19bf8815038e2c4fafb24cfcc3533809e10ae7547ef0afcfbe8099167c0e7465d0861fc8edd0e8313b4b8271c1f7a3ec53d31dd19ba5cf04f5fe3b96bdde66d1f8fb3d3c9413d57f0e28dd89acd24ae52b9c77ef10bb69f57200742480bbee0a41bc56e8e724a626b955492b2a52a2e1b959b97c52948ee5088b7da33cf1eeb4824f0e0f4de9c1e1367e144db1d796994d480f8165136fc74e4f4b18308406b2be925e1c2b0931a473c8423df69250ec2bf5a994bb571ee469f101879ae43d7ac331c4b69d970bb0b7da6dec76a2d72527d1d3b4a946838dda4ced21fb4ea631335b8a678cbb71a196fa6a19862357d6141629df84154aae6", 0xde4, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000400)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) perf_event_open(&(0x7f0000001300)={0x3, 0x80, 0x6, 0xe, 0xe, 0xec, 0x0, 0x81, 0x20200, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000240), 0x5}, 0x1000, 0xffffffff, 0x5, 0x4, 0x100000000, 0xfff, 0x2b, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0x3, r1, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001380)={0x9e15614c8bd9da8d, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80, 0x4}, 0x8054, 0x100000001, 0xfffffffe, 0x1, 0x8, 0x2, 0x5, 0x0, 0x800, 0x0, 0x5}, r2, 0x6, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{}, 0x0, 0x2, @inherit={0xffffffffffffff8b, &(0x7f00000000c0)={0x1, 0x5, 0x10001, 0x101, {0x1e, 0x0, 0x0, 0xbc, 0x5}, [0x9, 0x9, 0xffff, 0x4, 0x80]}}, @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 14:36:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1ce}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r4, 0x4f, 0x0, 0x5, 0x3, 0x0, {0x0, r5}}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x8020}, 0x0, {0x0, r5}}, 0x2) dup2(r0, r6) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x1000, 0x8, 0x4f1}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000340)={r7, r8/1000+10000}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'iso9660\x00'}, {0x20, 'security.capability\x00'}], 0xa, "89e9acfbd22beca3a183337876994074620f635eac3efa8ed49fab22d831e4c0c6507fdae851da3b3bf487b56264b92e8b0192191c071ece6aa0deeb52320d423e9c684d349b7f2a0d54ed0d4ee6f2807e"}, 0x7a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e000000000000000000000000000800008aea00000000000000000000000000000000003800020000000000000003"], 0xaf2) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x80, 0xe1, 0x3, 0x0, 0xbb, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcd01, 0x1, @perf_config_ext={0x5, 0x7}, 0x40204, 0x0, 0x2, 0x6, 0x1f, 0x5, 0x0, 0x0, 0xfffff000, 0x0, 0x7fff}, 0x0, 0x4, 0xffffffffffffffff, 0x1) 14:36:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 49) 14:36:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1247.875134] dump_stack+0x107/0x167 [ 1247.876283] should_fail.cold+0x5/0xa [ 1247.876624] loop0: detected capacity change from 0 to 41948160 [ 1247.877174] ? create_object.isra.0+0x3a/0xa20 [ 1247.877195] should_failslab+0x5/0x20 [ 1247.877219] kmem_cache_alloc+0x5b/0x310 [ 1247.881058] create_object.isra.0+0x3a/0xa20 [ 1247.882102] kmemleak_alloc_percpu+0xa0/0x100 [ 1247.883166] pcpu_alloc+0x4e2/0x1240 [ 1247.884057] __percpu_counter_init+0x10d/0x2d0 [ 1247.885128] io_uring_alloc_task_context+0xcc/0x6a0 [ 1247.886298] ? io_import_iovec+0x1120/0x1120 [ 1247.887327] ? lock_downgrade+0x6d0/0x6d0 [ 1247.888288] ? do_raw_spin_lock+0x121/0x260 [ 1247.889287] ? rwlock_bug.part.0+0x90/0x90 [ 1247.890274] __io_uring_add_tctx_node+0x2c6/0x520 [ 1247.891400] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1247.892608] ? alloc_fd+0x2e7/0x670 [ 1247.893460] io_uring_setup+0x1fbb/0x2980 [ 1247.894439] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1247.895608] ? wait_for_completion_io+0x270/0x270 [ 1247.896749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.897960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.899153] do_syscall_64+0x33/0x40 [ 1247.900001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.901174] RIP: 0033:0x7f9af1df9b19 [ 1247.902025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.906253] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1247.908009] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1247.909640] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1247.911277] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1247.912920] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1247.914560] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1247.953737] FAULT_INJECTION: forcing a failure. [ 1247.953737] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.956374] CPU: 1 PID: 8605 Comm: syz-executor.2 Not tainted 5.10.240 #1 14:36:42 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e07ced4d6483fd16af86bddb3f00cc0d4998d86fc1243aa08ab9c46635843b2f862fc9fa5daa708d494af1671aa8d578b67c5879634211c6db634055dab84d1f1335990ea2075a00922bcbe2261cd32390d3315b8aedc0c0a14a026df745c2e27197cc5cb369cdab99db85157628be51d7d3df13e68c4e1c5d3cf550411b0c66d7cf097fd42b1c13f3f1989b8f1491e3a47c37402465ad3411d9c817b1b8b3e85ee53baf05b2a4395005f6c850fd3d036e251c08234883d3ed188551fa3b6faccf6e3731f6c328614fe93e1fa43335f8e99ecfa45d46f25a1672a6f36e8f2eb5dffdb1319552d9b977b38a6ea634a973ae37463e54a5c414500c080ff809428893ab02673b98bb1f459e046ce86e665d77b787f66178680025568e7ecfa2f53ff44cec4cfef534fef39099fa854dda2eb7e26392fa2f7ea83eb1fc9cb3564bf4e6919999059241d12f66b528bff2ed049b4c80aa7b6fd014d049e5cbec4af20e4c2769d9c11a84568f6f243fdf36133fa61e767c3c1e03158b161d15ad6094cf4d371a8b981344a68ded8f7bbb2922f3b174df52151fe569c3ee317e257f96c7924d45231a7518dfe424bc3a75bb79f7713aba4a7dd2b742b99800a32bbd26b5253f925f45e87f92544fb9f470868c8a9616e8109dacc07b29a7d56f94d8d511dc1d7962a2f7558dc0b278d70239a1166d155b946b086cc2cb855299e459132d3a4994ca3e105fe481d4230639cfeff4fa812841c844a07645fd33b4e796260da119e1762b8c9c853d7409983b7643fafe1718592ea22bfe1cd3227fa5751944eaeea91251c77c87eeeed4ce3095386d5796ea8d48414aa9c03d55f023b6fadd817899e53e68868fab9e2524dca8583b9714873afdfbbb1f1053c559b41a55a96f7008d416bcab4c508c7d27be82e94b4ba5a08dcda9ea1019de335a23f84836394a7371596f2087858fc0579af893379ac3a8d010eb35ca19f682b380489dfb9f4d976da44b8e511e3ebd76dbda1f0e89044378db9404ccdf499ffb0f8ced54599f96cc3ba9c0c46cb233548426cc899e135dadd8503b775788ca2a9fc611fffba8c451571f41bcc8c24da387216c71424651b812b1e44cfd17261d31a97caf5331b31f14e0b5f05f740cd7e81d8f0f9c70be3ebd1dd6b307e47768175a3c13e8bf48bdac086b93a1a731c8b45ef8c78c211cfdc815dbcc83f6feccd7731ddc0859fe262603608047c49a3e5e8a147285196efb5d9678abd62a1cf4c7c1e85c788351762032faaebfba4e5aa78e390d8bd31302f39564d9fe4d19208e0a77cfecd53eb6100f8b1986cef6f35d010cd382b9e4fee1398400c16b5baca28cf6ef5f049d69eaa541c5293e2661e99388440a05b9c38bb75109672b545ae760995c35a38feb9c203a82ba5ec55b242270aed928e1bbec210384a29e3068d42aee5ed6d3367812f1202f9c13c34fe619bd933ab5e342341e51fb44d9756960bdd681b0e4a597a08244488cb70ba6a3ce2402c63b4250cbd56bef9824e391b0cd3f6b1d15e36136129b976570cb89a1c870a9394443b3b618cb372904312611d77c230110eb4b0e17fa6da0b6fd289cb768085d20abc67ad679b68d7b8981c47487c58c768f8a77fa2bb62fdfc2587b0bcce66390dc80284c211781d229e3dfc0c313fc24e564ca701d43c8d31b59b5b667df56d76277075ab94b46dcbf1aba47ee9e4c1caf236767b93faef69038550ac89df3e63f9b65a5b45218fe97ea7c4f4ce7b412d9d0802703a185d45312ddc0bbd4f1e6215d8586405450edb8e9536c68b9e95caa4b1b1ca8991462f5cb51775289227fa3476358bb3a262ec7439884054cd0c213978dc26f6039f25041438fbc6f96045d813ba55f23922ca20b2391227da26d078dfa9ca9c8a1db8967b88d46cd7e7ab3bbb17189f3103fab5b4fc3b87c41fda5aac307c593f976b7c8478e58ce7962d90dfcf264f774d6d43ed20966cb3a104fb0b720c6c92a8a5371af537424364aa54ca84ead239aa747e9b2a72fb595bc4e888883efd2bec39aee42c8885f450912bd8aa63ca14ab79fe2ccd392602954fd887a67eaf11fe11b1d94ceba63a7bb180cb9e0139f59bbfb580a3d574121556c6fce6054640c57493f78b55cd8cad715dd65e50101feaf04d11d5590a8ba309c316d109fc71357e105fa604feb73de5b8b74af1d7a04701fa8485856b18dcfd99deca51dd4784c80a0e710c80f529a95af5edecbc68b8e5d37b1ecdbf20315eff9a1763809725787c63da43ffba69418e3af0e114c66d2346d82a6dc1d90b4e2c6ace1a12606d37f91650d56e322353fe9b914f31a7d6ed028761e1009a31f0a7980413af1ae808d780d061c2cf68c610b9613006efe1e2c144edece813a29abeb5f43e602a46620f9a223406909e960049153bb18e6ffe9bcb5befb9960205420c58503ed5847e03caa34dbef90d51b686ee41e687ca972ef822c8446da37459006d596437f2c046663c723bad20de584abef87d646364b18f04bd948fdb04bd04d8338d9d509f8ba978524e7701cb7938c165be6a3d262ab5dd8fe9c0812f1b2f33ddebc7094a864a300f65a97cd5b4f33a10736d300270cf024088c223c7b15d6528051aaee913b087dc1ddd82463757ff1ca88f72b40db32965e195850df33f0579735bf6cad95d4e5300e8d440c461f682bc754ce2718157a5a37b545dcbdac28853d1ccdb023a8327da60e0090362eef64cd1e508ba1192f83be9a0e0a5b983febb24a8775e491859c3cfbfde56d6cd94706424fc170bd6a9f9256af94230c66f7b48faec8213b0e8d74fc393e41232a8c88b42c76c23600f015ffd085d29935bd48f2c02b1242f650ca818f73fddea3f930eac705b71d837cc97720867e189bc24699d1148de1889b1e52106dc6868a24738174fcc58e29f55e3c7da5220b67077bd7cee0076a084c9657102fbb9306dd38786beca2a1fa4217bff42d19bf8815038e2c4fafb24cfcc3533809e10ae7547ef0afcfbe8099167c0e7465d0861fc8edd0e8313b4b8271c1f7a3ec53d31dd19ba5cf04f5fe3b96bdde66d1f8fb3d3c9413d57f0e28dd89acd24ae52b9c77ef10bb69f57200742480bbee0a41bc56e8e724a626b955492b2a52a2e1b959b97c52948ee5088b7da33cf1eeb4824f0e0f4de9c1e1367e144db1d796994d480f8165136fc74e4f4b18308406b2be925e1c2b0931a473c8423df69250ec2bf5a994bb571ee469f101879ae43d7ac331c4b69d970bb0b7da6dec76a2d72527d1d3b4a946838dda4ced21fb4ea631335b8a678cbb71a196fa6a19862357d6141629df84154aae6", 0xde4, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000400)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) perf_event_open(&(0x7f0000001300)={0x3, 0x80, 0x6, 0xe, 0xe, 0xec, 0x0, 0x81, 0x20200, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000240), 0x5}, 0x1000, 0xffffffff, 0x5, 0x4, 0x100000000, 0xfff, 0x2b, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0x3, r1, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001380)={0x9e15614c8bd9da8d, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80, 0x4}, 0x8054, 0x100000001, 0xfffffffe, 0x1, 0x8, 0x2, 0x5, 0x0, 0x800, 0x0, 0x5}, r2, 0x6, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{}, 0x0, 0x2, @inherit={0xffffffffffffff8b, &(0x7f00000000c0)={0x1, 0x5, 0x10001, 0x101, {0x1e, 0x0, 0x0, 0xbc, 0x5}, [0x9, 0x9, 0xffff, 0x4, 0x80]}}, @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 1247.957917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.960321] Call Trace: [ 1247.960924] dump_stack+0x107/0x167 [ 1247.961747] should_fail.cold+0x5/0xa [ 1247.962621] ? create_object.isra.0+0x3a/0xa20 [ 1247.963645] should_failslab+0x5/0x20 [ 1247.964500] kmem_cache_alloc+0x5b/0x310 [ 1247.965420] create_object.isra.0+0x3a/0xa20 [ 1247.966438] kmemleak_alloc_percpu+0xa0/0x100 [ 1247.967452] pcpu_alloc+0x4e2/0x1240 [ 1247.968318] __percpu_counter_init+0x10d/0x2d0 [ 1247.969374] io_uring_alloc_task_context+0xcc/0x6a0 [ 1247.970509] ? io_import_iovec+0x1120/0x1120 [ 1247.971505] ? lock_downgrade+0x6d0/0x6d0 [ 1247.972433] ? do_raw_spin_lock+0x121/0x260 [ 1247.973408] ? rwlock_bug.part.0+0x90/0x90 [ 1247.974377] __io_uring_add_tctx_node+0x2c6/0x520 [ 1247.975462] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1247.976663] ? alloc_fd+0x2e7/0x670 [ 1247.977507] io_uring_setup+0x1fbb/0x2980 [ 1247.978465] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1247.979602] ? wait_for_completion_io+0x270/0x270 [ 1247.980712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.981891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.982623] loop0: detected capacity change from 0 to 41948160 [ 1247.983064] do_syscall_64+0x33/0x40 [ 1247.983090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.985976] RIP: 0033:0x7f2db9fa8b19 [ 1247.986823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.990971] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1247.992682] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1247.994288] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1247.995887] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1247.997477] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1247.999079] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1248.033977] FAULT_INJECTION: forcing a failure. [ 1248.033977] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.036639] CPU: 1 PID: 8613 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1248.038154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.039999] Call Trace: [ 1248.040591] dump_stack+0x107/0x167 [ 1248.041608] should_fail.cold+0x5/0xa 14:36:42 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0xde4, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000400)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) perf_event_open(&(0x7f0000001300)={0x3, 0x80, 0x6, 0xe, 0xe, 0xec, 0x0, 0x81, 0x20200, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000240), 0x5}, 0x1000, 0xffffffff, 0x5, 0x4, 0x100000000, 0xfff, 0x2b, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0x3, r1, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001380)={0x9e15614c8bd9da8d, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80, 0x4}, 0x8054, 0x100000001, 0xfffffffe, 0x1, 0x8, 0x2, 0x5, 0x0, 0x800, 0x0, 0x5}, r2, 0x6, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{}, 0x0, 0x2, @inherit={0xffffffffffffff8b, &(0x7f00000000c0)={0x1, 0x5, 0x10001, 0x101, {0x1e, 0x0, 0x0, 0xbc, 0x5}, [0x9, 0x9, 0xffff, 0x4, 0x80]}}, @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 1248.042633] ? create_object.isra.0+0x3a/0xa20 [ 1248.043758] should_failslab+0x5/0x20 [ 1248.044605] kmem_cache_alloc+0x5b/0x310 [ 1248.045515] create_object.isra.0+0x3a/0xa20 [ 1248.046513] kmemleak_alloc_percpu+0xa0/0x100 [ 1248.047514] pcpu_alloc+0x4e2/0x1240 [ 1248.048372] __percpu_counter_init+0x10d/0x2d0 [ 1248.049393] io_uring_alloc_task_context+0xcc/0x6a0 [ 1248.050513] ? io_import_iovec+0x1120/0x1120 [ 1248.051502] ? lock_downgrade+0x6d0/0x6d0 [ 1248.052422] ? do_raw_spin_lock+0x121/0x260 [ 1248.053384] ? rwlock_bug.part.0+0x90/0x90 [ 1248.054337] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.055420] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.056579] ? alloc_fd+0x2e7/0x670 [ 1248.057406] io_uring_setup+0x1fbb/0x2980 [ 1248.058341] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.059498] ? wait_for_completion_io+0x270/0x270 [ 1248.060605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1248.061792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1248.062943] do_syscall_64+0x33/0x40 [ 1248.063783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.064951] RIP: 0033:0x7f72c981db19 [ 1248.065789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.069922] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.071639] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1248.073245] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1248.074869] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1248.076473] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1248.078078] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1248.107056] loop0: detected capacity change from 0 to 41948160 14:36:42 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0xde4, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000400)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) perf_event_open(&(0x7f0000001300)={0x3, 0x80, 0x6, 0xe, 0xe, 0xec, 0x0, 0x81, 0x20200, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000240), 0x5}, 0x1000, 0xffffffff, 0x5, 0x4, 0x100000000, 0xfff, 0x2b, 0x0, 0x1, 0x0, 0x1ff}, 0x0, 0x3, r1, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001380)={0x9e15614c8bd9da8d, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80, 0x4}, 0x8054, 0x100000001, 0xfffffffe, 0x1, 0x8, 0x2, 0x5, 0x0, 0x800, 0x0, 0x5}, r2, 0x6, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{}, 0x0, 0x2, @inherit={0xffffffffffffff8b, &(0x7f00000000c0)={0x1, 0x5, 0x10001, 0x101, {0x1e, 0x0, 0x0, 0xbc, 0x5}, [0x9, 0x9, 0xffff, 0x4, 0x80]}}, @devid}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 14:36:42 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 50) 14:36:42 executing program 3: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) unshare(0x48020200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r4, 0x5608, &(0x7f0000000200)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = getuid() sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000003340)={0x15cc, 0x35, 0x100, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @uid=r3}, @nested={0xcc, 0x32, 0x0, 0x1, [@generic="e7a611341dfbeb00016125e457d4aad40baf5189bb89bb2df5098d32e77b9280f8af94ccd991f8dffbd50ef9c50b89e6e37b021860b448067ef356d1cc6f65b9121ab31d91016cab883ee9fd466f4937ee2344c0d2e4eea88cf490b3e028d8bcc24482a57409ee151c29251a9af3d8eac39766ced07dd11fbdf4fabd395230c6fbc0ba2969392be1bb4123c332bb3335d7cc3d153c8cb2df7fc9756a6974f61693ba75cbe2258e35f965406e33a762333013f91c5ac52e09", @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x53, 0x0, 0x0, @u32}]}, @nested={0x1113, 0x27, 0x0, 0x1, [@generic="caba48400858bf37ea5b00175db0d33fdfd61cc67902190ba53ff365e579913beae6c6342804bf494fd8242113b2412d0ec2d8e5ab428052bf5554a38f22f9d3a11df1b92a7221917cd49de57bff936f87a88d2f845e72bb191e8ac43a09b5ae374b78ff2065243ea9f88d90c36b5747471c31f164f7fea5d737d4699ee224ade68e5c07b0da83ce6f378d81602b", @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@remote}, @generic="856164cab805d15163300eed74df4cc4e7178516db91436f2efc1651d55978569090b36f28f0d1615aada1664ed71642448147c32c9f93108e28dd3f190e93d522c02a7b5ee09375d024f3683b352117ddf8a44aa46f549efac6bde1eaea98da52e327d85da569527afe99ecfad6554190", @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@broadcast}, @generic="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"]}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0x7}, @generic="cf2e858240eb70973c837b825fa30db32846253be8ef2f5dff0dfd2f847779117b28b9897ba4ac88ba23137d0988d3935bbcfb2bfd7d64fcf981396e8863e71d46fb268106604d83b59569d6bb3a8049c384ee45b3439fd5cac06996c6295fe9905d10188a1e68927380e3df212b2bb7d76fac7bdf60e5a463e3691e7cfce8500bb6901b7a53c5379b90352757b024ff3685bc627eccbdd7b9dfebcc5e9097aadca18784246504e0a33dc935af81eeeab6ba6e0183782026e45d1503c731f68bfde524f70d8889", @nested={0x12a, 0x4c, 0x0, 0x1, [@generic="a1e8e072663fac210e909592dccd8c02815104636db346c4830a62b27530cb3ea5ae2bffe287e43159abd20ed26f9109f161801d482a2583976412b28c7e6723e6e6dd", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0xff}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r5}, @generic="240da9cf80a935ceaa299fedf32af1903cbe8d1ffefcd437395fd9cbc5280cf06504a5a98c3130818e2eed5052a56f83c40e2f9758129cfdd3ac113d7ba8a887c24500740c9d6e87f127c6e4feee7c44be2dc98a690e57b08ac7b73c761edc36a4832e728af3a7976080fed84416a6ab09d24807a6c8789ea9d89d3e4e61e3d0d931c4e981d4a85e4e74d2c395c139a2902a878d8e1bc8044aef020527e5950bb6f67cae1ec12da5af91a3607cdda05889d3dd08a904a3a2a3a9095c", @generic="39f1e3a1fc74246d000aa8cd602351", @typed={0x6, 0x52, 0x0, 0x0, @str=']\x00'}]}, @generic="dbe1a5de192e612035b35e9909503a3e8cc7911cc1299862a03f35c2b6336b9bf4cb", @nested={0x1a9, 0x81, 0x0, 0x1, [@generic="c55a2afd676ac4acb0397e954817faba5cc3270f0426d167eb97d62ab0af71b8985c3c85ff26f9d7726ddf4b3401efc678e417aaa3e26b725ec3a4a753948e65f8aba653d7260512ad5c8313f69a7a68cea31f9834b20c75be757e44178af9b7d7b4443c7bac7222a77b6b15030d1e9be768afe4b5454f6b4e4b753ae77a678f9fb1fefbc0dd865ac45d5f559a2628404186d7b8e783ad3086941d46eae0f30cb021e55488e666b4f45a0a5b20c16912ad5fc2a82d4136a7fc730abaef", @typed={0x4, 0x1d}, @generic="a60232e7b5125f20bc723f9e1e1533a36af95b157e63662db50adb3af725d18c23d5ee563b52ccb1656ffb4ff500d905a43b4647fbd626f5ad7b3c5a0a098dc36d51b09ea64d6f05a1b071ba716a6dac9df60349ca73c52e92aa747922b8f44767e8415df95bff8db7f9b3a3280d64fa32dbb29ecf397d1c1ddd775880c8b5fd630f0e", @typed={0x8, 0x3c, 0x0, 0x0, @uid=r6}, @generic="f80e7ed29ecb66e349bc3385e80835d26b68fcc5c817fe2f2433a476ad84658291c783ca14f6d23780e7ef732c0d38f02286c2844840a21e8263b0914e993761809ebf234f63cac1c918527dff58b845d586beabca9a05142e"]}]}, 0x15cc}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 14:36:42 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x232}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xec}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10001040}, 0x4c001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block', 0x280800, 0x160) sendmsg$nl_generic(r5, 0x0, 0x40001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80d00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0xd8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x7, 0x76, 0x0, 0x0, @str='\xf3+\x00'}]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96"]}, 0xd8}}, 0x0) 14:36:42 executing program 4: syz_emit_ethernet(0x38, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x2, 0x2c, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], "bd6f"}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@multicast, @multicast, @val={@void, {0x8100, 0x4}}, {@can={0xc, {{0x2}, 0x0, 0x0, 0x0, 0x0, "9e23a0c32b613088"}}}}, &(0x7f0000000040)={0x0, 0x3, [0x123, 0xe40, 0x6ba, 0xff5]}) syz_emit_ethernet(0x41, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x9100, 0x7, 0x1, 0x3}, {0x8100, 0x4, 0x1}}, {@arp={0x806, @generic={0x204, 0x2, 0x6, 0xc, 0x9, @multicast, "91f106f36be0437fe05af210", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, "29048a60673aea8af83b58"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x787, 0x564, 0xd0, 0xe36]}) syz_emit_ethernet(0x37a, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x9e2}, {0x6}, {0x8d, 0x0, 0x1}, {0x6}, {}], @ipv4=@gre={{0x30, 0x4, 0x0, 0x37, 0x354, 0x68, 0x0, 0x40, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x38, 0x1, [{0x1, 0x9, "6e58818c9de2e0"}, {0x1, 0xc, "9f3216808bba25adc940"}, {0x7, 0xd, "e67638e456c8b6d775a4f6"}, {0x5, 0x2}, {0x5, 0x7, "451bf7d2f1"}, {0x7, 0x7, "36a60073b7"}]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x1f, 0x79, [@loopback, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010102]}, @rr={0x7, 0x3, 0x93}, @timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x4, [{@loopback}, {@multicast1, 0x4}, {@private=0xa010102, 0x6}]}, @noop, @noop, @timestamp={0x44, 0x2c, 0xe0, 0x0, 0x4, [0x7, 0x400, 0x6, 0xfffffffb, 0x3, 0x7fffffff, 0x6, 0x7fffffff, 0x7f, 0x9]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x41, 0x3, [], "45938a8a20c22d51254b6be260156f88a83d45394640b9fbaea2e4fc4cc44e8bf43f5b2d808f81336515e55acc13627e0e636d55ec9a2f9322c0e463f4feda3e64"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xffff, 0x5], "57e9946eed13290ca08bf2bbeef074f8a9fc5cc7cc0d28c9417b44e40a05321a64527a8f9113658bf02288651957f7130094775d6542ec7a1a083a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0xb3], "0fd70c4414b03eeab91823df52b6796d288ce9439b0235385cccea1a2c938d3900e5f7da28e8a856cd5e9ad0cfd21f73cc33ba800ea14bd561ea7d2cb046ea778656be72e6f7cfac49b9ae443333976e2073dffc617bbcb5f98df783a4809c90b07eb9df904f3ca7351cbf02085d00fd0d63ddc12475d9925f3e0aaf9eb5e149d7bc727f4e04023f3010d344c6a31d8389f905b738b0832f3ce5819cbc1ee936e1e6a196ebde30a6e8215280c837c343370c186f061580e9f7965d37cb3ece25de9c8433aeacceac907295ac22d5dfa1b71f3bf4"}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x9, 0x1, 0x1, 0x0, 0x2, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x20, 0x1, 0x1, 0x1, 0x5, 0x1f}, 0x2, {0x4a1a, 0x1, 0x0, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "796fdd3652c2f51b71a201d3eecd003e8cf0c4fab63e7474bdced694894f8b6346238e37ecff8676038d24b7ccd62ee8a0674559736ee51719c2ffcd40a5ec188047dcf779fbe83cc3e250a97457a314f3bc37491307fe90db28067dfd8a78c5141ea9f97c36bbe4e92b0a99fba66d1db798c4912979a3d513ba8642348d514fce17af5739752745637e367ddd2ef028f46aeeda847d4c1e1663b0ceb1254f84c705a4581250cddf1037e71cb253a5d9c375984ea4493de505840774cf9288340bf9a3d674c36257298720829bcd32a868f1be80926a2a8563a0b8d5a197b212e7bc67e27e373f8f8def2e7e2691e8f122d091abf8f8882e"}}}}}}}, &(0x7f00000000c0)={0x1, 0x3, [0x9e5, 0x770, 0xcbf, 0x294]}) [ 1248.303343] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. 14:36:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 50) 14:36:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000001180)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf97}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcc3c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x100, 0x200}) 14:36:42 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 49) [ 1248.445228] FAULT_INJECTION: forcing a failure. [ 1248.445228] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.446804] CPU: 0 PID: 8636 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1248.447705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.448807] Call Trace: [ 1248.449174] dump_stack+0x107/0x167 [ 1248.449652] should_fail.cold+0x5/0xa [ 1248.450162] ? io_wq_create+0xeb/0xc00 [ 1248.450688] should_failslab+0x5/0x20 [ 1248.451186] __kmalloc+0x72/0x390 [ 1248.451646] io_wq_create+0xeb/0xc00 [ 1248.452137] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1248.452807] ? io_import_iovec+0x1120/0x1120 [ 1248.453384] ? io_apoll_task_func+0x2d0/0x2d0 [ 1248.453967] ? __io_req_find_next+0x300/0x300 [ 1248.454578] ? do_raw_spin_lock+0x121/0x260 [ 1248.455156] ? rwlock_bug.part.0+0x90/0x90 [ 1248.455711] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.456356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.457045] ? alloc_fd+0x2e7/0x670 [ 1248.457536] io_uring_setup+0x1fbb/0x2980 [ 1248.458087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.458765] ? wait_for_completion_io+0x270/0x270 [ 1248.459427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1248.460121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1248.460817] do_syscall_64+0x33/0x40 [ 1248.461312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.461990] RIP: 0033:0x7f72c981db19 [ 1248.462487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.464936] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.465941] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1248.466898] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1248.467849] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1248.468787] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1248.469724] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1248.476216] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 5 (only 16 groups) 14:36:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0x4332}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x140000012}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x238, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x6000000, 0x38d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f0000000540), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x2103, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240)=0x8000, 0xffffffffffffffff, &(0x7f0000000400), 0x8001, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000580)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1248.504393] FAULT_INJECTION: forcing a failure. [ 1248.504393] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.507198] CPU: 1 PID: 8641 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1248.508826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.510810] Call Trace: [ 1248.511445] dump_stack+0x107/0x167 [ 1248.512316] should_fail.cold+0x5/0xa [ 1248.513222] ? create_object.isra.0+0x3a/0xa20 [ 1248.514304] should_failslab+0x5/0x20 [ 1248.515211] kmem_cache_alloc+0x5b/0x310 [ 1248.516183] create_object.isra.0+0x3a/0xa20 [ 1248.517236] kmemleak_alloc_percpu+0xa0/0x100 [ 1248.518319] pcpu_alloc+0x4e2/0x1240 [ 1248.519249] __percpu_counter_init+0x10d/0x2d0 [ 1248.520343] io_uring_alloc_task_context+0xcc/0x6a0 [ 1248.521525] ? io_import_iovec+0x1120/0x1120 [ 1248.522571] ? lock_downgrade+0x6d0/0x6d0 [ 1248.523548] ? do_raw_spin_lock+0x121/0x260 [ 1248.524563] ? rwlock_bug.part.0+0x90/0x90 [ 1248.525554] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.526694] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.527916] ? alloc_fd+0x2e7/0x670 [ 1248.528790] io_uring_setup+0x1fbb/0x2980 [ 1248.529773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.530963] ? wait_for_completion_io+0x270/0x270 [ 1248.532126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1248.533354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1248.534581] do_syscall_64+0x33/0x40 [ 1248.535446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.536642] RIP: 0033:0x7f2db9fa8b19 [ 1248.537505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.541780] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.543564] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1248.545220] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1248.546884] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1248.548538] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1248.550179] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1248.562817] FAULT_INJECTION: forcing a failure. [ 1248.562817] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.564259] CPU: 0 PID: 8644 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1248.565101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.566128] Call Trace: [ 1248.566469] dump_stack+0x107/0x167 [ 1248.566918] should_fail.cold+0x5/0xa [ 1248.567390] ? io_wq_create+0xeb/0xc00 [ 1248.567874] should_failslab+0x5/0x20 [ 1248.568342] __kmalloc+0x72/0x390 [ 1248.568776] io_wq_create+0xeb/0xc00 [ 1248.569239] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1248.569863] ? io_import_iovec+0x1120/0x1120 [ 1248.570411] ? io_apoll_task_func+0x2d0/0x2d0 [ 1248.570962] ? __io_req_find_next+0x300/0x300 [ 1248.571510] ? do_raw_spin_lock+0x121/0x260 [ 1248.572040] ? rwlock_bug.part.0+0x90/0x90 [ 1248.572562] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.573157] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.573804] ? alloc_fd+0x2e7/0x670 [ 1248.574262] io_uring_setup+0x1fbb/0x2980 [ 1248.574781] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.575400] ? wait_for_completion_io+0x270/0x270 [ 1248.576004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1248.576642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1248.577281] do_syscall_64+0x33/0x40 [ 1248.577736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.578372] RIP: 0033:0x7f9af1df9b19 [ 1248.578839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.581075] RSP: 002b:00007f9aef34e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.582003] RAX: ffffffffffffffda RBX: 00007f9af1f0d020 RCX: 00007f9af1df9b19 [ 1248.582880] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1248.583748] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1248.584617] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1248.585486] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000007c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffd, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000380), &(0x7f0000000780)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1248.663337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1248.708595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.710390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.712471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1248.734357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:36:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 51) 14:36:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8990}}, './file0\x00'}) accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000200)=0x6e, 0x80800) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd00000000000000000000000098b8fdcc7f356e326c148d14000000000000000000000000000000000000000000000000000000fb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000005a08000000000000000000000000000400"/172]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b5700000001019c8068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) 14:36:55 executing program 0: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000140)=0x3fd, 0x1) lseek(r2, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, 0x0) sendfile(r6, r6, 0x0, 0x100000001) mmap(&(0x7f000060d000/0x1000)=nil, 0x1000, 0x1000001, 0x2010, r4, 0x0) 14:36:55 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x100}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x370}, 0x1, 0x0, 0x0, 0x34000010}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x20, 0x1, 0x26, 0x80, 0x0, 0x50, 0x100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp, 0x10, 0x4, 0x9, 0x5, 0x0, 0x3e, 0x24bf, 0x0, 0x1, 0x0, 0x7}, r2, 0x10, r3, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) lseek(0xffffffffffffffff, 0x3ad3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x110, 0xffffffffffffffff, 0x8000000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/163, 0xa3, 0xf7a1) syz_emit_ethernet(0x89, &(0x7f0000000740)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x67, 0x0, @opaque="5c25ad596728f7dcb27b87352defa49c41126cbccb9872b6ecddc3771b74097af9cd2bd0e04668cc794b0887d80dd2643c4c36069e6fd802624af6b294ab32e2c99a5bfe9c4c548a14726aea46086807f4e012df15a4f18e27946514e80b29"}}}}}, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 14:36:55 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 50) 14:36:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 51) 14:36:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1261.571969] FAULT_INJECTION: forcing a failure. [ 1261.571969] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.574456] CPU: 1 PID: 8669 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1261.575952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.577759] Call Trace: [ 1261.578361] dump_stack+0x107/0x167 [ 1261.579164] should_fail.cold+0x5/0xa [ 1261.579994] ? io_wq_create+0xeb/0xc00 [ 1261.580838] should_failslab+0x5/0x20 [ 1261.581668] __kmalloc+0x72/0x390 [ 1261.582442] io_wq_create+0xeb/0xc00 [ 1261.583276] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1261.584382] ? io_import_iovec+0x1120/0x1120 [ 1261.585336] ? io_apoll_task_func+0x2d0/0x2d0 [ 1261.586318] ? __io_req_find_next+0x300/0x300 [ 1261.587295] ? do_raw_spin_lock+0x121/0x260 [ 1261.588236] ? rwlock_bug.part.0+0x90/0x90 [ 1261.589164] __io_uring_add_tctx_node+0x2c6/0x520 [ 1261.590214] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1261.591355] ? alloc_fd+0x2e7/0x670 [ 1261.592272] io_uring_setup+0x1fbb/0x2980 [ 1261.593417] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1261.594805] ? wait_for_completion_io+0x270/0x270 [ 1261.596142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.597567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.598982] do_syscall_64+0x33/0x40 [ 1261.599999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1261.601180] RIP: 0033:0x7f2db9fa8b19 [ 1261.602089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.606262] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1261.607921] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1261.609459] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1261.611011] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1261.612558] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1261.614100] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1261.624573] FAULT_INJECTION: forcing a failure. [ 1261.624573] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.627154] CPU: 1 PID: 8676 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1261.628644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.630454] Call Trace: [ 1261.631032] dump_stack+0x107/0x167 [ 1261.631833] should_fail.cold+0x5/0xa [ 1261.632668] ? create_object.isra.0+0x3a/0xa20 [ 1261.633660] should_failslab+0x5/0x20 [ 1261.634491] kmem_cache_alloc+0x5b/0x310 [ 1261.635384] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1261.636506] create_object.isra.0+0x3a/0xa20 [ 1261.637469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1261.638583] __kmalloc+0x16e/0x390 [ 1261.639366] io_wq_create+0xeb/0xc00 [ 1261.640190] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1261.641299] ? io_import_iovec+0x1120/0x1120 [ 1261.642262] ? io_apoll_task_func+0x2d0/0x2d0 [ 1261.643249] ? __io_req_find_next+0x300/0x300 [ 1261.644234] ? do_raw_spin_lock+0x121/0x260 [ 1261.645183] ? rwlock_bug.part.0+0x90/0x90 [ 1261.646104] __io_uring_add_tctx_node+0x2c6/0x520 [ 1261.647167] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1261.648308] ? alloc_fd+0x2e7/0x670 [ 1261.649109] io_uring_setup+0x1fbb/0x2980 [ 1261.650016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1261.651123] ? wait_for_completion_io+0x270/0x270 [ 1261.652188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.653324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.654446] do_syscall_64+0x33/0x40 [ 1261.655263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1261.656380] RIP: 0033:0x7f72c981db19 [ 1261.657191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.661197] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1261.662866] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1261.664424] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1261.665986] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1261.667554] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1261.669118] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1261.684386] FAULT_INJECTION: forcing a failure. [ 1261.684386] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.687158] CPU: 0 PID: 8680 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1261.688745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.690681] Call Trace: [ 1261.691304] dump_stack+0x107/0x167 [ 1261.692161] should_fail.cold+0x5/0xa [ 1261.693056] ? create_object.isra.0+0x3a/0xa20 [ 1261.694128] should_failslab+0x5/0x20 [ 1261.695031] kmem_cache_alloc+0x5b/0x310 [ 1261.695995] create_object.isra.0+0x3a/0xa20 [ 1261.697043] kmemleak_alloc_percpu+0xa0/0x100 [ 1261.698099] pcpu_alloc+0x4e2/0x1240 [ 1261.699021] __percpu_counter_init+0x10d/0x2d0 [ 1261.700098] io_uring_alloc_task_context+0xcc/0x6a0 [ 1261.701265] ? io_import_iovec+0x1120/0x1120 [ 1261.702293] ? lock_downgrade+0x6d0/0x6d0 [ 1261.703266] ? do_raw_spin_lock+0x121/0x260 [ 1261.704275] ? rwlock_bug.part.0+0x90/0x90 [ 1261.705286] __io_uring_add_tctx_node+0x2c6/0x520 [ 1261.706414] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1261.707640] ? alloc_fd+0x2e7/0x670 [ 1261.708515] io_uring_setup+0x1fbb/0x2980 [ 1261.709500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1261.710689] ? wait_for_completion_io+0x270/0x270 [ 1261.711865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.713090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.714305] do_syscall_64+0x33/0x40 [ 1261.715183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1261.716386] RIP: 0033:0x7f9af1df9b19 [ 1261.717266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.721581] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1261.723360] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1261.725017] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1261.726682] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1261.728340] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1261.729986] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:55 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 51) [ 1261.821487] FAULT_INJECTION: forcing a failure. [ 1261.821487] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.824148] CPU: 0 PID: 8688 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1261.825686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.827564] Call Trace: [ 1261.828165] dump_stack+0x107/0x167 [ 1261.828988] should_fail.cold+0x5/0xa [ 1261.829852] ? create_object.isra.0+0x3a/0xa20 [ 1261.830887] should_failslab+0x5/0x20 [ 1261.831748] kmem_cache_alloc+0x5b/0x310 [ 1261.832664] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1261.833831] create_object.isra.0+0x3a/0xa20 [ 1261.834839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1261.835991] __kmalloc+0x16e/0x390 [ 1261.836808] io_wq_create+0xeb/0xc00 [ 1261.837658] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1261.838823] ? io_import_iovec+0x1120/0x1120 [ 1261.839812] ? io_apoll_task_func+0x2d0/0x2d0 [ 1261.840820] ? __io_req_find_next+0x300/0x300 [ 1261.841827] ? do_raw_spin_lock+0x121/0x260 [ 1261.842811] ? rwlock_bug.part.0+0x90/0x90 [ 1261.843770] __io_uring_add_tctx_node+0x2c6/0x520 [ 1261.844849] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1261.846029] ? alloc_fd+0x2e7/0x670 [ 1261.846868] io_uring_setup+0x1fbb/0x2980 [ 1261.847816] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1261.848954] ? wait_for_completion_io+0x270/0x270 [ 1261.850064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.851245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.852407] do_syscall_64+0x33/0x40 [ 1261.853243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1261.854393] RIP: 0033:0x7f2db9fa8b19 [ 1261.855240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.859404] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1261.861126] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1261.862739] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1261.864351] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1261.865958] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1261.867584] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x1000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x802c2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r3}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002bc0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000002cc0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) sendmmsg$inet(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b1ffebab5ceb30336b5eef9d1c68ee502dc350606675c2936d9a045729f5fb9a616ebcbc79ac4ca1d2a65c6af51aeed50ff140eadb63647c222949f75bf11cc0149e0cae78819e6f79d009421158d70ed65f88510ac5c33a0399388886b7a9d25b8756e636b6efaf18c7c41c4cecab1a5030b75852fe5cfd6d908ebdbc670c548e05f579d246550a949653e0853c2c0262ee25d0e0dc224ce5678ae59637f3f5ed824073c0960f6a76308f18f1c63ad9e6ecb49467ee5166", 0xb8}, {&(0x7f0000000180)="ef3df0455b7dc422473e4f86c45a9eb6c00507f5d61bde5fcdfef585efc5cb165a93f695a518cb5d65b2147c83ebd028093d2bd6f0d5067892b74044a14e2ddfe121eb87370d4ce220adf077b4b4520ab9eae7e7a274ba736e3ea1c1b2f28ee62dd80802984fb5629fda1324ed44efcec174446b791e4fecf8c7f98f24007cf5a8bed4d18385443ae2ecb6bd5fcabb3b5c651e25cb6f4218e042f741", 0x9c}, {&(0x7f0000000240)="9e80590bdc5993a69a48698bc12393b8f679c6c89f68415c48f1946cd55fbb0f84", 0x21}, {&(0x7f0000000280)="f025635b717aff57e8f130a5f9453c7ba6b790bd019edbe3f974ef295f54d6f3f2570e9f38c67f5286f29160494678a060ed317efdab0b0ac49d8eea5e9c573e300374e9755a2fbc8c141741902765b4ddac469704f152f8c4e25e4c5fde38edb24147d8d318e9cef65e720fa9e569c8caf4b8e0cb80d3e2bb9f61642662e03ab86e27723fc475a6165c24f279de735d3e064400c1ea78e3ec4e61953ad2165b4f00be145b5bf95fbb5e0783985542c8d2864a0186fe0f92442c7d694208fd5c920be285525cc95d7f7fc91318cc564ff329ca3dd8f170a0cb50d775", 0xdc}], 0x4, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x5e, [@broadcast, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x27, 0xe9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @loopback]}, @generic={0x44, 0x12, "428b438c8a8cc9e9d0fe2272bb748864"}, @ssrr={0x89, 0xb, 0xbc, [@remote, @empty]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x80, 0x1, 0x1, [{@multicast1, 0x2}, {@empty, 0x1}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x3f}, {@remote, 0x80000000}, {@remote, 0x3}, {@broadcast, 0xffff}, {@broadcast, 0x87b2}]}, @noop]}}}], 0xe8}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000580)="517f4e81291dde2b4bd86eeb52a86639128b1530fda5737f34d34c68125b18099c0efecdaca9f43ab8dd860176ac5d85e1e8557fa2e12e660470be4b913ec92d158e261d3b0a8b97c3ebe0abbf7f84e114e219621e8c588465", 0x59}, {&(0x7f0000000600)="50c3f6e0bb2d050f25fbc0394e0f093744518632039bc39ec657d502735c24acfd6e7eae716140c194e378c57b8906956f50df59cd4c6720438243af989d8ab318bc79f8a0375a76ede9759e877929bcdca5a6421f417de99f9eec3ac9352a9929b3daecba311cf382d80503d80dbcfeb3683229077cffab3c0f446ddf7c4aef35", 0x81}, {&(0x7f00000006c0)="97dc7fdb1b2e8dd457591d8888cf3736633edb254c5ce8476bac66ff52cf599bf9fee106934cf68e2d8b4d7943b237cc2747ddc190d30347f315cc26cb1e293a1ccd2b7695230753b9ec4174db511f8db0b36a23c026876898f6e4cb013896", 0x5f}, {&(0x7f0000000740)="37b614ddb345c253707d60ec99c38cd1ec2da1d360cd6096722bac467d9373590e96cc609555e1f7e51d06a21fbf3d3aacce223ec816884139d3741c42f6d2ceec9b1442735e1e4b33ef06ece24a229c0e651f539e610dd793237975519c86ec7b24b753a3b170fb9e61b1307e17daafe0608e6763b3243879405f22f385a6f34c99633cf2239306f08037952dfa670ea460ebee48b2b0dad67395a4abbe6d94068b7526df42905138be779aa8065a51b9e42d23d815d8afda51b5ca9790c21d3880cb4baa76b97319183c63a691", 0xce}, {&(0x7f0000000840)="5bb7c03111f41ca07de6ec662cd84123a3bf85121fa4b1cd43201faa401c69fefa67123b306dcd8b9c51e2f8d254bdbe36e4a2dc572151b2af324a38d0d5111524cf6a1c8d51f3bf4f9b4245eb42db52164b7ffeaca5ce", 0x57}, {&(0x7f00000008c0)="137f901f898a0b3c40e0c9292d60f7781facbcce3c085878177880f40f43af7fd2a224df274e8e7c43a877cedc97c42dd019f8d948b94a70aaeb614dee8252a2fe56657f9f4f9ab10fd7088bab7cee24a7113945dfbe055c4fa0b1c22d70bd91e554f6216a9212f0393e667fb8b2edefb5439e5ca8cf384364b4c43bb76f45c475fe790bd4b4490eb8d577e01a05507bf193493eb5c7a6cea3c1608f026bb6f75c0cb6d14007d71fb78573ace40d42cb175061c260efd933bdc3091eb01b54e619156da9d8ed60b303f3f29ceea002b7c57f41", 0xd3}, {&(0x7f00000009c0)="1a29f4e792898b56146b88185b1130e30a92cce947048751057f8ce531ceb717a870c5f949189f6d0201d20e6c32209de2e94ec7f2c272f54de3fc4d9b5d4aff1f2f4493", 0x44}], 0x7, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x38}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000c80)="4107f31d416a011a2e6f446a5b56a0612a880d8e20e77d1c083aadcd89bddb5e8a8ef53af5b2d6811bdbc1da1c7d1e197884ed4118b0b1534999725cdb0f8ee6606842a23d00358b7b4a25f8bda55a3736aa80b77df8bc4e149c81e9fedc66394876d48af3c9daaf", 0x68}, {&(0x7f0000000d00)="99774314b01d217de7127b9123b521aa7b74b9f6f1ef6ea05f92334e4cb72573a5aee21a1209c6d3b12de1021d3c31caa352785bd12c8a53fb1b976e5f3e9f04407c40aa2c533be826f60ae357b6f9711b5b0a279e4a24290930aa0a8f5a7c4f16ff6299c2ae1ad468ebbaea1b7f21d066dbb0ef87c95f6ba4b987df88", 0x7d}, {&(0x7f0000000d80)="8c2cacf59e810e036d05d6a8c09bb677605bee0a5944916ddaeccf590649776e5a19fefe8cbf55737c369d7b32fd38011154a25a28b32f08997451b63434b0ab72c6d3d67acc8d90c84962e5f71ffec40fa10f3f900fc668ea8fb40dfc5368c9b6f075c5fa899bb2da4f9a6f6eeb44c92577ce1c33127a92975f88ebd22c7708b27269a8a69340279c1e9a929f254ed34e11c23ad3c94cba9d79dc3b1f5ad11cf0e02db967ba7200e5c6e0a73ffa9869980bd6d51513eea1a78e53a70f22e2862f3baf290d78e66425fc81d2d96d2d2be6073edb79073cf6fe387a706a5021962285a17da71a01a523139da32aa6b08a806de5fba1047af3bf499e6408f5ea35e241f52a8cec0e3664b671f74649f9c7c2fca190ebc23207944588d85823fe3c09a7de33df065c2ecea6c6622f87bcb57164d9406269cb3477941115c5e4ac8f3e54f75e77c840992eb79c80dc47031a4d49b3399098207cf8c831113bbb7c66c07d0cb3ce452433f527f9b96a41b99a342bf1dd06017cb9f34451b59ddd30af247c183046bc2009b27edda5f30dd945916f4dc73234887a1c4ef51cae7ae629f0cb2fdcb358b68dd34d2b3084b9cc2ef7ff6f1419d0fc153de5fc6c23891f90263d660e0bc094a51ea04aa2bbaca3cc840ca2e871844d7058eed630c68eeac7a2291beef89b8424097aca9e268bfb9d0bdb7b936d16bb60375761ea5a4f1956386387f80468d82b20a14cbca039c08d885b9cc65717400951fb24d136e64e3a4303a7cde326ab58fd9f28df8e5194199714ce7d7d042f665f78b155bdacd6d3b5d3fe9bef7c3e3320317f2d95e6b4136aef447f27d733e553b697259edb8d9046f93f51bb9e9b8e82ce71f1acf132dcc1af8866f760b2ff1fc581ff03e1b014b433297e9c5c75f8ef90c083b3d6df4103c7d640e376c4ba7e043512d9a4b84c0b6446c894bfc451c47f34ec3bac3ff6caff0abfeb79c0a01d875b2783ed82831e6cc4699db582d764d8556b5768524507f45a992186532b05a78b1cce32b4553eedb4487cb1ace98ef3817556156139d86564efb84556229ee6b5e9f8f8a7eb7d3995e24ee016a02718ffa1e4f2b8b1610f399d0bf20980b974485cde82c0f0c93784aa3f3d7c6506d3cefe3f6311354182de21d4201daa91780f9230b0e8b79f399276977faa5379fd1cdbfc6d3657409ace9fa0696ffd7dbf9587227f1b9755601ad16b360d989cc4addd6e97a3508ce8892b14eda530d30aa6c914ab2d3c83a0e3676c548f81a5e527b086bf9721798d738ce86791ec8d01a6856760651e96fb264e09230ff3711a84115addbe0696bf9ed660b43cbd19f5906fa8b7120073d6b2d90510acb6c81640c5693d88b7af104acb6b1a6e751cb58ef349881777c12025a056419005aae34c7e2aa87746c58cb5e67c042cc838830f2ff03c3e5104084117486ed2296fc9163aa2c5269eebed4eaeb34bf554852484222a0482dfefc71d445ea098282003160408824e44fc6b20f62f8dadd554dc04948c292bb45f5c70d7bc594527245b17351e2b4df3921acdff8c53e0e2aadbe7762b15c46ebac892d3077894909fc97b36c1e20da4f2f22772e9ab405f94c096e3c4bdd2e65333b56d52bf46a3cffcea351ba9c5c551521d616c9cbbeef9573be45d5d924cf577296309269bb11e0c2e3b6b1c73d00ddb7a4d253d0962a9084022ece86d0500d6115974fb43be8c8be73d60db94d3b0fc3ca939b80fcc7b491543a71a513cead88ee628e0135e06dc3941ca28c91b3f986108171afb0e09dff62622e2f583aa0b5549a64156f0486c6f4bdb303208500fc82d91080fefb0cbf199272549450bb056eb6335225a2cdb8fdc8a7d498ad449613ecbb1cb9ecfab20e537bdd88d32b0b39ca7db773cc8d5525aaaee630319c34c281c127be30dda45102ec617ca2c27fd1bdfa2f307faa97ccb68e4c7257ef4669ec611f84e04e8265ab881d2d6db779d66af6511463362bed547d6f2136932558a8e706ad81cdf8e1ae5036064ffe3c9b5e016f035eb1532375293b4d3e6c417c9cc78241870b39451ba87b4c83128ade58333d5a52756e6aeba9038f9ed8a0125471a2c16c93355fce88d1718749364a9fec839b5b1a3fa9c033e3ccbca5e65774eb9cda060ac62a0a13046601665e76a2b260e6c298df05003e0e98b4349e2b5fee3ff70e6d8dc1803ed30a6df03e8cd3d3ebfd706f0905ad6afddf855557cc106d2ab3e10baced864a2f50aaaf9eab7805cb676811c294a8daf039d1ae79730a1d4a4afbfd8044297e840670c5bdb9497ef3bebac2314e8d5546502b87ad6b066d5f6792c7fcca7d0ebc3b6ed9b39c43f5e3919511aec2edc07c6cf41fb6dccf45d3a652238f74bff728a5170d90911e4d3978f333415ad4632f7f37fcce25508c0f89b10d38c5d4c16026f9b79971f426109c3e2ece95633c82ba6bb589a9691c3936966be3aaa6c8c768c2da3f853e58dbefb12b36870a6ad53696a91f5d046b9b7330cec8857f9958b3142f3c16e9de96bebad8ee8cebd1500543c90b20da73589b77469b0dd3870e5ea6154a257b141a18bfbce153cf397c1e1a21cad22864c0a3b211b34387428ebc7d0e43ca4a21931b11b49fc98012ebd34a30b0101d27b6bc05677424b2d8232aea96f313e71f7c4ec1c2f23e073c9f19077d4886c9da6dfecb69dbd3c0d1e9970b20e663ae6892f2354bc5c5725197698004eda04750bfd08c472ff23ebb495f97ff59715a86b9a033a7492a1396276a415bc02262460b6a469794443735dfd241b7ce7c1f8fcc8f3448c9ef541143c806302185d303baf0dab0846a2d8069e071d58bf49fba209c7cc259381805e9fe0be822d86c34f65dadba1ce4d740712524c3346d5e637efa2493f23dbeaae6972f659bd8ee7c202db9f41dfa25571de327ce97636407ddab00e5b186a6d716ad274637ae971dd586bbe50cafeca0baf357506c6abeabf01bbdf1bb83777b1f3b626355b8a5e6fba915e7dea9ec8488fd3998a762d28e0e8944e47c7462c170e75f78b2430217067abc5f94727cea36fd19460a2c5aa5c7ee5dc47f893ebea17efc62fd06c0d91c83fde2395c1fa1a242092eb065a612c817e25edbc8dd3ef52afe1172539e94c1b59db3fb7298a79ca82fff05099155f4b63c87e611a98d860b59ef22d4e97ef75f47211346fe005ca291c9cc657bc6a540127983722aa9ed6e0038b24b3a736072cffc37093f40bb010b9c89412595bde990ef04e14806cfa911e2e894f96ded2ff76d59c70f2ed1e05ec8d7900eff086e5c88997136b8117998a168008fad4e7406e480584f6e4fd98766db7607730d96b1e26c170ac1d741ac76ad70d65a2f20ea86773b2cc02e335a9e7a4f974c95a671f464ba7b3c99ccb644c971e62b1975cfefe2400b7110170ca99e2d672c3fc6379da353abe908512ee41822812b598a00110806dbcd7b2e7d302d373863e42e388dbbb96f0b74fc72c94ecd8d5ccecd7f66739e910069dfc1e13559730ad393889ff202af37c0a4257885ded40f54c020185ba6f39324913c4052c13d7c612cab0cf695988569ecb78f6a13b63b972197327bc23d7409755d59aa0cd1f413a42a19165aaf66ab0c6ccbbeeb87210ff48135333c2727d90160e06f0814b5ed1168c15cbde842e6e820705eba93c9ffd32ee0e2c6f1a098935f14a607cab049bb36502ca86e396c4bb1ba4f37bb0dd0ab40cec743578be70c04e0e3fbd4454453c4dcb435e613574d98f67768bbb77a5f9a8ffe9a11892fb18b5db83d89b3d62a6b81669927122e476d3448354b3cb2ebab344d900466ec6fa19b4ed6de8147177bcba48f71eaf8dd91d2f8c31e240cfa160727983de7f8be951a2c115b9bd603a1ebeae65011e7c9587434376089859fe31d126eece634d9fa2f94e084abfda284afa19a65a50210f42947239a59f06f1ed46906373ac7730b67f510267e438980730b58f122af0796cfbd3891a3a9b168159bbf024c1edb0b61d550418bd73c8c7746dcc9ad3322f083c548770c1534428c084abe44f588a1fcd5da81390a025ca2531d60ef0e98cc016fe08b2b2319b77d596be9294a77e83b0b64cd68f7619a55b01f4a272508fefd75dd59c1654bb12ea3c354b7f3a61670868657b415c6d82401254222f2b862f35e37dac827dd1eebd9b60776ebb5ae38aa5fa848d364ce174b5861eba898d64f0c2530fdb2219de2f6c14fa01e537c0c12801fb3da7efe7ac1a2d4d7b4bf035e8c124c6511a5f3943be6577028e462f6a19b63a04fbd3d9660ce57e54753be0252261bde25fdc39ca67d57d0d38f5111607f877e8838fcca9dd801ac373a4c4a35726cf54bc2eff401ac595b0260e8cc192043753722516a284ae6c2f034438130b95f964c0754d82e3a6fee3e7f63434502c4e838c041391190c02821ad180c108c06286aa144d86490917a645bf2661e31d49edf5d22cdd808c28425a733a7268285cd5d7896dd91d747232895e95e059a9346e2de0d0ddc8c064b902416652b2a40578734b7caeb02c5dac651dd08fb18e824836e2d3b8447ff63c2ad6fed60555d78f42433955aa2d458e7bd79ba4ae06a854176fe5228dcd4a6fda759f374de378a03750eed14d32bf489300cbb9c05c6129f7d375a2d630885b78628bb2becd8268bfaf17b3675253444e8ff0cd920a752e591c9681c186850be655249e48ea394789e402452dbbffa6acc54786b810e4308edbecaea61be31145ae52d0389a9c9052a3f63d905311bacea63e861c5555d38d0a6f67283ef61ff2298ba76ef5cc54747a4aa4f48db97ab2d050d2c370a49a1eb14402165b34071fb2bafaeafd57e503772ce8cea44d15f211918f7681e5d09d9ffedaa5b847a561919aea68c96a87b255a15489ad0fbc43210fc3fbc635a69e3d70ae85bf1d47382633cf976441b3e3adb86976d6139dbaae87b423dce44ea9e79f3b4a4ca0951d6aaff9794a1cfc0f29592157d84d85d0427d079dc824d50eba9101257062ebcfc235ae366ddfdffae69011024d9f43b65ced30ad435bb8b5a023cd39850cdcd2b37fb221a2e59847384b0296bc886a43a7174c9f4328e13670901c737a374b96e2ad08ab7e62ff8fc81fab141d1d725774186c86739f98642b0a03220fa787f6aecb60e7d937b5b0c7d4d63ca64b2e150440939fe6dd4fe3402327240f512c1e7773a8f993c461c91ef15ec7ab0c5a16ab744dff2151c90b1a19b0963ad3515a2b259c256fe5a645eb21e281a39c2e9c96c6ea16b74df78bc6e7ba608c2f298ec4e218835e4cdfbaebc4bab89d6663075e8717ece1513686108b39f69f196e11f521efdd7fb1bcd816c0bdafbc7f29f3b34b08a2aeb84adddf0622e1bb924fc7369530aba24198208a69422e831cc708a052e73cb9b615c1cd9ed590f98ac91ab532f38685d29dfceff5cefa7e1487b46e572eb9c9f6fc082d5ad8d0e12b63e0e2de653018e360312541de4e32c3cb4b619b6e640da859d3056bf5db9c7996d5e327d73a08db5e477bdf71557654f616e77c5d6a5d0891d14648965dc2b2318439a3887ed92d6634e58650e324b5fdf265fd2cb9ddc3533cb6cd9779abbd5209687bade89cb2a36d0257a903a8f5a1f798b241f17b4373b0b4524a2078c38f58273d34dfe30bc171d56adb481906e2fadf97a68827f86b90feedda15eca48515c259721543c755aeb2f959dd44b50b7fa3859771c3504f5bd6f16575f662e0ba8e9db4d20d356ba07e338fcff178d671d6", 0x1000}, {&(0x7f0000001e00)="e048dfd59139ef014bcb54ee3c6fe94b7e6c9ac37a3715aba3974478a16a56cf6ad47b849b2a401b9b1331f26367d178d6c50626624eb2b11e66fba55de97b2d55edf11ac326674fb01e928d810fd2dc43eca23f63166d437adf2ff2c214d51a95c191fe6b4818f7615326a9969a9dff50f64fca1c49df52e52df5d89c8642cca6ba63d7c502f9cb1a704bdf9f6ea8ab1bdd521b5b61e1b5961d14c621d50220873416cf770579b9ab2fec50c2f9991a2930f33a848b8ff06ba6d89398bbdd1abd33ef0294fc8feb994625596e8790394c88c28a825cb4862247ba318a0f5993670dd26fc7629094b1950f37a43faa075769953b7db9", 0xf6}, {&(0x7f0000001f00)="25fe778178b36b1f05c0328739941bff1b06", 0x12}, {&(0x7f0000001f40)="7cee43bf02ca9a4bf18c68aed2b376545bca9db4f2ab4eb32db5c412a93a999147d58126ac914458d9fd9ac407e43e6c0a7f3120a2e52c85306d446e2e313a8e941d6eed0e7c840554ea6c782732e0694c8b9259ae6fde39a667cd44f9e525b59a5aed32bd81f43a43960be9079500c45366f64dfe7c25f51ac07d480dd7b601b65baf07ec8819a3502c8ee5bbad7a0ed2b55374b05787513d7d2e2df3f8eef90f0bfce67c92afe95af00da146d3cd1f64f722bb013a831be851a29c2b12362139b6472467d588e5e0b4a097388b569a406dfda0c578571ad65f43745023ad37f7f5460b7bd4c671663889538da8", 0xee}], 0x6, &(0x7f00000020c0)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002100)="77e176969c6381ad22e215e632fa77a3e7af4f01b77561dd30eec4940de86a9f91f262a4a4a891726ad0914cbf31020a25d0828382aacdd05f7a7f9581f23f18b49dc02019bc5421e61bdf052aca8475664dc39fb57407a0b6c16763a1c9b4cbf72c1d29a7f4e44afe12bd9a4f7b84042e68b758ab3555deaa3cdc6bfdd23d292cfc7361cbd7a7382779ed6ac0312f0c49a122afaf80f3", 0x97}, {&(0x7f00000021c0)="733dbd4cea16a2f5b4146df494b85c5e1fb50cc314a4cd8ee4e8dbc7e0bc4334", 0x20}, {&(0x7f0000002200)="6b1fb4ed72851e83626ecd7e9874c89879ede070abfb2cd782b0fa24ec76d8f9ff455c4b4fbb21da38cf6d7d583b72f8b0587f2a5cdbf2d9402a116876a44fa283005a563f049ed51db84491a43516e191d016ca66e30b932c4e1bf4473b846dc234c42ca939d25e6cfb8324eb", 0x6d}, {&(0x7f0000002280)="667bd1ad64622a07343c43077a07358b69395973bb0cff3cf5b3dff65df1000e355e5f1d75cf4859aed8543dedb633f4a6b9c73468185deaa7006f4f8875ddb8fd945280e9d76cdcd5a9a95ca84c562b9751052bdbfafcb08532efa3b2211bd807526f49cfe2a0e6fb44eca756aa27f9554f9df9571ea6b5036b5f79715353a60ad87c705065934d145c61fd5643446aa61e01d78a0fd9221e5eeba64aca4ba2c0d11501", 0xa4}, {&(0x7f0000002340)="149e23ec168b6f2bca4fd59de75c3415d028ae3ee0e099f1e7ccb598d1fca7427218b6fe9a7150296b07bb5465a7ee8adc333038b2af49716f067a2315577987babe6f5be0bcb66c371a48183a313c6bf073e1efb32dd3921eae303164f22291ec34cc3ef7750ecd879c5cc2dc2838299b6d6dc6969423f01bbc8f84238d059ac615df7f817483a6b667cdd540930b6cabdb5cfa3652d3e92e6b4aa177846ad0d24b85315d131d82c522", 0xaa}, {&(0x7f0000002400)="e38e7c146e47147aeef40b882ea277d6ae5e7da67e5592692247a30d1720060c0aeffc5c3a1d2a07875bd4f27dcab5ebbcf6d31abda42120e0d5f51d5bd5cfa98d790c8732", 0x45}, {&(0x7f0000002480)="baf093bfefab4c6a8fe3ba0e77fd092882b6c71ddfeafe11754dbb81bcd64b6503f6305df95b1e3e090ce496c329f95f531e563ed1e3578d8611153707d0125cb9265ced80ac88e24a8fca51bdf0736dfd8cb6dc8ebb68969b75fdea288cedf355854fe625fbb9c4355e14eea06e06dc2905cd92", 0x74}], 0x7, &(0x7f0000002580)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xe6, 0x3, 0x6, [{@multicast2, 0xfffffff8}, {@remote, 0x1}, {@private=0xa010102, 0x7fff}, {@loopback}, {@multicast2, 0x6}, {@loopback, 0x7f}, {@local, 0x3}, {@empty, 0xa8}]}, @generic={0x44, 0x4, "a70d"}, @end, @lsrr={0x83, 0x23, 0xcf, [@loopback, @rand_addr=0x64010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast1, @local]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x40, 0x1, [{0x0, 0xb, "646ab74005231a933c"}, {0x5, 0x7, "7d196aefa0"}, {0x7, 0xe, "8e701a2181a873276adb0e46"}, {0x2, 0xc, "accf36a1c485e36df14c"}, {0x6, 0xc, "2dd8ac84f8b4a7891f41"}, {0x6, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x12, 0x3, [{0x7, 0x2}, {0x6, 0x6, "aace20fe"}, {0x5, 0x4, "a034"}]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x15, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @rand_addr=0x64010100, @loopback, @private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}]}, @rr={0x7, 0x17, 0x5a, [@private=0xa010102, @private=0xa010100, @remote, @private=0xa010101, @multicast1]}, @ssrr={0x89, 0x1f, 0x8a, [@multicast2, @broadcast, @remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x13, 0x37, [@loopback, @private=0xa010102, @multicast2, @remote]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x208}}, {{&(0x7f00000027c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002800)="7c2972bb715832f62c4045674838c24005f5dedbdef34ecdc06b02d619c5534de1bcc52850b153552cfc019d09d73e98063ef0170549ac003c01ce5390b0081516c80b6e1fb7e83377fe777fa5b26465fa70d455a57f46de0a310aa5bf81ce9dc6a03035a653a0b1f25682b90e334efc0d2009a1bbdea9708525ccf86bd5bc928c337a888aae2d2999aa5b045bd57a35dc78eb75f0023d695ca235b3964de9d29585cba2522584cb55e80f3572fd54096936932617352f281b00b393a5d0d82c742a58a8d688e745decce1ce18f079f706837abeb266", 0xd6}, {&(0x7f0000002900)="d100a56e50242e6e879ca34b5a6dc9c9ee9404a375d34bb57700875114711a94dd28e64bf3f0bf6f39d4f396874b5108157b6c18c87d000b8d41bf982aef586da39ed2f3f508f8e1ca7ac248d03f8fa2eb531c7e7aad7cf9f014ab28a2c83fda4e6d0cbcdaf82ee184d29b7a5e17b360bc1cfc2c3c", 0x75}, {&(0x7f0000002980)="be522ab0732dd416e119977275f9e85019db8de60534e1009822ec379bc2f06e3981787626363306b82a8feb49a27034777957dd9be87da54cd53fb7c8b9b3a91f800da6ee59fc499877c3b1c62bb1cca95c471524eba76918eb2b325028e2bf89e987a45c0db8868735696373fb9702ff8bac5996c9f7f120117b48e956b0aec3906b1b71359ffa38dec25b4fb71dfe171ae4a4e49e5b5b39e9296a819fe9954d0d30944e1aee71da49a3e6d68e10ddd457979e2e39b1ec2457516a189678b21e1c1026ea6ea97bc911", 0xca}, {&(0x7f0000002a80)="42bf0a7557f620012028fecc50a6eb97abec6ab28271c45b5828008dfb8c5ffe9f56ebf7b8ab03d747058350e68f4a7193a492b9f8d83d583fc153bd8e45ec6b13b12a3c79c383e26a59155c4962d034b5ffdd2ef4ba8035d2f54c036f3bb18be8a3ad3361d12aca7c", 0x69}, {&(0x7f0000002b00)="56336629e2a8af24", 0x8}], 0x5, &(0x7f0000002d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8c}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x2c, 0xf8, 0x1, 0x1, [{@local, 0x2}, {@multicast2, 0x5}, {@private=0xa010101, 0x8}, {@multicast2, 0x3}, {@private=0xa010100, 0x5}]}, @timestamp={0x44, 0x8, 0x9e, 0x0, 0xa, [0x7fff]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x71, 0x1, 0x5, [{@rand_addr=0x64010101, 0x2}]}, @rr={0x7, 0x1b, 0xbe, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x5, 0x2}, {0x7, 0x9, "fe71bff70fc519"}, {0x5, 0x5, "221794"}, {0x6, 0x8, "eb7e0ac075f2"}, {0x1, 0xb, "3103dd66ad8e5f89aa"}, {0x5, 0x12, "6b1e3f6cfb11ee723bd7fcb42e3d57d9"}, {0x6, 0x8, "c0c474e0a01f"}, {0x7, 0xf, "df8a73f30956b19d15130e5f58"}]}]}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x0, [{@loopback, 0x3}, {@broadcast, 0xc0a}, {@private=0xa010101, 0x2}, {@loopback, 0x72}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010100, 0x400}]}, @rr={0x7, 0x1f, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010102, @loopback, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}]}, @ssrr={0x89, 0x27, 0x7d, [@multicast1, @broadcast, @loopback, @empty, @loopback, @remote, @broadcast, @empty, @private=0xa010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}], 0x1e8}}, {{&(0x7f0000002f00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002f40)}], 0x1, &(0x7f0000002fc0)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@generic={0x86, 0x4, "55b5"}, @noop, @timestamp_addr={0x44, 0x1c, 0xab, 0x1, 0xa, [{@multicast2, 0x2}, {@local, 0x9}, {@multicast1, 0x80000000}]}, @generic={0x88, 0x12, "fc772abd486fdcaa33b7af1ad8f08907"}, @timestamp_addr={0x44, 0x3c, 0xe0, 0x1, 0x0, [{@remote, 0xffffffff}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x100}, {@loopback, 0x4}, {@broadcast, 0x9}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0x8a1}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x0, 0xe, "088f406d07625cd81d1b4e91"}, {0x0, 0x8, "b7c9fedc864a"}, {0x4, 0xc, "66bd58e18c023657f616"}, {0x6, 0x12, "9824954feb904dd87fb9371fe5902456"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x158}}], 0x6, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20d315) 14:36:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 52) 14:36:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 52) [ 1262.049277] FAULT_INJECTION: forcing a failure. [ 1262.049277] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.052011] CPU: 0 PID: 8699 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1262.053554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.055432] Call Trace: [ 1262.056029] dump_stack+0x107/0x167 [ 1262.056853] should_fail.cold+0x5/0xa [ 1262.057711] ? io_wq_create+0x6ef/0xc00 [ 1262.058632] should_failslab+0x5/0x20 [ 1262.059500] kmem_cache_alloc_node_trace+0x59/0x340 [ 1262.060627] io_wq_create+0x6ef/0xc00 [ 1262.061493] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1262.062661] ? io_import_iovec+0x1120/0x1120 [ 1262.063653] ? io_apoll_task_func+0x2d0/0x2d0 [ 1262.064674] ? __io_req_find_next+0x300/0x300 [ 1262.065680] ? do_raw_spin_lock+0x121/0x260 [ 1262.066661] ? rwlock_bug.part.0+0x90/0x90 [ 1262.067622] __io_uring_add_tctx_node+0x2c6/0x520 [ 1262.068701] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1262.069891] ? alloc_fd+0x2e7/0x670 [ 1262.070724] io_uring_setup+0x1fbb/0x2980 [ 1262.071668] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1262.072807] ? wait_for_completion_io+0x270/0x270 [ 1262.073907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1262.075098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1262.076263] do_syscall_64+0x33/0x40 [ 1262.077103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1262.078263] RIP: 0033:0x7f72c981db19 [ 1262.079123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.083261] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1262.084965] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1262.086587] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1262.088185] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1262.089789] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1262.091404] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:36:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x0) close(r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) dup(r2) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, 0xfffff000, 0x80000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1262.134702] FAULT_INJECTION: forcing a failure. [ 1262.134702] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.137381] CPU: 0 PID: 8701 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1262.138944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.140824] Call Trace: [ 1262.141427] dump_stack+0x107/0x167 [ 1262.142258] should_fail.cold+0x5/0xa [ 1262.143139] ? io_wq_create+0x6ef/0xc00 [ 1262.144041] should_failslab+0x5/0x20 [ 1262.144907] kmem_cache_alloc_node_trace+0x59/0x340 [ 1262.146055] io_wq_create+0x6ef/0xc00 [ 1262.146955] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1262.148115] ? io_import_iovec+0x1120/0x1120 [ 1262.149118] ? io_apoll_task_func+0x2d0/0x2d0 [ 1262.150129] ? __io_req_find_next+0x300/0x300 [ 1262.151152] ? do_raw_spin_lock+0x121/0x260 [ 1262.152133] ? rwlock_bug.part.0+0x90/0x90 [ 1262.153117] __io_uring_add_tctx_node+0x2c6/0x520 [ 1262.154215] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1262.155404] ? alloc_fd+0x2e7/0x670 [ 1262.156254] io_uring_setup+0x1fbb/0x2980 [ 1262.157212] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1262.158359] ? wait_for_completion_io+0x270/0x270 [ 1262.159500] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1262.160683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1262.161860] do_syscall_64+0x33/0x40 14:36:56 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x24, 0x0, 0x2c7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x0, @broadcast}, 0x142, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) sendfile(r1, r5, &(0x7f0000000140)=0x3fd, 0x1) lseek(r2, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) [ 1262.162722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1262.164009] RIP: 0033:0x7f9af1df9b19 [ 1262.164864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.169014] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1262.170741] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1262.172348] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1262.173960] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1262.175575] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1262.177185] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:08 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 52) 14:37:08 executing program 4: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) r2 = open_tree(r0, &(0x7f0000000440)='./file0\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x40, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x801) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(r3, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6750, 0x4e}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8884}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6002}, @NL80211_ATTR_FRAME={0x172, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @from_mac=@broadcast, {0x4, 0x7}}, 0x0, @random=0x4, 0x202a, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x9}, {0x9, 0x1}, {0x74}]}, @void, @val={0x4, 0x6, {0x3, 0xb4}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x48, 0x40}}, [{0xdd, 0x4a, "abd23a1f5c8f7052a7675d6fbe9d5627c648334d132771099e392b6b03656d89584ba4d9a0a5f19a5c5c47cb7f1616dccca25c5a1df491473d92b4a618b89cf32210a91e5fdab79e71dc"}, {0xdd, 0xd6, "bc79f89a9007058d66a7522ec74e5748ddc9b24c5926547648505b69d45af02d46006909b387a07e25bf221cbd8e1da95de5258ea4b206481edef3ec15c8a04c5dae6cc7a98a3887dfe7bcdfc7482af5ab2d6cfcae823ad2850a9a9e589711d739a53a036e9641a4e8df42f4fdf8f46010d560bf9b021996521c1f89b773a68d3ad737241090c97a88f8665eeb8d0c4ce710d2b53da838c6babf6a564b96b66df96b0b64f9bdb2cb053a80d60eca4ffceffb458a436d84990b9eb1d42e0288605be2766fdf79af0ad238d3051354d5721dfe2600bd67"}]}}]}, 0x1b8}}, 0x24000000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "f66f422191bfa2498abda11dd1ecd046d2a0e87b49b70bad4476a04bb3b1a9d3c57ea0c72f6bd77d93fa24affa4d1462bd6dfddd8569b73efbc9de35adf0cbd5a9ac2b7830d4671ae66c966608e2441f6d7a2a029afd4c8866aca1db8398c6b2e9a9a57e700d2f2d0dd8766c5c90074e47cfe52c697a28e4c6ab76c58b7ad9fe055f338b0f9742c85df19237f916f751a0f472b264ea698e9436e94474cd2214f8d0d5b7db73d14983651f1680973f557629f314"}, 0xc1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) 14:37:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1ce}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r4, 0x4f, 0x0, 0x5, 0x3, 0x0, {0x0, r5}}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x8020}, 0x0, {0x0, r5}}, 0x2) r7 = dup2(r0, r6) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) syz_io_uring_setup(0x4, &(0x7f0000000380)={0x0, 0x41d5, 0x0, 0x0, 0x220, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000340)={r8, r9/1000+10000}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'iso9660\x00'}, {0x20, 'security.capability\x00'}], 0xa, "89e9acfbd22beca3a183337876994074620f635eac3efa8ed49fab22d831e4c0c6507fdae851da3b3bf487b56264b92e8b0192191c071ece6aa0deeb52320d423e9c684d349b7f2a0d54ed0d4ee6f2807e"}, 0x7a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c460000000700000000000040e4fa2a3a0000000000000000000000000000000000000800008aea00"/65], 0xaf2) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x80, 0xe1, 0x3, 0x0, 0xbb, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcd01, 0x1, @perf_config_ext={0x5, 0x7}, 0x40204, 0x0, 0x2, 0x6, 0x1f, 0x5, 0x0, 0x0, 0xfffff000, 0x0, 0x7fff}, 0x0, 0x4, 0xffffffffffffffff, 0x1) 14:37:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 53) 14:37:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/137, 0x89}], 0x1, 0xdea5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0xeb, 0x8e}) 14:37:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 53) [ 1274.854248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1274.881480] FAULT_INJECTION: forcing a failure. [ 1274.881480] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.881902] FAULT_INJECTION: forcing a failure. [ 1274.881902] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.883125] CPU: 0 PID: 8732 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1274.883140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.883146] Call Trace: [ 1274.883171] dump_stack+0x107/0x167 [ 1274.883197] should_fail.cold+0x5/0xa [ 1274.883227] ? create_object.isra.0+0x3a/0xa20 [ 1274.889666] should_failslab+0x5/0x20 [ 1274.890202] kmem_cache_alloc+0x5b/0x310 [ 1274.890781] ? io_wq_create+0x114/0xc00 [ 1274.891355] create_object.isra.0+0x3a/0xa20 [ 1274.891967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1274.892681] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1274.893395] io_wq_create+0x6ef/0xc00 [ 1274.893950] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1274.894661] ? io_import_iovec+0x1120/0x1120 [ 1274.895292] ? io_apoll_task_func+0x2d0/0x2d0 [ 1274.895925] ? __io_req_find_next+0x300/0x300 [ 1274.896547] ? do_raw_spin_lock+0x121/0x260 [ 1274.897156] ? rwlock_bug.part.0+0x90/0x90 [ 1274.897736] __io_uring_add_tctx_node+0x2c6/0x520 [ 1274.898394] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1274.899128] ? alloc_fd+0x2e7/0x670 [ 1274.899630] io_uring_setup+0x1fbb/0x2980 [ 1274.900202] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1274.900891] ? wait_for_completion_io+0x270/0x270 [ 1274.901567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.902280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.903000] do_syscall_64+0x33/0x40 [ 1274.903510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1274.904204] RIP: 0033:0x7f72c981db19 [ 1274.904709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.907224] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1274.908257] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1274.909224] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1274.910194] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1274.911187] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1274.912154] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1274.913261] CPU: 1 PID: 8733 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1274.914725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.916480] Call Trace: [ 1274.917046] dump_stack+0x107/0x167 [ 1274.917825] should_fail.cold+0x5/0xa [ 1274.918634] ? create_object.isra.0+0x3a/0xa20 [ 1274.919610] should_failslab+0x5/0x20 [ 1274.920415] kmem_cache_alloc+0x5b/0x310 [ 1274.921276] ? io_wq_create+0x114/0xc00 [ 1274.922118] create_object.isra.0+0x3a/0xa20 [ 1274.923052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1274.924130] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1274.925220] io_wq_create+0x6ef/0xc00 [ 1274.926033] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1274.927110] ? io_import_iovec+0x1120/0x1120 [ 1274.928034] ? io_apoll_task_func+0x2d0/0x2d0 [ 1274.928974] ? __io_req_find_next+0x300/0x300 [ 1274.929917] ? do_raw_spin_lock+0x121/0x260 [ 1274.930829] ? rwlock_bug.part.0+0x90/0x90 [ 1274.931737] __io_uring_add_tctx_node+0x2c6/0x520 [ 1274.932747] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1274.933849] ? alloc_fd+0x2e7/0x670 [ 1274.934629] io_uring_setup+0x1fbb/0x2980 [ 1274.935521] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1274.936582] ? wait_for_completion_io+0x270/0x270 14:37:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1274.937637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.938991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.940085] do_syscall_64+0x33/0x40 [ 1274.940875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 14:37:09 executing program 0: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0xb, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48434d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5669800d000edf997150496a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d"], 0x24}}, 0x0) io_uring_enter(r0, 0x24f6, 0x488, 0x0, &(0x7f0000000100)={[0x3ff]}, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1, 0x9, 0x1ff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000040)='./file0\x00', 0x4, 0x1000, 0x1}, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1274.941971] RIP: 0033:0x7f9af1df9b19 [ 1274.942945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.946836] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1274.947239] FAULT_INJECTION: forcing a failure. [ 1274.947239] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.948454] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1274.948466] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1274.948483] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1274.954540] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1274.956050] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1274.957590] CPU: 0 PID: 8736 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1274.958523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.959648] Call Trace: [ 1274.960025] dump_stack+0x107/0x167 [ 1274.960514] should_fail.cold+0x5/0xa [ 1274.961036] ? create_object.isra.0+0x3a/0xa20 [ 1274.961648] should_failslab+0x5/0x20 [ 1274.962156] kmem_cache_alloc+0x5b/0x310 [ 1274.962716] create_object.isra.0+0x3a/0xa20 [ 1274.963314] kmemleak_alloc_percpu+0xa0/0x100 [ 1274.963923] pcpu_alloc+0x4e2/0x1240 [ 1274.964443] __percpu_counter_init+0x10d/0x2d0 [ 1274.965063] io_uring_alloc_task_context+0xcc/0x6a0 [ 1274.965742] ? io_import_iovec+0x1120/0x1120 [ 1274.966344] ? lock_downgrade+0x6d0/0x6d0 [ 1274.966915] ? do_raw_spin_lock+0x121/0x260 [ 1274.967498] ? rwlock_bug.part.0+0x90/0x90 [ 1274.968089] __io_uring_add_tctx_node+0x2c6/0x520 [ 1274.968741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1274.969440] ? alloc_fd+0x2e7/0x670 [ 1274.969934] io_uring_setup+0x1fbb/0x2980 [ 1274.970492] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1274.971185] ? wait_for_completion_io+0x270/0x270 [ 1274.971842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.972544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.973247] do_syscall_64+0x33/0x40 [ 1274.973744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1274.974423] RIP: 0033:0x7f2db9fa8b19 [ 1274.974929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.977421] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1274.978434] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1274.979393] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1274.980365] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1274.981305] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1274.982266] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:09 executing program 3: setresuid(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1274.996863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1275.021479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1275.037463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.039294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.041257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1275.049957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:09 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x2, 0x80, 0x0, 0x4307, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x8}, 0x0, 0x0, 0x402, 0x0, 0x401, 0x114, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000640)=0x6, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000480)='./file1\x00', 0x4) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000880)=""/218, 0xda}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f00000002c0)=""/55, 0x37}], 0x9}, 0x0, 0x40000063, 0x0, {0x3}}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 14:37:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x50000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x23, 0x80000, 0x4) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x5, 0xfffffffffffffe00}) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 14:37:09 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 53) [ 1275.169502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.170414] print_req_error: 26 callbacks suppressed [ 1275.170424] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.172281] buffer_io_error: 6 callbacks suppressed [ 1275.172288] Buffer I/O error on dev sr0, logical block 0, async page read [ 1275.174276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.174942] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.176592] Buffer I/O error on dev sr0, logical block 1, async page read [ 1275.177531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.178230] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.179442] Buffer I/O error on dev sr0, logical block 2, async page read [ 1275.180366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.181020] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.182240] Buffer I/O error on dev sr0, logical block 3, async page read [ 1275.183174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.183826] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.185035] Buffer I/O error on dev sr0, logical block 4, async page read [ 1275.185944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.186617] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.187826] Buffer I/O error on dev sr0, logical block 5, async page read [ 1275.188744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.189517] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.190737] Buffer I/O error on dev sr0, logical block 6, async page read [ 1275.191655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.192336] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.193669] Buffer I/O error on dev sr0, logical block 7, async page read [ 1275.194360] FAULT_INJECTION: forcing a failure. [ 1275.194360] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.196939] CPU: 1 PID: 8755 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1275.198393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.200148] Call Trace: [ 1275.200714] dump_stack+0x107/0x167 [ 1275.201493] should_fail.cold+0x5/0xa [ 1275.202294] ? create_object.isra.0+0x3a/0xa20 [ 1275.203266] should_failslab+0x5/0x20 [ 1275.204074] kmem_cache_alloc+0x5b/0x310 [ 1275.204930] ? io_wq_create+0x114/0xc00 [ 1275.205766] create_object.isra.0+0x3a/0xa20 [ 1275.206683] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1275.207761] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1275.208843] io_wq_create+0x6ef/0xc00 [ 1275.209652] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1275.210722] ? io_import_iovec+0x1120/0x1120 [ 1275.211669] ? io_apoll_task_func+0x2d0/0x2d0 [ 1275.212607] ? __io_req_find_next+0x300/0x300 [ 1275.213550] ? do_raw_spin_lock+0x121/0x260 [ 1275.214456] ? rwlock_bug.part.0+0x90/0x90 [ 1275.215367] __io_uring_add_tctx_node+0x2c6/0x520 [ 1275.216398] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1275.217495] ? alloc_fd+0x2e7/0x670 [ 1275.218281] io_uring_setup+0x1fbb/0x2980 [ 1275.219173] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1275.220237] ? wait_for_completion_io+0x270/0x270 [ 1275.221301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.222409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.223494] do_syscall_64+0x33/0x40 [ 1275.224278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.225350] RIP: 0033:0x7f2db9fa8b19 [ 1275.226137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.230021] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1275.231640] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1275.233144] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1275.234647] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1275.236149] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1275.237650] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1275.260279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.260982] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.262333] Buffer I/O error on dev sr0, logical block 0, async page read [ 1275.263271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.263922] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1275.265141] Buffer I/O error on dev sr0, logical block 1, async page read [ 1275.266173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.266887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.267637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.268400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.269153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1275.269858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:37:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:22 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 54) 14:37:22 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0xa8a, 0x0, 0x0, 0x6c810, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) faccessat2(r0, &(0x7f00000005c0)='./file1\x00', 0x158, 0x3e4fcec92923ce05) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x9}, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = signalfd4(r1, &(0x7f0000000000)={[0xff]}, 0x8, 0xc0800) openat(r3, &(0x7f0000000040)='./file0\x00', 0x206040, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB="240000000104010300000000000000000000000006000640000300000800030000000ae7"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x55) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r4) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) 14:37:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 54) 14:37:22 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 54) 14:37:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2, 0xee00}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r5, 0x5608, &(0x7f0000000200)) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000380)={{r0}, 0x3, &(0x7f0000000340)=[0x5, 0x5, 0x1], 0x6, 0x5, [0x6, 0x10000, 0x200, 0xd1b]}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000440)) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {r2, r3}}, './file2\x00'}) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000140)={0xe000000000000004, 0x3}) 14:37:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01006375006300"/17, @ANYBLOB="ff9d23b4c3e9a20012"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) fallocate(r4, 0xa, 0x800, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r0, 0x9, 0x3) lseek(r1, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r8, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1288.693048] FAULT_INJECTION: forcing a failure. [ 1288.693048] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.696461] CPU: 0 PID: 8769 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1288.698391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.700707] Call Trace: [ 1288.701472] dump_stack+0x107/0x167 [ 1288.702516] should_fail.cold+0x5/0xa [ 1288.703615] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1288.705034] should_failslab+0x5/0x20 [ 1288.706109] kmem_cache_alloc_trace+0x55/0x320 [ 1288.707420] __io_uring_add_tctx_node+0x15c/0x520 [ 1288.708766] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1288.710250] ? alloc_fd+0x2e7/0x670 [ 1288.711325] io_uring_setup+0x1fbb/0x2980 [ 1288.712525] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.713966] ? wait_for_completion_io+0x270/0x270 [ 1288.715367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.716842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.718318] do_syscall_64+0x33/0x40 [ 1288.719369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.720829] RIP: 0033:0x7f9af1df9b19 [ 1288.721892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.726396] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.728165] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1288.729799] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1288.731465] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1288.733100] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1288.734738] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1288.752304] FAULT_INJECTION: forcing a failure. [ 1288.752304] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.753798] CPU: 1 PID: 8780 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1288.754650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.755705] Call Trace: [ 1288.756039] dump_stack+0x107/0x167 [ 1288.756496] should_fail.cold+0x5/0xa [ 1288.756973] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1288.757594] should_failslab+0x5/0x20 [ 1288.758070] kmem_cache_alloc_trace+0x55/0x320 [ 1288.758644] __io_uring_add_tctx_node+0x15c/0x520 [ 1288.759256] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1288.759907] ? alloc_fd+0x2e7/0x670 [ 1288.760365] io_uring_setup+0x1fbb/0x2980 [ 1288.760886] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.761513] ? wait_for_completion_io+0x270/0x270 [ 1288.762126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.762774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.763422] do_syscall_64+0x33/0x40 [ 1288.763882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.764515] RIP: 0033:0x7f2db9fa8b19 [ 1288.764975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.767258] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.768201] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1288.769079] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1288.769955] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1288.770843] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1288.771743] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1288.820908] FAULT_INJECTION: forcing a failure. [ 1288.820908] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.822357] CPU: 1 PID: 8778 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1288.823201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.824201] Call Trace: [ 1288.824523] dump_stack+0x107/0x167 [ 1288.824965] should_fail.cold+0x5/0xa [ 1288.825434] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1288.826036] should_failslab+0x5/0x20 [ 1288.826504] kmem_cache_alloc_trace+0x55/0x320 [ 1288.827068] __io_uring_add_tctx_node+0x15c/0x520 [ 1288.827651] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1288.828286] ? alloc_fd+0x2e7/0x670 [ 1288.828736] io_uring_setup+0x1fbb/0x2980 [ 1288.829247] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.829857] ? wait_for_completion_io+0x270/0x270 [ 1288.830463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.831116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.831745] do_syscall_64+0x33/0x40 [ 1288.832194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.832812] RIP: 0033:0x7f72c981db19 [ 1288.833261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.835490] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.836409] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1288.837258] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1288.838112] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1288.838972] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1288.839825] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:22 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 55) 14:37:22 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 55) 14:37:22 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x0, 0x0, 0x9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000d7a1dd0f192a89ce1637a7968b9484d67ff15b89b6b19cc8f0d4d32d3c82f58cac39dfcc166a8022cde7a7ff0397f25e1f09bea825f0685f04b2752f82c282daa79dd9a57b8c0774e136e49ea8d6ab826c4d9bdcc82c4a2af2b3a453a15e30", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000010000000c000500000000"], 0x34}}, 0x0) r5 = openat(r4, 0x0, 0x886c2, 0x100) fallocate(r5, 0x0, 0x0, 0x1000002) r6 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) finit_module(r6, 0x0, 0x0) close_range(r4, r6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) 14:37:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xea5, &(0x7f0000000240)="27d21f86f5c9b3bbd01bb3c21e4b0183de33bdec957dd5d8ac674cf59bfb47c8f4b059635ad7fe04a22e103f55f99e7a747514578c760859b56c003d17108893a75df5a9248c49417fdad1ecc5") r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r0, 0x8000000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xf2) socket$nl_generic(0x10, 0x3, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4102) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0], 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@phonet={0x23, 0x1, 0x3f, 0x6e}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ftruncate(r3, 0x100) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0x5, "fc7716a87dcc2f2711cc8a536fb323f3ad0a01", 0x0, 0x46}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1288.920751] FAULT_INJECTION: forcing a failure. [ 1288.920751] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.923406] CPU: 0 PID: 8796 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1288.924989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.926909] Call Trace: 14:37:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1288.927509] dump_stack+0x107/0x167 [ 1288.928468] should_fail.cold+0x5/0xa [ 1288.929361] ? create_object.isra.0+0x3a/0xa20 [ 1288.930407] should_failslab+0x5/0x20 [ 1288.931296] kmem_cache_alloc+0x5b/0x310 [ 1288.932232] create_object.isra.0+0x3a/0xa20 [ 1288.933252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1288.934421] kmem_cache_alloc_trace+0x151/0x320 [ 1288.935510] __io_uring_add_tctx_node+0x15c/0x520 [ 1288.936609] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1288.937815] ? alloc_fd+0x2e7/0x670 [ 1288.938679] io_uring_setup+0x1fbb/0x2980 [ 1288.939653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1288.940814] ? wait_for_completion_io+0x270/0x270 [ 1288.941977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.942855] Module has invalid ELF structures [ 1288.943185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.943213] do_syscall_64+0x33/0x40 [ 1288.945783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1288.946994] RIP: 0033:0x7f2db9fa8b19 [ 1288.947846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.952213] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1288.952895] Module has invalid ELF structures [ 1288.953965] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1288.953977] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1288.953988] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1288.954004] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1288.961069] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1288.963597] audit: type=1400 audit(1755009443.015:147): avc: denied { module_load } for pid=8798 comm="syz-executor.3" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1141 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 1289.037351] FAULT_INJECTION: forcing a failure. [ 1289.037351] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.038882] CPU: 1 PID: 8808 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1289.039841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.040921] Call Trace: [ 1289.041227] dump_stack+0x107/0x167 [ 1289.041699] should_fail.cold+0x5/0xa [ 1289.042227] ? create_object.isra.0+0x3a/0xa20 [ 1289.042912] should_failslab+0x5/0x20 [ 1289.043346] kmem_cache_alloc+0x5b/0x310 [ 1289.043956] create_object.isra.0+0x3a/0xa20 [ 1289.044591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.045179] kmem_cache_alloc_trace+0x151/0x320 [ 1289.045715] __io_uring_add_tctx_node+0x15c/0x520 [ 1289.046259] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1289.046854] ? alloc_fd+0x2e7/0x670 [ 1289.047288] io_uring_setup+0x1fbb/0x2980 [ 1289.047869] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1289.048616] ? wait_for_completion_io+0x270/0x270 [ 1289.049187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.049909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.050657] do_syscall_64+0x33/0x40 [ 1289.051090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.051812] RIP: 0033:0x7f9af1df9b19 [ 1289.052384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.054768] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1289.055821] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1289.056905] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1289.057892] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1289.058703] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1289.059525] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:23 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 56) 14:37:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 55) [ 1289.150739] FAULT_INJECTION: forcing a failure. [ 1289.150739] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.153925] CPU: 0 PID: 8814 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1289.155532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.157454] Call Trace: [ 1289.158068] dump_stack+0x107/0x167 [ 1289.158925] should_fail.cold+0x5/0xa [ 1289.159793] ? xas_alloc+0x336/0x440 [ 1289.160659] should_failslab+0x5/0x20 [ 1289.161530] kmem_cache_alloc+0x5b/0x310 [ 1289.162467] ? stack_trace_consume_entry+0x160/0x160 [ 1289.163645] xas_alloc+0x336/0x440 [ 1289.164489] xas_create+0x34a/0x10d0 [ 1289.165360] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1289.166568] xas_store+0x8c/0x1c40 [ 1289.167418] __xa_store+0x164/0x2d0 [ 1289.168275] ? xa_delete_node+0x280/0x280 [ 1289.169260] ? trace_hardirqs_on+0x5b/0x180 [ 1289.170291] xa_store+0x31/0x50 [ 1289.171072] __io_uring_add_tctx_node+0x1cf/0x520 [ 1289.172178] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1289.173376] ? alloc_fd+0x2e7/0x670 [ 1289.174224] io_uring_setup+0x1fbb/0x2980 [ 1289.175209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1289.176381] ? wait_for_completion_io+0x270/0x270 [ 1289.177528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.178726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.179954] do_syscall_64+0x33/0x40 [ 1289.180795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.181978] RIP: 0033:0x7f2db9fa8b19 [ 1289.182823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.187085] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1289.188837] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1289.190468] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1289.192137] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1289.193759] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1289.195407] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:23 executing program 3: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000240)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0005000000000000040106142b9384acc194db5e0212fa866035729354d71dcc1f0d512f7733e70fb2d4631cffffffff0000000000000000"], 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000780)="c02b7c175c6f620c57455eb04860c45a389d6c6137094b735cca9b78187b834156ae4ff862936572247db3c5cb92b55100be8b6299525d496f446292801b6f2ed847a17bb5cf9e0db58a26955be529e510a0a1c1ece1b1f3759881c8bd98589157d6ff1684c3c9b92f09cc52b8ed8c189f4fde35a5bed454eb9344f618b34cd107299ca2b0ec92e0d07e4925baf7310cd17b74cd0db453415ab3165f00c0a11b68d6532268cfbd5a794bd4886cba07d773b520", 0xb3}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000940)="26be0f139b8f3e11ee5e88efe011415dcfd1ab9c67f52a9e347a0837345e843e20f49bf0a4f6f4cf9700e261a19ae4f16d152f2a59e83d6091a9d7816ec3422c0f8ec7b2264c79369af8ac912cf254634a37efa5766a255f4ea976bc64c7309f83c3d1d4422761dac80a6486a268c3d8b4cab173979c137f6b381b1cb3f9407031bf4710", 0x84}, {&(0x7f0000000400)="bfd0c1c736399c138c0356babb41bf6509cf57372a89e31b3b0f7caa91619e0b015c285ede5cc7762006ecd0940d69a0f2d9c16d2d549973b68985aa3f756983f08fca1de553aaa51ac0eacad8", 0x4d}, {&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000000a00)="32bd6a1e41c41edbb0d09d0ae1ffe0ef444b5e6f46d05b5ea0e86082d9a2387ccec33373c16cb1dd390dc4382ec47e3581cf0e34dbb287d461bc36fd64c1db1d5166ae994057dba824eb1f98f5679ae62c28f5995aec79f446f53aeb0942fc59578ce37dca47e80f3236cffca37afe96bb9561c0dc9d12554cca9525412b512fd385053d6fbd34541b368a7ed4660e75b54fff6fdb383c1e251c292a7a585cd6e4a4de8018b15940f4bb440d0b3b2382aaefbda372f1d965b5ce5abe623c76c6d50c71f7ae451477941913d5e88b88281949ca270368a61cacc97290bf0beb16c3f805", 0xe3}, {&(0x7f0000000b00)="2c0ff71867fc93c8bab51b40aa1db9b3b022455a94a2ad3706a08234041971b28165fe6f586db54f6e8b351cecda7bffcd9777c744706533ee3cd2fb34ec4ceefd490cfb872d34ed52fd1bb5c20a4d6394a150dd763aae8922eba5aa9dd559006e820fadf50d675211ddfcb1d73b54d0e91fa369791fb4733080f8c91d55150bce16c01539de56293e16f6a1e3d47142f75b946cf9ae", 0x96}], 0x8, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}], 0x20}}, {{&(0x7f0000000c80)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="56d9e385ba2c37f02527948d1797088cb40be9f57965498932d440e7327ab6b2e06aa63f91ac069640d6a4394d36fa84145d15c8c7519be2", 0x38}], 0x1, &(0x7f0000000e40)=[@ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x9a, [@multicast2, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end, @lsrr={0x83, 0x1f, 0x38, [@multicast1, @broadcast, @rand_addr=0x64010101, @remote, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x37, [@multicast2, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x70}}], 0x2, 0x0) copy_file_range(r1, &(0x7f0000000280)=0x3, r5, &(0x7f0000000340)=0x1, 0x81, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:37:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x6, 0x6, &(0x7f0000000800)=[{&(0x7f0000000300)="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", 0xff, 0x1}, {&(0x7f0000000400)="2cb7607e0851da60a9f8806216fff59654c7f61614cf4bdfbbc876305ea671a7db4ae8448f284391a187530245c3367bd1a1dedafa53bde408cba376e475a5c165c9d95421e599e2ac17977bf294e08a102eddd100229e57c18f43bbdc94dd1a64e9f422f95fb06f6351ac5b6391652209bb639b667319ee0f22c9723efee3c2f4e08c2b247db9b5c7ed965412a57cce625f801b4c7430ade5f0f084e64c326781cba7b563985c22f67417ae62120b06016c8424f7fcdd011b1f9fc4fbc30e7598d7f826e75befcf192d46b5e950679a68f9a05c206a524fb0b212e6967d05cfa84eda439e7041659921c1fece4f", 0xee, 0x80}, {&(0x7f0000000180)="0985b246c29d204270dfc0bd17c8d13502707e3090f11e663cf7d42e46eadf9745e7981dd52e2c9bacd50323ec9d3e68296783017f", 0x35, 0x4}, {&(0x7f0000000500)="fbabaa3e089709ac8a42033b3f06e07ef0eb2cc0dca005e737498fac23cef760b8c92a4898e2bda806cca354bd314b6bd31a7830d6143494939948eefd518cdd146654bce542239fcb5608dfe2cdfc074b4c24d4974a717611af81dbd484e6cbabafe174b01316cca983411b912042fb19827038965ed5e9d8bf1177cfc768bd1fc0ddbf413e00b9af18b832d500d388b4db0316ab0a6dfd12bd5d9a7ef3aa49d9babb9c63097e529ea45cd9e67773cb5a03bd845389e4cb89c8f6ee845655e51c1464632c47974a523972fba42980e8a82399e623db359b2a2e200d5b", 0xdd, 0xfffffffffffffff8}, {&(0x7f0000000600)="2a41ae711aac426bf585914ef8e9b2202887cb8d892be44d6ea8ee68ad22552d84dcf994d59485ef233eaeb947d62bf7fd82b5cbc3aeac396cded224ba546cef6580f614b0157ed8db2e756909a48af190621fbe05c13aa88427627fa26657ec9e8b65f23a0af0c9483ad16c3da9e55d6c9526e58e8c84b083acd6029f0a08dd62eee75b875442409d5d3aed9148c321c8ab91bf3d64cc2cc0fe14fb3c20c8f925a291c66d9d2bdbb8bb8ab77e714d2293eb5b1d417edb3b91636eee27f5f126ced3df3c10a1208e5f80d66d", 0xcc, 0x6}, {&(0x7f0000000700)="6543212b3b45f78e18ce336a69437968b1d5fb5e7050fd0b48b4708659a15e45ad644579fd10ada4dfa4019b01437afa97ed3c96a632a1c4e1edbd9a49f970f798c28147aa6596e2b2b84b3862d33a6d610a8efa8d9b49eb8cd9ee87ef4f45dbc7e3536cbc86446f0dc17cdfb1aa434452eb061f8bfa29f59af6ef56dd6d9611e732165176ad09755f48a0ea7289ae384eeaa16d0faca714ffbd0b90be70a00a4b2c0ec74d9e26357d177cb27d67192068e8cacc8a91029cc22e60e6a8e3492630eb34781037fe160318d9e1a6df70b15d6392", 0xd3, 0x4c134a75}], 0x5c080, &(0x7f00000008c0)=ANY=[@ANYBLOB='mode=0x0000000000000100,nojoliet,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c000001000000000073732c6d61703d6163a698166dc8fff740f7c975a2f9cbfc6f726ee7006d61636b66736465663d2c00"]) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r6, 0x5608, &(0x7f0000000200)) copy_file_range(r6, &(0x7f0000000240)=0x9, 0xffffffffffffffff, &(0x7f0000000280)=0x8000, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r7 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x100000001) [ 1289.209759] FAULT_INJECTION: forcing a failure. [ 1289.209759] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.212380] CPU: 0 PID: 8817 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1289.213981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.215917] Call Trace: [ 1289.216521] dump_stack+0x107/0x167 [ 1289.217384] should_fail.cold+0x5/0xa [ 1289.218267] ? create_object.isra.0+0x3a/0xa20 [ 1289.219333] should_failslab+0x5/0x20 [ 1289.220211] kmem_cache_alloc+0x5b/0x310 [ 1289.221165] create_object.isra.0+0x3a/0xa20 [ 1289.222180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.223384] kmem_cache_alloc_trace+0x151/0x320 [ 1289.224470] __io_uring_add_tctx_node+0x15c/0x520 [ 1289.225595] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1289.226792] ? alloc_fd+0x2e7/0x670 [ 1289.227661] io_uring_setup+0x1fbb/0x2980 [ 1289.228625] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1289.229803] ? wait_for_completion_io+0x270/0x270 [ 1289.230969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.232178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.233376] do_syscall_64+0x33/0x40 [ 1289.234238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.235439] RIP: 0033:0x7f72c981db19 [ 1289.236301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.240537] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1289.242309] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1289.243975] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1289.245619] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1289.247293] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1289.248939] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1289.275846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:37:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1289.382238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.383131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.384002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1289.404943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.634587] FAULT_INJECTION: forcing a failure. [ 1302.634587] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.637201] CPU: 0 PID: 8839 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1302.638742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.640629] Call Trace: [ 1302.641497] dump_stack+0x107/0x167 [ 1302.642322] should_fail.cold+0x5/0xa [ 1302.643196] ? create_object.isra.0+0x3a/0xa20 [ 1302.644220] should_failslab+0x5/0x20 [ 1302.645071] kmem_cache_alloc+0x5b/0x310 [ 1302.645990] create_object.isra.0+0x3a/0xa20 [ 1302.646716] FAULT_INJECTION: forcing a failure. [ 1302.646716] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.646972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1302.647000] kmem_cache_alloc+0x159/0x310 [ 1302.650495] xas_alloc+0x336/0x440 [ 1302.651302] xas_create+0x34a/0x10d0 [ 1302.652155] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1302.653335] xas_store+0x8c/0x1c40 [ 1302.654152] __xa_store+0x164/0x2d0 [ 1302.654974] ? xa_delete_node+0x280/0x280 [ 1302.655925] ? trace_hardirqs_on+0x5b/0x180 [ 1302.656902] xa_store+0x31/0x50 [ 1302.657647] __io_uring_add_tctx_node+0x1cf/0x520 [ 1302.658729] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1302.659913] ? alloc_fd+0x2e7/0x670 [ 1302.660744] io_uring_setup+0x1fbb/0x2980 [ 1302.661686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1302.662824] ? wait_for_completion_io+0x270/0x270 [ 1302.663946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.665126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.666282] do_syscall_64+0x33/0x40 [ 1302.667132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.668285] RIP: 0033:0x7f2db9fa8b19 [ 1302.669131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.673278] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1302.674994] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1302.676612] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1302.678217] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1302.679835] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1302.681442] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1302.683090] CPU: 1 PID: 8837 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1302.684033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.685331] Call Trace: [ 1302.685781] dump_stack+0x107/0x167 14:37:36 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 56) 14:37:36 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x2}, 0x1c) syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @remote}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x400, @remote}, 0x10) clock_gettime(0x6, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {r0}, {0xffffffffffffffff, 0x610}, {r1, 0x10}, {0xffffffffffffffff, 0x2040}], 0x5, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)={[0x2]}, 0x8) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd, 0x10000000}) fcntl$setflags(r2, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="ad1dcfecb391f91b7ffcbcbbfe92de9edbf35b03408c049cd8becf14644769ae9f2072a2aad5e8", 0x27}, {&(0x7f0000000280)="68045a189f063948c3641b5bd826e4e9bb9b6ba2732e227325e9beda4037109b2fbd23d6eac6772d9eed2d10b138567389e50da3847252fae238c0b6d94ba2ce6f8cb1e481930de6a57389e657f0c53895f4d23c6e4d583e44830b52f1d77df01e75e2d2a3de0da2013e3b9cfee51c7fa0d6256be25a2542456d525df5932fcefa4f912a4cdef91c67dab95f9eff0b05a1a2ffe04b0e14c45ceaccd1eca1ac6c67c33174d6856efc62de5d5ad29f0565e9c02dd7d5a3bb2636d751eefa3eea610c582a1866ea93fea67e6aa1", 0xcc}, {&(0x7f0000000940)="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", 0x1000}], 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x74}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:37:36 executing program 0: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)="637b5d08aede0e6ded4f1e4ea75480cf7f06d1e53798a2acdb3a4a8f435a290000c65a7edea4f0d894b6") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0xa, 0x19, 0x12, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000280)=0x469207eb, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r3, 0x5608, &(0x7f0000000200)) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="50010000100001000000000000000000ac141441000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC], 0x150}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@flushsa={0x14, 0x1c, 0x3, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="f7622be864e592bd51329779bb3e0e7d0ba9dce51af92cb88b0c8047b9c8f2eab1c45234f55b1bea6c2f5b8081cdbd81be8ae629f167bf7259d5b6b2346f69a21172ecb634302511d184778dc26f98288ae2d6d292ee815ce59ff667738171bbaa8a617045b16c133f889f59f7c2e45abe0b7aa77960506fbc190f7f4c60de771f9d8f765820daab9b9efb48d52037aa0207b298e51bd7916f2dc4", 0x9b) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) unshare(0x48020200) 14:37:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 56) 14:37:36 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 57) 14:37:36 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24508) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x4000, 0x141) 14:37:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1302.686302] should_fail.cold+0x5/0xa [ 1302.686897] ? xas_alloc+0x336/0x440 [ 1302.687474] should_failslab+0x5/0x20 [ 1302.687951] kmem_cache_alloc+0x5b/0x310 [ 1302.688469] ? stack_trace_consume_entry+0x160/0x160 [ 1302.689105] xas_alloc+0x336/0x440 [ 1302.689550] xas_create+0x34a/0x10d0 [ 1302.690025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1302.690680] xas_store+0x8c/0x1c40 [ 1302.691144] __xa_store+0x164/0x2d0 [ 1302.691603] ? xa_delete_node+0x280/0x280 [ 1302.692128] ? trace_hardirqs_on+0x5b/0x180 [ 1302.692672] xa_store+0x31/0x50 [ 1302.693093] __io_uring_add_tctx_node+0x1cf/0x520 [ 1302.693705] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1302.694364] ? alloc_fd+0x2e7/0x670 [ 1302.694832] io_uring_setup+0x1fbb/0x2980 [ 1302.695368] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1302.696008] ? wait_for_completion_io+0x270/0x270 [ 1302.696623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.697283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.697928] do_syscall_64+0x33/0x40 [ 1302.698402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.699054] RIP: 0033:0x7f72c981db19 [ 1302.699520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.701832] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1302.702781] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1302.703692] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1302.704600] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1302.705500] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1302.706383] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1302.710885] FAULT_INJECTION: forcing a failure. [ 1302.710885] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.712349] CPU: 1 PID: 8850 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1302.713210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.714248] Call Trace: [ 1302.714577] dump_stack+0x107/0x167 [ 1302.715049] should_fail.cold+0x5/0xa [ 1302.715545] ? xas_alloc+0x336/0x440 [ 1302.716022] should_failslab+0x5/0x20 [ 1302.716502] kmem_cache_alloc+0x5b/0x310 [ 1302.717016] ? stack_trace_consume_entry+0x160/0x160 [ 1302.717663] xas_alloc+0x336/0x440 [ 1302.718114] xas_create+0x34a/0x10d0 [ 1302.718597] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1302.719266] xas_store+0x8c/0x1c40 [ 1302.719730] __xa_store+0x164/0x2d0 [ 1302.720199] ? xa_delete_node+0x280/0x280 [ 1302.720725] ? trace_hardirqs_on+0x5b/0x180 [ 1302.721286] xa_store+0x31/0x50 [ 1302.721710] __io_uring_add_tctx_node+0x1cf/0x520 [ 1302.722314] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1302.722970] ? alloc_fd+0x2e7/0x670 [ 1302.723442] io_uring_setup+0x1fbb/0x2980 [ 1302.723975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1302.724615] ? wait_for_completion_io+0x270/0x270 [ 1302.725245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.725908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.726552] do_syscall_64+0x33/0x40 [ 1302.727022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.727673] RIP: 0033:0x7f9af1df9b19 [ 1302.728145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.730488] RSP: 002b:00007f9aef34e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1302.730500] RAX: ffffffffffffffda RBX: 00007f9af1f0d020 RCX: 00007f9af1df9b19 [ 1302.730507] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1302.730513] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1302.730519] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1302.730526] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:36 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 57) [ 1302.783451] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:36 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 58) [ 1302.843199] FAULT_INJECTION: forcing a failure. [ 1302.843199] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.844570] CPU: 1 PID: 8860 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1302.845384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.846366] Call Trace: [ 1302.846685] dump_stack+0x107/0x167 [ 1302.847132] should_fail.cold+0x5/0xa [ 1302.847587] ? xas_alloc+0x336/0x440 [ 1302.848029] should_failslab+0x5/0x20 [ 1302.848486] kmem_cache_alloc+0x5b/0x310 [ 1302.848966] xas_alloc+0x336/0x440 [ 1302.849393] xas_create+0x34a/0x10d0 [ 1302.849841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1302.850464] xas_store+0x8c/0x1c40 [ 1302.850891] __xa_store+0x164/0x2d0 [ 1302.851341] ? xa_delete_node+0x280/0x280 [ 1302.851834] ? trace_hardirqs_on+0x5b/0x180 [ 1302.852344] xa_store+0x31/0x50 [ 1302.852737] __io_uring_add_tctx_node+0x1cf/0x520 [ 1302.853308] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1302.853926] ? alloc_fd+0x2e7/0x670 [ 1302.854363] io_uring_setup+0x1fbb/0x2980 [ 1302.854860] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1302.855464] ? wait_for_completion_io+0x270/0x270 [ 1302.856044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.856659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.857266] do_syscall_64+0x33/0x40 [ 1302.857704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.858311] RIP: 0033:0x7f2db9fa8b19 [ 1302.858745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.860911] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1302.861808] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1302.862648] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1302.863495] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1302.864335] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1302.865171] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1302.932591] FAULT_INJECTION: forcing a failure. [ 1302.932591] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.934059] CPU: 1 PID: 8862 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1302.934857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.935837] Call Trace: [ 1302.936155] dump_stack+0x107/0x167 [ 1302.936591] should_fail.cold+0x5/0xa [ 1302.937039] ? create_object.isra.0+0x3a/0xa20 [ 1302.937573] should_failslab+0x5/0x20 [ 1302.938027] kmem_cache_alloc+0x5b/0x310 [ 1302.938519] create_object.isra.0+0x3a/0xa20 [ 1302.939049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1302.939651] kmem_cache_alloc+0x159/0x310 [ 1302.940138] xas_alloc+0x336/0x440 [ 1302.940559] xas_create+0x34a/0x10d0 [ 1302.941014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1302.941633] xas_store+0x8c/0x1c40 [ 1302.942071] __xa_store+0x164/0x2d0 [ 1302.942510] ? xa_delete_node+0x280/0x280 [ 1302.943011] ? trace_hardirqs_on+0x5b/0x180 [ 1302.943550] xa_store+0x31/0x50 [ 1302.943949] __io_uring_add_tctx_node+0x1cf/0x520 [ 1302.944517] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1302.945139] ? alloc_fd+0x2e7/0x670 [ 1302.945579] io_uring_setup+0x1fbb/0x2980 [ 1302.946078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1302.946671] ? wait_for_completion_io+0x270/0x270 [ 1302.947278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.947904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.948536] do_syscall_64+0x33/0x40 [ 1302.948977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.949575] RIP: 0033:0x7f9af1df9b19 [ 1302.950009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.952139] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1302.953016] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1302.953851] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1302.954678] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1302.955517] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1302.956361] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1303.036901] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 57) 14:37:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5821, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x59) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2, 0x0, 0x8}, 0x6a}}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x18, 0x109, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0xfd00ae9fb133f86) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0xd5, 0x81, 0xb4, 0x8, 0x0, 0x800, 0x208, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x409, 0x100000000, 0x1, 0x5, 0x3eebd2e8, 0x7, 0x6, 0x0, 0x8, 0x0, 0x100000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) ioctl$VT_SETMODE(r6, 0x5608, &(0x7f0000000200)) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000140)={0x20, 0x1f, 0x7}) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x78) r7 = openat2(r5, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x10000, 0x48, 0x10}, 0x18) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x4, 0x20, 0x8, 0x0, 0x5, 0x930c2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000300)}, 0x200, 0xffffffff, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x3, 0x0, 0x79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range(r7, r2, 0x0) pread64(r5, &(0x7f0000000200), 0x0, 0x8001) 14:37:56 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x105000, 0x40) faccessat2(r0, &(0x7f0000000380)='./file1\x00', 0x10, 0x1300) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000780)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r1, @ANYBLOB="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"]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r5 = openat(r4, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(r2, &(0x7f0000000000)='./file1\x00', 0xb0) read(r3, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x20000008}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x82) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000440)={0x2c, 0x8, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0xfffffffffffffeb2, 0x0) 14:37:56 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 59) 14:37:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 58) 14:37:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1322.556219] FAULT_INJECTION: forcing a failure. [ 1322.556219] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.558717] CPU: 1 PID: 8888 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1322.560206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.561995] Call Trace: [ 1322.562562] dump_stack+0x107/0x167 [ 1322.563353] should_fail.cold+0x5/0xa [ 1322.564178] ? create_object.isra.0+0x3a/0xa20 [ 1322.565167] should_failslab+0x5/0x20 [ 1322.565983] kmem_cache_alloc+0x5b/0x310 [ 1322.566859] ? mark_held_locks+0x9e/0xe0 [ 1322.567746] create_object.isra.0+0x3a/0xa20 [ 1322.568689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1322.569754] kmem_cache_alloc+0x159/0x310 [ 1322.570629] xas_alloc+0x336/0x440 [ 1322.571383] xas_create+0x34a/0x10d0 [ 1322.572179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1322.573277] xas_store+0x8c/0x1c40 [ 1322.574044] __xa_store+0x164/0x2d0 [ 1322.574809] ? xa_delete_node+0x280/0x280 [ 1322.575705] ? trace_hardirqs_on+0x5b/0x180 [ 1322.576650] xa_store+0x31/0x50 [ 1322.577362] __io_uring_add_tctx_node+0x1cf/0x520 [ 1322.578376] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1322.579509] ? alloc_fd+0x2e7/0x670 [ 1322.580303] io_uring_setup+0x1fbb/0x2980 [ 1322.581189] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1322.582277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.583387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.584484] do_syscall_64+0x33/0x40 [ 1322.585262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.586337] RIP: 0033:0x7f2db9fa8b19 [ 1322.587119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.590989] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1322.592597] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1322.594096] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1322.595615] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1322.597114] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1322.598663] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1322.618086] FAULT_INJECTION: forcing a failure. [ 1322.618086] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.620583] CPU: 1 PID: 8895 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1322.622070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.623891] Call Trace: [ 1322.624464] dump_stack+0x107/0x167 [ 1322.625255] should_fail.cold+0x5/0xa [ 1322.626086] ? create_object.isra.0+0x3a/0xa20 [ 1322.627087] should_failslab+0x5/0x20 [ 1322.627923] kmem_cache_alloc+0x5b/0x310 [ 1322.628802] create_object.isra.0+0x3a/0xa20 [ 1322.629760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1322.630863] kmem_cache_alloc+0x159/0x310 [ 1322.631775] xas_alloc+0x336/0x440 [ 1322.632549] xas_create+0x34a/0x10d0 [ 1322.633354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1322.634484] xas_store+0x8c/0x1c40 [ 1322.635270] __xa_store+0x164/0x2d0 [ 1322.636073] ? xa_delete_node+0x280/0x280 [ 1322.636976] ? trace_hardirqs_on+0x5b/0x180 [ 1322.637919] xa_store+0x31/0x50 [ 1322.638635] __io_uring_add_tctx_node+0x1cf/0x520 [ 1322.639683] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1322.640794] ? alloc_fd+0x2e7/0x670 [ 1322.641576] io_uring_setup+0x1fbb/0x2980 [ 1322.642460] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1322.643669] ? wait_for_completion_io+0x270/0x270 [ 1322.644815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.645924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.647029] do_syscall_64+0x33/0x40 [ 1322.647832] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.648912] RIP: 0033:0x7f72c981db19 [ 1322.649693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.653563] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1322.655172] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1322.656723] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1322.658264] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1322.659820] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1322.661366] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:56 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x11c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x7, 0x76, 0x0, 0x0, @str='\xf3+\x00'}]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97ca91ff39e0a241931526faa44f4a43cc21d76909df80017a7d975b60458ca0af08a73e18de7a86817f9ce234d177eafbbb0a4e4a226258958c5ed14b5a4d"]}, 0x11c}}, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x400, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 14:37:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048841}, 0x8008000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) [ 1322.729119] FAULT_INJECTION: forcing a failure. [ 1322.729119] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.731698] CPU: 0 PID: 8902 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1322.733227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.735077] Call Trace: [ 1322.735690] dump_stack+0x107/0x167 [ 1322.736518] should_fail.cold+0x5/0xa [ 1322.737378] ? xas_alloc+0x336/0x440 [ 1322.738214] should_failslab+0x5/0x20 [ 1322.739066] kmem_cache_alloc+0x5b/0x310 [ 1322.739998] xas_alloc+0x336/0x440 [ 1322.740797] xas_create+0x34a/0x10d0 [ 1322.741647] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1322.742820] xas_store+0x8c/0x1c40 [ 1322.743639] __xa_store+0x164/0x2d0 [ 1322.744453] ? xa_delete_node+0x280/0x280 [ 1322.745398] ? trace_hardirqs_on+0x5b/0x180 [ 1322.746397] xa_store+0x31/0x50 [ 1322.747159] __io_uring_add_tctx_node+0x1cf/0x520 [ 1322.748269] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1322.749471] ? alloc_fd+0x2e7/0x670 [ 1322.750319] io_uring_setup+0x1fbb/0x2980 [ 1322.751292] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1322.752445] ? wait_for_completion_io+0x270/0x270 [ 1322.753585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.754798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.755968] do_syscall_64+0x33/0x40 [ 1322.756807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.757987] RIP: 0033:0x7f9af1df9b19 [ 1322.758827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.763031] RSP: 002b:00007f9aef34e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1322.764792] RAX: ffffffffffffffda RBX: 00007f9af1f0d020 RCX: 00007f9af1df9b19 [ 1322.766427] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1322.768070] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1322.769714] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1322.771378] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:37:56 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 60) [ 1322.821635] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:56 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="666d61736b3d30306030303030303030303030322cf2fda32e50646f7473ee5efacb3e2d73e4847601be2c000000000000000000003f787c6404392770b62fc1f27fa345b11cbaa25c7c3a8b4aacdb14bf9974fb40c96fe3370d4a2dca734f05ca79f3b84404719033a5a37b21c09d3f383b072d1128cd63266b1ad94558e8dfb936c50877b8ff5962fe3574ab3e9c950d93f90df9ddc74bee87df0632208cdd1a8d2f0378840396703b592ab4580b287a06c02d"]) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0x2, [@local, @dev={0xac, 0x14, 0x14, 0xb}]}, 0x18) [ 1322.867526] FAULT_INJECTION: forcing a failure. [ 1322.867526] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.870170] CPU: 0 PID: 8914 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1322.871725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1322.873592] Call Trace: [ 1322.874203] dump_stack+0x107/0x167 [ 1322.875044] should_fail.cold+0x5/0xa [ 1322.875937] ? xas_alloc+0x336/0x440 [ 1322.876796] should_failslab+0x5/0x20 [ 1322.877675] kmem_cache_alloc+0x5b/0x310 [ 1322.878625] xas_alloc+0x336/0x440 [ 1322.879459] xas_create+0x34a/0x10d0 [ 1322.880332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1322.881552] xas_store+0x8c/0x1c40 [ 1322.882370] __xa_store+0x164/0x2d0 [ 1322.883196] ? xa_delete_node+0x280/0x280 [ 1322.884159] ? trace_hardirqs_on+0x5b/0x180 [ 1322.885165] xa_store+0x31/0x50 [ 1322.885927] __io_uring_add_tctx_node+0x1cf/0x520 [ 1322.887036] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1322.888239] ? alloc_fd+0x2e7/0x670 [ 1322.889071] io_uring_setup+0x1fbb/0x2980 [ 1322.890036] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1322.891173] ? wait_for_completion_io+0x270/0x270 [ 1322.892301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1322.893480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1322.894650] do_syscall_64+0x33/0x40 [ 1322.895518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1322.896682] RIP: 0033:0x7f2db9fa8b19 [ 1322.897523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.901702] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1322.903440] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1322.905053] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1322.906679] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1322.908309] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1322.909922] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1323.036562] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.0'. 14:38:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x20}, {0x6}]}, 0x10) eventfd(0x10000) sendfile(r1, r0, 0x0, 0x10000007) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 14:38:11 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) 14:38:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:11 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 61) 14:38:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 59) 14:38:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010001000000ffffffffffffff060000"], 0x10}}, {{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000002c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5608, &(0x7f0000000200)) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) dup(r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000051600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{r5, 0x4070, 0x10000, 0x2, 0x8000, 0x7, 0x61f, 0x10001, 0x8, 0x8000, 0x6, 0x4, 0x2, 0x4, 0x494f}, 0x10, [0x0, 0x0]}) 14:38:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 58) [ 1337.336705] FAULT_INJECTION: forcing a failure. [ 1337.336705] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.338182] FAULT_INJECTION: forcing a failure. [ 1337.338182] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.339250] CPU: 0 PID: 8945 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1337.343255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.345029] Call Trace: [ 1337.345595] dump_stack+0x107/0x167 [ 1337.346383] should_fail.cold+0x5/0xa [ 1337.347207] ? create_object.isra.0+0x3a/0xa20 [ 1337.348206] should_failslab+0x5/0x20 [ 1337.349026] kmem_cache_alloc+0x5b/0x310 [ 1337.349902] ? mark_held_locks+0x9e/0xe0 [ 1337.350784] create_object.isra.0+0x3a/0xa20 [ 1337.351730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1337.352834] kmem_cache_alloc+0x159/0x310 [ 1337.353736] xas_alloc+0x336/0x440 [ 1337.354518] xas_create+0x34a/0x10d0 [ 1337.355334] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.356474] xas_store+0x8c/0x1c40 [ 1337.357265] __xa_store+0x164/0x2d0 [ 1337.358054] ? xa_delete_node+0x280/0x280 [ 1337.358959] ? trace_hardirqs_on+0x5b/0x180 [ 1337.359916] xa_store+0x31/0x50 [ 1337.360658] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.361702] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.362815] ? alloc_fd+0x2e7/0x670 [ 1337.363632] io_uring_setup+0x1fbb/0x2980 [ 1337.364528] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.365618] ? wait_for_completion_io+0x270/0x270 [ 1337.366706] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.367828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.368940] do_syscall_64+0x33/0x40 [ 1337.369734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.370825] RIP: 0033:0x7f9af1df9b19 [ 1337.371622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.375554] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.377154] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1337.378666] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.380195] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.381691] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.383191] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1337.384773] CPU: 1 PID: 8946 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1337.386370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.388364] Call Trace: [ 1337.388985] dump_stack+0x107/0x167 [ 1337.389843] should_fail.cold+0x5/0xa [ 1337.390737] ? create_object.isra.0+0x3a/0xa20 [ 1337.391804] should_failslab+0x5/0x20 [ 1337.392686] kmem_cache_alloc+0x5b/0x310 [ 1337.393615] ? mark_held_locks+0x9e/0xe0 [ 1337.394589] create_object.isra.0+0x3a/0xa20 [ 1337.395619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1337.396781] kmem_cache_alloc+0x159/0x310 [ 1337.397761] xas_alloc+0x336/0x440 [ 1337.398602] xas_create+0x34a/0x10d0 [ 1337.399502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.400726] xas_store+0x8c/0x1c40 [ 1337.401598] __xa_store+0x164/0x2d0 [ 1337.402453] ? xa_delete_node+0x280/0x280 [ 1337.403427] ? trace_hardirqs_on+0x5b/0x180 [ 1337.404448] xa_store+0x31/0x50 [ 1337.405211] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.406339] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.407556] ? alloc_fd+0x2e7/0x670 [ 1337.408420] io_uring_setup+0x1fbb/0x2980 [ 1337.409402] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.410566] ? wait_for_completion_io+0x270/0x270 [ 1337.411718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.412957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.414153] do_syscall_64+0x33/0x40 [ 1337.415020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.416208] RIP: 0033:0x7f2db9fa8b19 [ 1337.417055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.421293] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.422998] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1337.424631] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.426274] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.427940] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.429618] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1337.444574] FAULT_INJECTION: forcing a failure. [ 1337.444574] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.446878] CPU: 0 PID: 8956 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1337.448263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.449951] Call Trace: [ 1337.450484] dump_stack+0x107/0x167 [ 1337.451218] should_fail.cold+0x5/0xa [ 1337.452006] ? xas_alloc+0x336/0x440 [ 1337.452778] should_failslab+0x5/0x20 [ 1337.453560] kmem_cache_alloc+0x5b/0x310 [ 1337.454394] xas_alloc+0x336/0x440 [ 1337.455119] xas_create+0x34a/0x10d0 [ 1337.455893] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.456960] xas_store+0x8c/0x1c40 [ 1337.457700] __xa_store+0x164/0x2d0 [ 1337.458453] ? xa_delete_node+0x280/0x280 [ 1337.459287] ? trace_hardirqs_on+0x5b/0x180 [ 1337.460165] xa_store+0x31/0x50 [ 1337.460828] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.461797] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.462864] ? alloc_fd+0x2e7/0x670 [ 1337.463631] io_uring_setup+0x1fbb/0x2980 [ 1337.464456] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.465467] ? wait_for_completion_io+0x270/0x270 [ 1337.466482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.467536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.468582] do_syscall_64+0x33/0x40 [ 1337.469346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.470393] RIP: 0033:0x7f72c981db19 [ 1337.471137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.474811] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.476350] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1337.477782] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.479223] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.480666] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.482090] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:11 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x11c, 0x2d, 0x1, 0x70bd28, 0x25dfdbff, {0x18}, [@generic="d67f725ff9e7cdc993963dfe65742a34ef29afc57ba074c103bcdb9feb25f7c2a97bd18ebfa01a986d6654aa87e8ba8fbd7ccb7c95fba7b5564e0030bbbb69b8fad32a7706825938693c6a112008beed3888dfeacadcf9f8dbc92b2584450222b82bd68e53494442f8fe24667376c091f846e548f821af7f55e4537cd13c2aa64e6e4b31243d1b1dd71f580091a6a1e6dbdae39d019099ba9f3f6de5bc9a51d66bbd74e76b481133b6fe1499881fa60ba8aea268c814a863b10e78fa2993972dca6f1323e2e07afd258b28633c4e4285d604ece6fe82f0fa9d0f2fbbd7aec50c74279cf9e057cb51734b5358e3c181cb9dac77d25fcc12f3", @typed={0x8, 0x8c, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@multicast2}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) sendfile(r1, r1, &(0x7f0000000580)=0x1f, 0x5) lseek(r1, 0x4c6, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x26ee1c1b80385f28}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x5, 0x23, 0x36, 0x0, 0x5, 0xc000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000440), 0x6}, 0x11300, 0x6, 0x101, 0x5, 0x1ff, 0x2, 0x34, 0x0, 0x6}, 0x0, 0xe, r1, 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000680)=0x7ff, 0x0) syz_emit_ethernet(0x1a8, &(0x7f0000000040)={@broadcast, @random="de957ef8dd83", @val={@val={0x9100, 0x6, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0xd9e5, 0x0, 0x1}, {0x81}, {0x7}, {0x5, 0x0, 0x1}, {0x5}, {0xfff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x401}, {}, {0x1, 0x0, 0x1}], @ipv6=@dccp_packet={0x4, 0x6, "11dd0c", 0x142, 0x21, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7f}]}, @routing={0x1d, 0x6, 0x1, 0x1f, 0x0, [@loopback, @private2, @local]}, @dstopts={0x2f, 0xa, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x4, [0xf2a, 0x1, 0x29, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0xb48}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3c, 0x0, 0x90, 0x1, 0x0, 0x8, 0x64}], {{0x4e20, 0x4e24, 0x4, 0x1, 0xf, 0x0, 0x0, 0x8, 0x7, "6e0160", 0x62, "d79c29"}, "a74998abfb855fa8e765394aa89b78a03ceb89b471cac57b99cdfeb15a3a60d535f885eea74b1a38fe24ebbf90ceac8939ba98d84e8c369a22c28108ba94764a1659efbc985bcb01431ad545a426f8d8b37c5e78f7fe0e8c41bc09295e2a4fbfe5623fc509536f582759e80ece723d224c7b254f6550ecf20ffe45acbecf3805aadc"}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0xa9, 0xf9d, 0xfb4, 0xdf9]}) r4 = fork() wait4(r4, &(0x7f0000000000), 0xa0000001, &(0x7f0000000380)) 14:38:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 60) 14:38:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:11 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xff, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a000100000000000000f4ffb8d8054e1f"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00800008"], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00800008"], 0x1c}}, 0x0) [ 1337.653488] FAULT_INJECTION: forcing a failure. [ 1337.653488] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.656736] CPU: 1 PID: 8967 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1337.658631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.660844] Call Trace: [ 1337.661521] dump_stack+0x107/0x167 [ 1337.662543] should_fail.cold+0x5/0xa [ 1337.663528] ? xas_alloc+0x336/0x440 [ 1337.664494] should_failslab+0x5/0x20 [ 1337.665517] kmem_cache_alloc+0x5b/0x310 [ 1337.666545] xas_alloc+0x336/0x440 [ 1337.667444] xas_create+0x34a/0x10d0 [ 1337.668416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.669759] xas_store+0x8c/0x1c40 [ 1337.670695] __xa_store+0x164/0x2d0 [ 1337.671804] ? xa_delete_node+0x280/0x280 [ 1337.672937] ? trace_hardirqs_on+0x5b/0x180 [ 1337.674074] xa_store+0x31/0x50 [ 1337.674909] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.676125] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.677450] ? alloc_fd+0x2e7/0x670 [ 1337.678391] io_uring_setup+0x1fbb/0x2980 14:38:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 59) [ 1337.679447] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.681062] ? wait_for_completion_io+0x270/0x270 [ 1337.682292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.683594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.684906] do_syscall_64+0x33/0x40 [ 1337.685847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 14:38:11 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 62) [ 1337.687306] RIP: 0033:0x7f9af1df9b19 [ 1337.688512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.693135] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 14:38:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1337.694995] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1337.697057] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.699111] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.700873] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.702645] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1337.737574] FAULT_INJECTION: forcing a failure. [ 1337.737574] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.739610] CPU: 0 PID: 8975 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1337.740770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.742186] Call Trace: [ 1337.742635] dump_stack+0x107/0x167 [ 1337.743251] should_fail.cold+0x5/0xa [ 1337.743905] ? xas_alloc+0x336/0x440 [ 1337.744534] should_failslab+0x5/0x20 [ 1337.745175] kmem_cache_alloc+0x5b/0x310 [ 1337.745868] ? stack_trace_consume_entry+0x160/0x160 [ 1337.746720] xas_alloc+0x336/0x440 [ 1337.747317] xas_create+0x34a/0x10d0 [ 1337.747968] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.748846] xas_store+0x8c/0x1c40 [ 1337.749453] __xa_store+0x164/0x2d0 [ 1337.750069] ? xa_delete_node+0x280/0x280 [ 1337.750771] ? trace_hardirqs_on+0x5b/0x180 [ 1337.751488] xa_store+0x31/0x50 [ 1337.752048] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.752862] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.753744] ? alloc_fd+0x2e7/0x670 [ 1337.754372] io_uring_setup+0x1fbb/0x2980 [ 1337.755074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.755943] ? wait_for_completion_io+0x270/0x270 [ 1337.756726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.757607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.758478] do_syscall_64+0x33/0x40 [ 1337.759110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.759970] RIP: 0033:0x7f72c981db19 [ 1337.760601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.763699] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.764376] FAULT_INJECTION: forcing a failure. [ 1337.764376] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.764984] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1337.764993] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.765001] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.765010] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.765018] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1337.776619] CPU: 1 PID: 8980 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1337.778241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.780326] Call Trace: [ 1337.780945] dump_stack+0x107/0x167 [ 1337.781792] should_fail.cold+0x5/0xa [ 1337.782681] ? xas_alloc+0x336/0x440 [ 1337.783557] should_failslab+0x5/0x20 [ 1337.784447] kmem_cache_alloc+0x5b/0x310 [ 1337.785400] xas_alloc+0x336/0x440 [ 1337.786228] xas_create+0x34a/0x10d0 [ 1337.787092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.788294] xas_store+0x8c/0x1c40 [ 1337.789131] __xa_store+0x164/0x2d0 [ 1337.790132] ? xa_delete_node+0x280/0x280 [ 1337.791283] ? trace_hardirqs_on+0x5b/0x180 [ 1337.792469] xa_store+0x31/0x50 [ 1337.793307] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.794627] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.795877] ? alloc_fd+0x2e7/0x670 14:38:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]}) r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000380)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5608, &(0x7f0000000200)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6000, @fd=r2, 0x81, 0xe072, 0x66f3, 0x6, 0x0, {0x3, r3}}, 0xa4b) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fcd4000000000000000000000000000000000000000000000000ffffac1414bb0000ff000000000000000000000000001ce301015c2e6ce2ada50c30f61812bb2d2414117a1b5cef9470", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a6a6800"/240], 0x138}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000200)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x9, 0x4) [ 1337.796717] io_uring_setup+0x1fbb/0x2980 [ 1337.797851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.799044] ? wait_for_completion_io+0x270/0x270 [ 1337.800421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.801745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.802909] do_syscall_64+0x33/0x40 [ 1337.803875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.805033] RIP: 0033:0x7f2db9fa8b19 [ 1337.806039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.810223] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.812220] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1337.814112] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1337.816046] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1337.817690] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1337.819283] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1337.865942] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1337.905938] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 14:38:23 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 61) 14:38:23 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 63) 14:38:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1f, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[], [{@hash}, {@seclabel}]}) [ 1349.306727] FAULT_INJECTION: forcing a failure. [ 1349.306727] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.309222] CPU: 1 PID: 9000 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1349.310641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.312834] Call Trace: [ 1349.313384] dump_stack+0x107/0x167 [ 1349.314164] should_fail.cold+0x5/0xa [ 1349.314958] ? create_object.isra.0+0x3a/0xa20 [ 1349.315934] should_failslab+0x5/0x20 [ 1349.316663] FAULT_INJECTION: forcing a failure. [ 1349.316663] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.316744] kmem_cache_alloc+0x5b/0x310 [ 1349.316775] ? mark_held_locks+0x9e/0xe0 [ 1349.320911] create_object.isra.0+0x3a/0xa20 [ 1349.321843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.322911] kmem_cache_alloc+0x159/0x310 [ 1349.323769] xas_alloc+0x336/0x440 [ 1349.324512] xas_create+0x34a/0x10d0 [ 1349.325312] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.326424] xas_store+0x8c/0x1c40 [ 1349.327190] __xa_store+0x164/0x2d0 [ 1349.327956] ? xa_delete_node+0x280/0x280 [ 1349.328837] ? trace_hardirqs_on+0x5b/0x180 [ 1349.329760] xa_store+0x31/0x50 [ 1349.330437] __io_uring_add_tctx_node+0x1cf/0x520 [ 1349.331434] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.332526] ? alloc_fd+0x2e7/0x670 [ 1349.333303] io_uring_setup+0x1fbb/0x2980 [ 1349.334186] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1349.335246] ? wait_for_completion_io+0x270/0x270 [ 1349.336291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.337395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.338457] do_syscall_64+0x33/0x40 [ 1349.339235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.340284] RIP: 0033:0x7f2db9fa8b19 [ 1349.341072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.344873] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1349.346449] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1349.347931] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1349.349386] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1349.350835] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1349.352330] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1349.353876] CPU: 0 PID: 8997 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1349.355180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.356722] Call Trace: [ 1349.357224] dump_stack+0x107/0x167 [ 1349.357911] should_fail.cold+0x5/0xa [ 1349.358636] ? create_object.isra.0+0x3a/0xa20 [ 1349.359506] should_failslab+0x5/0x20 [ 1349.360235] kmem_cache_alloc+0x5b/0x310 [ 1349.360998] ? mark_held_locks+0x9e/0xe0 [ 1349.361777] create_object.isra.0+0x3a/0xa20 [ 1349.362606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.363573] kmem_cache_alloc+0x159/0x310 [ 1349.364385] xas_alloc+0x336/0x440 [ 1349.365057] xas_create+0x34a/0x10d0 [ 1349.365791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.366789] xas_store+0x8c/0x1c40 [ 1349.367490] __xa_store+0x164/0x2d0 [ 1349.368210] ? xa_delete_node+0x280/0x280 [ 1349.369015] ? trace_hardirqs_on+0x5b/0x180 [ 1349.369840] xa_store+0x31/0x50 [ 1349.370470] __io_uring_add_tctx_node+0x1cf/0x520 [ 1349.371379] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.372367] ? alloc_fd+0x2e7/0x670 [ 1349.373067] io_uring_setup+0x1fbb/0x2980 [ 1349.373862] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1349.374809] ? wait_for_completion_io+0x270/0x270 [ 1349.375775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.376760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.377745] do_syscall_64+0x33/0x40 [ 1349.378459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.379427] RIP: 0033:0x7f9af1df9b19 [ 1349.380129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.383598] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1349.385018] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1349.386366] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1349.387712] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1349.389037] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1349.390371] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1349.399250] FAULT_INJECTION: forcing a failure. [ 1349.399250] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.401496] CPU: 0 PID: 9006 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1349.402803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.404399] Call Trace: [ 1349.404921] dump_stack+0x107/0x167 [ 1349.405630] should_fail.cold+0x5/0xa [ 1349.406380] ? xas_alloc+0x336/0x440 [ 1349.407101] should_failslab+0x5/0x20 [ 1349.407855] kmem_cache_alloc+0x5b/0x310 [ 1349.408647] xas_alloc+0x336/0x440 [ 1349.409347] xas_create+0x34a/0x10d0 [ 1349.410100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.411117] xas_store+0x8c/0x1c40 [ 1349.411839] __xa_store+0x164/0x2d0 [ 1349.412545] ? xa_delete_node+0x280/0x280 [ 1349.413354] ? trace_hardirqs_on+0x5b/0x180 [ 1349.414199] xa_store+0x31/0x50 [ 1349.414838] __io_uring_add_tctx_node+0x1cf/0x520 [ 1349.415777] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.416776] ? alloc_fd+0x2e7/0x670 [ 1349.417504] io_uring_setup+0x1fbb/0x2980 [ 1349.418315] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1349.419279] ? wait_for_completion_io+0x270/0x270 [ 1349.420239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.421233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.422224] do_syscall_64+0x33/0x40 [ 1349.422947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.423930] RIP: 0033:0x7f72c981db19 14:38:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000005800)=0x88000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000b742dea96bfdfc7500", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000c4048fff020000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x114, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x29}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x97da250459569305}]}, @ETHTOOL_A_LINKINFO_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x84}, 0x2400004c) 14:38:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 60) 14:38:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000000000000000000000005000000000000000a000080487fec864b240000000000000000"], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xfc, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffc24}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x12}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x864d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x40010) getresuid(&(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r4 = semget(0x2, 0x0, 0x20b) r5 = getuid() r6 = syz_open_dev$vcsn(&(0x7f0000000b80), 0x62dd, 0x202000) sendmsg$nl_generic(r6, &(0x7f0000001040)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c00)={0x3fc, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfb, {0x1f}, [@generic="d51b53cc6de8a144c0bdbb216499e6ff010b6b34f6ab60640d3a10a079d102972fcc7602205a0c2da71e63388b072fa7f117c5247c83bf7aa684fabeff914b9c3abba6b71a66b3cd3bb3d9baaf15ff9f035631fd2e825fd6ce84ed295c5c5ab37fd8e89d044ccc59d3fff2f0d496b10f565c95022bbee3663b35bafc2f5c22a02a3cd01e9b780824dadc435c47d3be39aaaa1f7720266ec68942d9328c0d947e11c05ce20bd346022298a65a0dced2a79d38b6c6a8842c0ac3a17f1de5e684eed42bb16544e0b05fcadd8861916b6674ca715eb8ed0bb450151432047605c1e2bd1982b4f37dc5a9201c997686", @nested={0x116, 0x40, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="f80ef177c4e2517d9bb9488654d3d04889d7d90201a895923557cfa51a92a204390b7043f7b6c8e34fac26808a3781a6bbb9bbe9ddbcbd27c705b1a0b500c23356382daa1d5256e81ac8345c8a23d46ae6751fda726af74605ff961f18e635a021d071bcb2404b23c9bc5550e30f48c14a31a30cded924a6d02e307549a9a18b2e1bd9a39cfdf4006522577c243a59df7ffd701aff43a8d19ac3ff63049db33d8db4a3bb8636f3f4cb13ab2ee6917bc7a0bf62be32f1beb35b3b941f80868fe16139d38477751c5bfb884afcab0d623114f1397fe1513750ab44db58be40fd9c803dc8009c509f14c031e655aaf9"]}, @generic="c3cca7e7aba777e3cdeb5493dd7521ec612e3752590d52170a440317a84b0c0fff04bc5f0b8f5b8bd5f389d2ef16f275d1ea1fe74564871e3d7a15acb55cf9455f4b8335cbf1f1e63e4559e53fa2b9bcf548f1b3d3286abfdbc6a03b0559d05c769354774326f5dc7bed5c5f72151d11f2388f74cac4793ca313a534316c6dac7759f7658a7c8a9004bdc9f7d649d1a66310d653282f05fffa37d3fee789cf597c859bf94c327b2a7b172a2e76310dc6769446d3907e293a99bf9ae39ab054cdf856558e6dd337860a29eec29b5ff90d695269dfd9ca011e6259b81beff6b7e444d458282e418a6d9551686fffe798d6b89818dfd5d84e9efa", @nested={0xe8, 0x26, 0x0, 0x1, [@typed={0xc, 0x1a, 0x0, 0x0, @u64}, @typed={0xcf, 0x7c, 0x0, 0x0, @binary="989e58de05e3e22bcf1eb67234a3ba8aed9c32c163180f0d9b8521aa3848983722d7f4edbce1bf993520f1378a754e16dcaede186f9064f61a2c11843c40f554eb6f5ff0716d8e1fb525bc42cf6ab49949f6d0943fc710ef308bad4aaf4c36e6364b181eb987cac5cb996a94cf4518df40a1b06562403c4712b1fd14c8866385b19233ae6320389e58dad0baffbc6a29361433ecabd26db5c1808e054e508111a3950b80316edb4bd3269d4221ce5fbcb30b6d070d437a1e4ac2241b9553eb38f43e6cd8e78ef9390d093f"}, @typed={0x6, 0x7b, 0x0, 0x0, @str=':\x00'}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000002c0)={{0x3, r5, r3, r7, 0x0, 0x39, 0x94}, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2e3866696800983ff6f0f7290700653000"]) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000380)=""/207) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(r8, &(0x7f0000000080)='./file0/file0\x00', 0x80400, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0, 0x1080000, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r3}}, {@size={'size', 0x3d, [0x74, 0x36]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x39]}}}}, {@huge_always}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) semctl$IPC_RMID(r4, 0x0, 0x0) [ 1349.424637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.428408] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1349.429886] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1349.431270] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1349.432660] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1349.434052] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1349.435437] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() perf_event_open(0x0, r2, 0x1, 0xffffffffffffffff, 0xc) capset(&(0x7f0000000180)={0x20080522, r2}, &(0x7f00000000c0)={0x0, 0x2, 0xfffffaf3, 0x6, 0xffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1f, 0x8, 0x9, 0x7f, 0x0, 0x8, 0x40010, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x689, 0x6, 0xfffffff7, 0x5, 0x4, 0x1ff, 0x56f, 0x0, 0x101, 0x0, 0x5}, r2, 0xffffffffffffffff, r0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:38:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000005800)=0x88000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000b742dea96bfdfc7500", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000c4048fff020000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x114, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x29}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x97da250459569305}]}, @ETHTOOL_A_LINKINFO_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x84}, 0x2400004c) 14:38:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="e14ea6473b1722cbae6f7d568f288fe7bcb6cafaed3840244fa3e81dd2787f7ad51eaa1e1ec2137b19978f62fcfc97c71eee2f536e934600c220f37b94f7b9c6e7dc2bc4c9a9be29e108a1a47b395cbb20088317", 0x54) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x101d, 0xc21, 0x70bd2c, 0x0, {0xc, 0x0, 0x2}, [@typed={0x0, 0x53, 0x0, 0x0, @pid}, @typed={0x0, 0x75, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x0, 0x26, 0x0, 0x0, @ipv6=@mcast1}, @generic="801244cb955e2bc377fc1889f531d8f5d9d3b6a7443fd0e4aa98a14c54d7169366dc8815da82ba90fc3456d80bec9e5766bc6b632d05778d73cbd78aba44e845ce4243b92bfed97b9f27ef25c12ed3f0021faf8f0f20159fcdf6326593d7ab7b785c97711fd6ea793feb401d578f012b70bcb21e5ff1fee310a2d87b99c8127e8d6d09ee16b26f0d58de0ebe76b934e8a49a45144770e34f7db864363d9ab16bebee7459ab342a69520cd93b017bd372bf9e25b0cf1488b1845bc8617b3e700a87ed9b8c2dfee04175d70b6959cc29ade46c673db73b4392e5bd1b4bb838fa010a983eb5a7e358943b2fb88e0988", @generic="8ea88fb11cd59eef503fb5bff172f7f4d6c306aa9d83925301e2358ad2a66e4fc38bbbebcf64860e13f0abbb73687256b4305152a3acd0ebf2a2b0dfe00f12d6971c1f43efbee1e77dd6f2c4a2d023ec7000183751aaf578b868a9a5b35588465ebd83503dd3e3155908d8ec88ab889a6bb47d9d74e3a3d67cb486b02d25ea6b0e735a892bddf8aca388662d46db0d6a117efdb27e4c38f4830a1c90e3bbaa7603dc5157a8ad31452ef95c19ee1626305af29ca5b95826f4506662b8ed96fab5c72ba5f67231c6c41dc6447569cd35a06bf87d8e266b01bd1e0704e2adb2de5ed59afdabb6f3eea87247e7a3"]}, 0xfffffffffffffdbf}}, 0x0) 14:38:23 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 62) 14:38:23 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 64) 14:38:23 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x12, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES32=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000300)) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xfffffffffffffe11) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000280)={[0xffffffffffffffb6]}, 0x8, 0x800) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0xb) openat(r3, &(0x7f0000000100)='./file0\x00', 0x600100, 0x0) unshare(0x48020200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x1ff, 0x0, 0xcb25}, 0x4, 0xffffffff, 'id1\x00', 'timer0\x00', 0x0, 0x3f, 0x9, 0x8, 0x124}) [ 1349.733174] FAULT_INJECTION: forcing a failure. [ 1349.733174] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.735663] CPU: 1 PID: 9037 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1349.737118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.738860] Call Trace: [ 1349.739160] FAULT_INJECTION: forcing a failure. [ 1349.739160] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.739419] dump_stack+0x107/0x167 [ 1349.739446] should_fail.cold+0x5/0xa [ 1349.743125] ? xas_alloc+0x336/0x440 [ 1349.743920] should_failslab+0x5/0x20 [ 1349.744735] kmem_cache_alloc+0x5b/0x310 [ 1349.745606] xas_alloc+0x336/0x440 [ 1349.746356] xas_create+0x34a/0x10d0 [ 1349.747156] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.748273] xas_store+0x8c/0x1c40 [ 1349.749036] __xa_store+0x164/0x2d0 [ 1349.749801] ? xa_delete_node+0x280/0x280 [ 1349.750685] ? trace_hardirqs_on+0x5b/0x180 [ 1349.751596] xa_store+0x31/0x50 [ 1349.752309] __io_uring_add_tctx_node+0x1cf/0x520 [ 1349.753325] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.754421] ? alloc_fd+0x2e7/0x670 [ 1349.755199] io_uring_setup+0x1fbb/0x2980 [ 1349.756090] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1349.757156] ? wait_for_completion_io+0x270/0x270 [ 1349.758199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.759301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.760377] do_syscall_64+0x33/0x40 [ 1349.761174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.762218] RIP: 0033:0x7f9af1df9b19 [ 1349.762976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.766756] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1349.768382] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1349.769884] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1349.771344] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1349.772851] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1349.774343] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1349.775876] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1349.777165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.778739] Call Trace: [ 1349.779247] dump_stack+0x107/0x167 [ 1349.779949] should_fail.cold+0x5/0xa [ 1349.780652] ? xas_alloc+0x336/0x440 [ 1349.781327] should_failslab+0x5/0x20 [ 1349.782064] kmem_cache_alloc+0x5b/0x310 [ 1349.782843] xas_alloc+0x336/0x440 [ 1349.783513] xas_create+0x34a/0x10d0 [ 1349.784232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.785213] xas_store+0x8c/0x1c40 [ 1349.785874] __xa_store+0x164/0x2d0 [ 1349.786542] ? xa_delete_node+0x280/0x280 [ 1349.787320] ? trace_hardirqs_on+0x5b/0x180 [ 1349.788129] xa_store+0x31/0x50 [ 1349.788742] __io_uring_add_tctx_node+0x1cf/0x520 [ 1349.789630] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.790620] ? alloc_fd+0x2e7/0x670 [ 1349.791314] io_uring_setup+0x1fbb/0x2980 [ 1349.792112] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1349.793029] ? wait_for_completion_io+0x270/0x270 [ 1349.793959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.794921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.795897] do_syscall_64+0x33/0x40 [ 1349.796596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.797561] RIP: 0033:0x7f2db9fa8b19 [ 1349.798260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.801748] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1349.803193] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1349.804554] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1349.805860] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1349.807227] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1349.808576] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:23 executing program 3: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f00000001c0), 0x180000) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1) sendfile(r2, r3, 0x0, 0x100000001) r5 = dup2(r1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="4100004ba8da9bdce78bddbe", @ANYRES32=r5, @ANYBLOB="006531004adf2de2fe0ac47e845b5013f9bc6d598d3b77c8095dc7c08cc7f3244edd43bcda2d037b9353cb9e42cad575ab02290bc003cc0dc561782989ecb9bc085030234c593554ba8beddf1845dfea01bdbb8c001c26b6f93a63680f574c384b7be0ec70b2043b1ed376953ef15289586f8c097ba496"]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101000, 0x34) creat(&(0x7f0000000140)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 14:38:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:23 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) fdatasync(r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, 0x0) r3 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="5d695253bf965968c671b1e492afd0fe4663547755d6f5af5455e525491b1c0330ab94756093496a5116f77bb1dd1521c530f0f47c3ee0cffc1dabf3f7d03e0c6176ac02701292cd9e2815c36eeaced9412baa9b8a3deeda4def8ed07ad0899203d2c4", 0x63, 0x0) r4 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="b91cf242e173524fe5d125e770d90c3d76d64fa0e7409c4fef01cc016fd5eadaf8d96e1de73c75ca438d57e82e23b41cecd885e76b27ab837deeb3bd5b09ceaeca013bd901e1b89ee5176c", 0x4b, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r4, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x32, &(0x7f0000000080), 0x4) r6 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', r6) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r7, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/189}) unshare(0x48020200) 14:38:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 61) 14:38:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r4}}, 0xc6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1350.009663] FAULT_INJECTION: forcing a failure. [ 1350.009663] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.012128] CPU: 1 PID: 9055 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1350.013571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.015301] Call Trace: [ 1350.015871] dump_stack+0x107/0x167 [ 1350.016637] should_fail.cold+0x5/0xa [ 1350.017457] ? create_object.isra.0+0x3a/0xa20 [ 1350.018430] should_failslab+0x5/0x20 [ 1350.019233] kmem_cache_alloc+0x5b/0x310 [ 1350.020089] ? mark_held_locks+0x9e/0xe0 [ 1350.020958] create_object.isra.0+0x3a/0xa20 [ 1350.021873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1350.022948] kmem_cache_alloc+0x159/0x310 [ 1350.023827] xas_alloc+0x336/0x440 [ 1350.024574] xas_create+0x34a/0x10d0 [ 1350.025365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1350.026460] xas_store+0x8c/0x1c40 [ 1350.027219] __xa_store+0x164/0x2d0 [ 1350.027994] ? xa_delete_node+0x280/0x280 [ 1350.028897] ? trace_hardirqs_on+0x5b/0x180 [ 1350.029805] xa_store+0x31/0x50 [ 1350.030505] __io_uring_add_tctx_node+0x1cf/0x520 [ 1350.031507] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1350.032614] ? alloc_fd+0x2e7/0x670 [ 1350.033405] io_uring_setup+0x1fbb/0x2980 [ 1350.034291] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1350.035368] ? wait_for_completion_io+0x270/0x270 [ 1350.036409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.037500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.038600] do_syscall_64+0x33/0x40 [ 1350.039384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.040459] RIP: 0033:0x7f72c981db19 [ 1350.041243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.045087] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1350.046686] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1350.048179] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1350.049735] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1350.051221] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1350.052734] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "1dd8e286bbcae9642ae1fa7999bd342377d83d1708c27a882c539c0b0a838d09d15d94c13353b962ed08bc0b26d40dbc1160923af5d756bd1485b1d5440ae054", 0x13}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r1) r4 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "a2744daaf299264615224603105ed0d99d717236d4388ba2669c693e4480dd28a8e96dda9724e313673d9b24a35703f63f3624ef8ab2cbedacfdad1f84786b75", 0x26}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r2, 0x1) 14:38:40 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x828840, 0x44, 0x5}, 0x18) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)=""/201, &(0x7f0000000200)=0xc9) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:public_content_t:s0\x00', 0x26, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x2, 0x4) 14:38:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 63) 14:38:40 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 65) [ 1366.027289] audit: type=1400 audit(1755009520.104:148): avc: denied { associate } for pid=9071 comm="syz-executor.0" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:public_content_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1366.040996] FAULT_INJECTION: forcing a failure. [ 1366.040996] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.043580] CPU: 0 PID: 9073 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1366.045120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.046988] Call Trace: [ 1366.047589] dump_stack+0x107/0x167 [ 1366.048427] should_fail.cold+0x5/0xa [ 1366.049297] ? create_object.isra.0+0x3a/0xa20 [ 1366.050342] should_failslab+0x5/0x20 [ 1366.051200] kmem_cache_alloc+0x5b/0x310 [ 1366.052133] ? mark_held_locks+0x9e/0xe0 [ 1366.053075] create_object.isra.0+0x3a/0xa20 [ 1366.054066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1366.055223] kmem_cache_alloc+0x159/0x310 [ 1366.056243] xas_alloc+0x336/0x440 [ 1366.056512] FAULT_INJECTION: forcing a failure. [ 1366.056512] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.057054] xas_create+0x34a/0x10d0 [ 1366.057104] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1366.061453] xas_store+0x8c/0x1c40 [ 1366.062296] __xa_store+0x164/0x2d0 [ 1366.063133] ? xa_delete_node+0x280/0x280 [ 1366.064109] ? trace_hardirqs_on+0x5b/0x180 [ 1366.065113] xa_store+0x31/0x50 [ 1366.065892] __io_uring_add_tctx_node+0x1cf/0x520 [ 1366.066995] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1366.068192] ? alloc_fd+0x2e7/0x670 [ 1366.069045] io_uring_setup+0x1fbb/0x2980 [ 1366.070007] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1366.071151] ? wait_for_completion_io+0x270/0x270 [ 1366.072305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.073495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.074676] do_syscall_64+0x33/0x40 [ 1366.075527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.076697] RIP: 0033:0x7f9af1df9b19 [ 1366.077539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.081709] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1366.083436] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1366.085067] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1366.086689] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1366.088314] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1366.089927] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1366.091613] CPU: 1 PID: 9085 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1366.093091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.094853] Call Trace: [ 1366.095419] dump_stack+0x107/0x167 [ 1366.096209] should_fail.cold+0x5/0xa [ 1366.097030] ? create_object.isra.0+0x3a/0xa20 [ 1366.097999] should_failslab+0x5/0x20 [ 1366.098812] kmem_cache_alloc+0x5b/0x310 [ 1366.099679] ? mark_held_locks+0x9e/0xe0 [ 1366.100556] create_object.isra.0+0x3a/0xa20 [ 1366.101506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1366.102606] kmem_cache_alloc+0x159/0x310 [ 1366.103487] xas_alloc+0x336/0x440 [ 1366.104264] xas_create+0x34a/0x10d0 [ 1366.105078] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1366.106193] xas_store+0x8c/0x1c40 [ 1366.106967] __xa_store+0x164/0x2d0 [ 1366.107741] ? xa_delete_node+0x280/0x280 [ 1366.108654] ? trace_hardirqs_on+0x5b/0x180 [ 1366.109588] xa_store+0x31/0x50 [ 1366.110290] __io_uring_add_tctx_node+0x1cf/0x520 [ 1366.111308] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1366.112433] ? alloc_fd+0x2e7/0x670 [ 1366.113230] io_uring_setup+0x1fbb/0x2980 [ 1366.114125] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1366.115204] ? wait_for_completion_io+0x270/0x270 [ 1366.116266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.117373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.118474] do_syscall_64+0x33/0x40 [ 1366.119262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.120365] RIP: 0033:0x7f2db9fa8b19 [ 1366.121156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.125046] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1366.126656] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1366.128187] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1366.129703] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1366.131202] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1366.132731] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1366.142173] FAULT_INJECTION: forcing a failure. [ 1366.142173] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.144717] CPU: 0 PID: 9090 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1366.146479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.148337] Call Trace: [ 1366.148923] dump_stack+0x107/0x167 [ 1366.149764] should_fail.cold+0x5/0xa [ 1366.150623] ? xas_alloc+0x336/0x440 [ 1366.151453] should_failslab+0x5/0x20 [ 1366.152300] kmem_cache_alloc+0x5b/0x310 [ 1366.153206] xas_alloc+0x336/0x440 [ 1366.154006] xas_create+0x34a/0x10d0 [ 1366.154849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1366.156031] xas_store+0x8c/0x1c40 [ 1366.156845] __xa_store+0x164/0x2d0 [ 1366.157660] ? xa_delete_node+0x280/0x280 [ 1366.158592] ? trace_hardirqs_on+0x5b/0x180 [ 1366.159570] xa_store+0x31/0x50 [ 1366.160314] __io_uring_add_tctx_node+0x1cf/0x520 [ 1366.161379] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1366.162546] ? alloc_fd+0x2e7/0x670 [ 1366.163371] io_uring_setup+0x1fbb/0x2980 [ 1366.164311] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1366.165433] ? wait_for_completion_io+0x270/0x270 [ 1366.166533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.167699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1366.168858] do_syscall_64+0x33/0x40 [ 1366.169682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.170803] RIP: 0033:0x7f72c981db19 [ 1366.171618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.175683] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1366.177368] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1366.178934] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1366.180503] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1366.182061] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1366.183626] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 62) 14:38:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000004580)={&(0x7f0000003a80), 0xc, &(0x7f0000004540)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000002000018014000200776c616e31000000000000000040000008000300000000001899e72ce2e1eebd4c2edff51b5d7e58d733b950a2e2aff5f915d19f764879e577371d4b728ef13e7efe60b8d4a600b8fa5bbcedb8494e14a768950ef7700daed1fee9c46e20b956ca477f"], 0x34}}, 0x0) 14:38:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4686}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xb, &(0x7f0000000200)={0xb6e3, 0x1}, &(0x7f0000000240)) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x2, 0x3e, 0x90, 0x0, 0x0, 0x40001, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fff, 0x22}, 0x1188, 0x6, 0x100, 0x7, 0x8, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x5, r0, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x1f, 0x0, 0xff, 0x3, 0x0, 0x81, 0x90, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x40100, 0x4, 0x2d, 0x3, 0x8, 0x9, 0x1ff, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9f, 0xffffffffffffffff, 0x3) syz_open_dev$mouse(0x0, 0x5, 0x0) r2 = syz_io_uring_setup(0xffffffff, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000280)) fdatasync(r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r3, &(0x7f0000000140), 0x0, 0xfb, 0x1) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x28, 0x18, 0x0, 0x9, 0x6, 0x18001, 0x6, 0xbe}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) prlimit64(0xffffffffffffffff, 0x6, 0x0, 0x0) 14:38:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1380.682727] FAULT_INJECTION: forcing a failure. [ 1380.682727] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.684365] CPU: 0 PID: 9109 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1380.685314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.686495] Call Trace: [ 1380.686875] dump_stack+0x107/0x167 [ 1380.687394] should_fail.cold+0x5/0xa [ 1380.687935] ? xas_alloc+0x336/0x440 [ 1380.688474] should_failslab+0x5/0x20 [ 1380.689010] kmem_cache_alloc+0x5b/0x310 [ 1380.689603] xas_alloc+0x336/0x440 [ 1380.690117] xas_create+0x34a/0x10d0 [ 1380.690666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1380.691660] xas_store+0x8c/0x1c40 [ 1380.692200] __xa_store+0x164/0x2d0 [ 1380.692719] ? xa_delete_node+0x280/0x280 [ 1380.693314] ? trace_hardirqs_on+0x5b/0x180 [ 1380.693929] xa_store+0x31/0x50 [ 1380.694400] __io_uring_add_tctx_node+0x1cf/0x520 [ 1380.695077] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1380.695810] ? alloc_fd+0x2e7/0x670 [ 1380.696342] io_uring_setup+0x1fbb/0x2980 [ 1380.696937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1380.697644] ? wait_for_completion_io+0x270/0x270 [ 1380.698351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.699088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1380.699832] do_syscall_64+0x33/0x40 [ 1380.700364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.701074] RIP: 0033:0x7f9af1df9b19 [ 1380.701586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.704237] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1380.705539] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1380.706555] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1380.707543] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1380.708542] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1380.709529] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 64) 14:38:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:54 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 66) 14:38:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 63) 14:38:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1380.714354] FAULT_INJECTION: forcing a failure. [ 1380.714354] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.715956] CPU: 0 PID: 9110 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1380.716917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.718053] Call Trace: [ 1380.718414] dump_stack+0x107/0x167 [ 1380.718915] should_fail.cold+0x5/0xa [ 1380.719437] ? xas_alloc+0x336/0x440 [ 1380.719957] should_failslab+0x5/0x20 [ 1380.720488] kmem_cache_alloc+0x5b/0x310 [ 1380.721054] xas_alloc+0x336/0x440 [ 1380.721559] xas_create+0x34a/0x10d0 [ 1380.722086] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1380.722824] xas_store+0x8c/0x1c40 [ 1380.723331] __xa_store+0x164/0x2d0 [ 1380.723834] ? xa_delete_node+0x280/0x280 [ 1380.724426] ? trace_hardirqs_on+0x5b/0x180 [ 1380.725029] xa_store+0x31/0x50 [ 1380.725501] __io_uring_add_tctx_node+0x1cf/0x520 [ 1380.726169] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1380.726885] ? alloc_fd+0x2e7/0x670 [ 1380.727394] io_uring_setup+0x1fbb/0x2980 [ 1380.727975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1380.728684] ? wait_for_completion_io+0x270/0x270 [ 1380.729363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.730091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1380.730822] do_syscall_64+0x33/0x40 [ 1380.731341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.732050] RIP: 0033:0x7f2db9fa8b19 [ 1380.732561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.735099] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1380.736147] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1380.737124] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1380.738100] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1380.739073] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1380.740054] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1380.758987] FAULT_INJECTION: forcing a failure. [ 1380.758987] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.761558] CPU: 1 PID: 9116 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1380.763046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.764872] Call Trace: [ 1380.765444] dump_stack+0x107/0x167 [ 1380.766243] should_fail.cold+0x5/0xa [ 1380.767071] ? create_object.isra.0+0x3a/0xa20 [ 1380.768075] should_failslab+0x5/0x20 [ 1380.768911] kmem_cache_alloc+0x5b/0x310 [ 1380.769794] ? mark_held_locks+0x9e/0xe0 [ 1380.770686] create_object.isra.0+0x3a/0xa20 [ 1380.771642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1380.772773] kmem_cache_alloc+0x159/0x310 [ 1380.773681] xas_alloc+0x336/0x440 [ 1380.774445] xas_create+0x34a/0x10d0 [ 1380.775267] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1380.776424] xas_store+0x8c/0x1c40 [ 1380.777228] __xa_store+0x164/0x2d0 [ 1380.778021] ? xa_delete_node+0x280/0x280 [ 1380.778932] ? trace_hardirqs_on+0x5b/0x180 [ 1380.779878] xa_store+0x31/0x50 [ 1380.780612] __io_uring_add_tctx_node+0x1cf/0x520 [ 1380.781672] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1380.782798] ? alloc_fd+0x2e7/0x670 [ 1380.783590] io_uring_setup+0x1fbb/0x2980 [ 1380.784510] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1380.785615] ? wait_for_completion_io+0x270/0x270 [ 1380.786661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.787798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1380.788930] do_syscall_64+0x33/0x40 [ 1380.789715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.790819] RIP: 0033:0x7f72c981db19 [ 1380.791624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.795524] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1380.797177] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1380.798730] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1380.800271] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1380.801790] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1380.803318] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:54 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 67) 14:38:54 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x200101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x22740, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 14:38:55 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000300)='./file2\x00', 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10b) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x80000001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0x1) [ 1380.944365] FAULT_INJECTION: forcing a failure. [ 1380.944365] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.947217] CPU: 1 PID: 9120 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1380.948942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.950989] Call Trace: [ 1380.951657] dump_stack+0x107/0x167 [ 1380.952565] should_fail.cold+0x5/0xa [ 1380.953528] ? create_object.isra.0+0x3a/0xa20 [ 1380.954669] should_failslab+0x5/0x20 [ 1380.955604] kmem_cache_alloc+0x5b/0x310 [ 1380.956639] ? mark_held_locks+0x9e/0xe0 [ 1380.957666] create_object.isra.0+0x3a/0xa20 [ 1380.958751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1380.960021] kmem_cache_alloc+0x159/0x310 [ 1380.961080] xas_alloc+0x336/0x440 [ 1380.961959] xas_create+0x34a/0x10d0 [ 1380.962899] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1380.964212] xas_store+0x8c/0x1c40 [ 1380.965125] __xa_store+0x164/0x2d0 [ 1380.966028] ? xa_delete_node+0x280/0x280 [ 1380.967071] ? trace_hardirqs_on+0x5b/0x180 [ 1380.968158] xa_store+0x31/0x50 [ 1380.968992] __io_uring_add_tctx_node+0x1cf/0x520 [ 1380.970191] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1380.971478] ? alloc_fd+0x2e7/0x670 [ 1380.972415] io_uring_setup+0x1fbb/0x2980 [ 1380.973467] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1380.974733] ? wait_for_completion_io+0x270/0x270 [ 1380.975952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.977257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1380.978515] do_syscall_64+0x33/0x40 [ 1380.979431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.980709] RIP: 0033:0x7f2db9fa8b19 [ 1380.981617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.986116] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1380.987974] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1380.989741] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1380.991466] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1380.993198] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1380.994933] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 65) 14:38:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 64) [ 1381.042481] FAULT_INJECTION: forcing a failure. [ 1381.042481] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.043960] CPU: 0 PID: 9125 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1381.044799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1381.045805] Call Trace: [ 1381.046132] dump_stack+0x107/0x167 [ 1381.046579] should_fail.cold+0x5/0xa [ 1381.047049] ? ___slab_alloc+0x155/0x700 [ 1381.047555] ? create_object.isra.0+0x3a/0xa20 [ 1381.048117] should_failslab+0x5/0x20 [ 1381.048575] kmem_cache_alloc+0x5b/0x310 [ 1381.049075] create_object.isra.0+0x3a/0xa20 [ 1381.049607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1381.050228] kmem_cache_alloc+0x159/0x310 [ 1381.050741] xas_alloc+0x336/0x440 [ 1381.051185] xas_create+0x34a/0x10d0 [ 1381.051647] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1381.052268] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1381.052903] xas_store+0x8c/0x1c40 [ 1381.053351] __xa_store+0x164/0x2d0 [ 1381.053800] ? xa_delete_node+0x280/0x280 [ 1381.054315] ? trace_hardirqs_on+0x5b/0x180 [ 1381.054851] xa_store+0x31/0x50 [ 1381.055257] __io_uring_add_tctx_node+0x1cf/0x520 [ 1381.055846] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1381.056485] ? alloc_fd+0x2e7/0x670 [ 1381.056942] io_uring_setup+0x1fbb/0x2980 [ 1381.057455] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1381.058067] ? wait_for_completion_io+0x270/0x270 [ 1381.058673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1381.059315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1381.059956] do_syscall_64+0x33/0x40 [ 1381.060422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1381.061043] RIP: 0033:0x7f9af1df9b19 [ 1381.061493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1381.063719] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1381.064645] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1381.065505] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1381.066368] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1381.067230] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1381.068096] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1381.114289] FAULT_INJECTION: forcing a failure. [ 1381.114289] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.115760] CPU: 0 PID: 9133 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1381.116585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1381.117579] Call Trace: [ 1381.117900] dump_stack+0x107/0x167 [ 1381.118343] should_fail.cold+0x5/0xa [ 1381.118802] ? xas_alloc+0x336/0x440 [ 1381.119249] should_failslab+0x5/0x20 [ 1381.119710] kmem_cache_alloc+0x5b/0x310 [ 1381.120206] xas_alloc+0x336/0x440 [ 1381.120639] xas_create+0x34a/0x10d0 [ 1381.121096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1381.121726] xas_store+0x8c/0x1c40 [ 1381.122161] __xa_store+0x164/0x2d0 [ 1381.122596] ? xa_delete_node+0x280/0x280 [ 1381.123100] ? trace_hardirqs_on+0x5b/0x180 [ 1381.123619] xa_store+0x31/0x50 [ 1381.124022] __io_uring_add_tctx_node+0x1cf/0x520 [ 1381.124599] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1381.125225] ? alloc_fd+0x2e7/0x670 [ 1381.125671] io_uring_setup+0x1fbb/0x2980 [ 1381.126173] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1381.126777] ? wait_for_completion_io+0x270/0x270 [ 1381.127367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1381.127999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1381.128631] do_syscall_64+0x33/0x40 [ 1381.129079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1381.129692] RIP: 0033:0x7f72c981db19 [ 1381.130137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1381.132352] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1381.133258] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1381.134110] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1381.134957] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1381.135810] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1381.136674] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:38:55 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000480)={0xf, 0x1f, 0x2, 0x100000000}, 0xf) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x10600, 0x6) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) open_tree(0xffffffffffffffff, 0x0, 0x80980) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = syz_io_uring_setup(0x4cc1, &(0x7f0000000080)={0x0, 0xed63, 0x0, 0x3, 0x36c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000700)={0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x1) syz_open_dev$vcsa(&(0x7f0000004700), 0x0, 0x4400) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3f, 0x45, 0x3, 0x1b, 0x0, 0x8, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x20, 0x80}, 0x400c0, 0x7fff, 0x4, 0x7, 0x100000001, 0x3ef8ed4d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x4000, &(0x7f0000000540)=ANY=[]) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa", 0x3c, 0xfffe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4e14ce81f08dd15b8e1d6dda79b7222420b26d78b2525426cbd5d80dd4d7c77c5d855a5b981c1d", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000004000006001100062000000800150001010000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001100020000000800150008000000080001007063690011000200303030303a30303a31302e300000000008000000000008000b000010000006001100020000000800150020000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 14:38:55 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x200101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x22740, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 14:38:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:55 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x200101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x22740, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 14:38:55 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r2 = openat(r1, &(0x7f0000000400)='./file1/file0\x00', 0x240303, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file1/file0\x00', 0x21) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, r5, 0x0, 0x39, 0x94}, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="dd2f665b74652cab1aabc3cf696c009846"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file1\x00'}) 14:39:10 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 68) 14:39:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, 0x0}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1396.474176] FAULT_INJECTION: forcing a failure. [ 1396.474176] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.475535] CPU: 1 PID: 9162 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1396.476334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.477290] Call Trace: [ 1396.477584] dump_stack+0x107/0x167 [ 1396.478006] should_fail.cold+0x5/0xa [ 1396.478454] ? xas_alloc+0x336/0x440 [ 1396.478884] should_failslab+0x5/0x20 [ 1396.479322] kmem_cache_alloc+0x5b/0x310 [ 1396.479794] xas_alloc+0x336/0x440 [ 1396.480215] xas_create+0x34a/0x10d0 [ 1396.480636] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1396.481239] xas_store+0x8c/0x1c40 [ 1396.481637] __xa_store+0x164/0x2d0 [ 1396.482054] ? xa_delete_node+0x280/0x280 [ 1396.482510] ? trace_hardirqs_on+0x5b/0x180 [ 1396.483013] xa_store+0x31/0x50 [ 1396.483398] __io_uring_add_tctx_node+0x1cf/0x520 [ 1396.483952] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1396.484559] ? alloc_fd+0x2e7/0x670 [ 1396.484966] io_uring_setup+0x1fbb/0x2980 [ 1396.485448] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1396.486031] ? wait_for_completion_io+0x270/0x270 [ 1396.486568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1396.487171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1396.487950] do_syscall_64+0x33/0x40 [ 1396.488433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1396.489125] RIP: 0033:0x7f9af1df9b19 [ 1396.489578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.491691] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1396.492530] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1396.493342] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1396.494112] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1396.494875] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1396.495619] FAULT_INJECTION: forcing a failure. [ 1396.495619] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.495643] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1396.500703] CPU: 0 PID: 9155 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1396.502530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.504747] Call Trace: [ 1396.505453] dump_stack+0x107/0x167 [ 1396.506435] should_fail.cold+0x5/0xa [ 1396.507453] ? xas_alloc+0x336/0x440 [ 1396.508459] should_failslab+0x5/0x20 [ 1396.509478] kmem_cache_alloc+0x5b/0x310 [ 1396.510569] xas_alloc+0x336/0x440 [ 1396.511524] xas_create+0x34a/0x10d0 [ 1396.512555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1396.513960] xas_store+0x8c/0x1c40 [ 1396.514935] __xa_store+0x164/0x2d0 [ 1396.515915] ? xa_delete_node+0x280/0x280 [ 1396.517039] ? trace_hardirqs_on+0x5b/0x180 [ 1396.518202] xa_store+0x31/0x50 [ 1396.519096] __io_uring_add_tctx_node+0x1cf/0x520 [ 1396.520405] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1396.521766] ? alloc_fd+0x2e7/0x670 [ 1396.522679] io_uring_setup+0x1fbb/0x2980 [ 1396.523696] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1396.524926] ? wait_for_completion_io+0x270/0x270 [ 1396.526138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1396.527408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1396.528678] do_syscall_64+0x33/0x40 [ 1396.529581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1396.530834] RIP: 0033:0x7f2db9fa8b19 [ 1396.531740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.536277] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1396.538152] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1396.539903] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1396.541656] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1396.543400] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1396.545156] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:10 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d318c53ed8ca6f864c968d9cf6ef9676f2336d404ac00be5337b769a9f1b48f5fbfafcb7aa735096b0f0f34bfd28237255aba6ae084"]) io_uring_setup(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x800) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x64000, 0x33) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5608, &(0x7f0000000200)) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000380)={{}, "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"}) 14:39:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:10 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 66) 14:39:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 65) 14:39:10 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x200101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x22740, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 14:39:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="af", 0x1, 0xffffff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5e, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x0) dup2(r0, r2) fallocate(r0, 0x8, 0x0, 0x8000) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) [ 1396.660003] FAULT_INJECTION: forcing a failure. [ 1396.660003] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.662797] CPU: 0 PID: 9174 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1396.664462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.666485] Call Trace: [ 1396.667134] dump_stack+0x107/0x167 [ 1396.668028] should_fail.cold+0x5/0xa [ 1396.668951] ? create_object.isra.0+0x3a/0xa20 [ 1396.670055] should_failslab+0x5/0x20 [ 1396.670992] kmem_cache_alloc+0x5b/0x310 [ 1396.671981] ? mark_held_locks+0x9e/0xe0 [ 1396.672986] create_object.isra.0+0x3a/0xa20 [ 1396.674056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1396.675301] kmem_cache_alloc+0x159/0x310 [ 1396.676345] xas_alloc+0x336/0x440 [ 1396.677217] xas_create+0x34a/0x10d0 [ 1396.678135] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1396.679400] xas_store+0x8c/0x1c40 [ 1396.680297] __xa_store+0x164/0x2d0 [ 1396.681192] ? xa_delete_node+0x280/0x280 [ 1396.682203] ? trace_hardirqs_on+0x5b/0x180 [ 1396.683263] xa_store+0x31/0x50 [ 1396.684073] __io_uring_add_tctx_node+0x1cf/0x520 [ 1396.685254] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1396.686507] ? alloc_fd+0x2e7/0x670 [ 1396.687403] io_uring_setup+0x1fbb/0x2980 [ 1396.688430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1396.689657] ? wait_for_completion_io+0x270/0x270 [ 1396.690874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1396.692151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1396.693428] do_syscall_64+0x33/0x40 [ 1396.694348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1396.695596] RIP: 0033:0x7f72c981db19 [ 1396.696505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.701011] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1396.702865] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1396.704624] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1396.706360] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1396.708129] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1396.709897] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:25 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@multicast, @local, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "004ae69c7c4765c9"}}}}, &(0x7f0000000200)={0x0, 0x3, [0x9e, 0xb95, 0x49, 0x9b8]}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0xe427, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = getpgrp(0x0) getpriority(0x0, r2) setpgid(r1, r1) ptrace(0xffffffffffffffff, r1) syz_emit_ethernet(0x22, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@can={0xc, {{0x3, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "af742fac6f5ad85a"}}}}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x37f, 0xca4}, &(0x7f0000000100)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140), 0x100000000000009c, &(0x7f0000000300)=[@rights, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred], 0xa}, 0x12103) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x5, 0x8, 0x4, 0x5, 0x0, 0xf1, 0x4340, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8000, 0x4}, 0x41091, 0xdb9, 0x9, 0x5, 0x7, 0x200, 0xfff9, 0x0, 0x6b, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000400)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:39:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 66) 14:39:25 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 69) 14:39:25 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 67) 14:39:25 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='./file0/file0\x00', 0x14) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x0, 0x100, 0xb91}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x14c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000008c0)=ANY=[], 0x629) sendfile(r2, r1, 0x0, 0xffffffff000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x2000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c0502dc8a3f3e75366d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42ca654e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab0100000000000000c9aa53b8c092760da4cd088f03fad6704eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46eda75f2b1a85bdce12a8afa95492a14be3f42052ff500", "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"}) 14:39:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x1da0, 0x0, 0x0, 0x13e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x40448c0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1411.445210] FAULT_INJECTION: forcing a failure. [ 1411.445210] name failslab, interval 1, probability 0, space 0, times 0 pwritev2(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000040)="c3442580cc299af4d88d06ef6b113d788bffc654fc5944a0ca7d7087ea428e5566cf6334af", 0x25}, {&(0x7f0000001940)="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", 0xc00}, {&(0x7f0000000340)="8661651f42a63adff786fea1c356e92f7de93d9c832526692db81cdf22d5bb29ebd58ac240cb216da42145fab5fd716b36cef0628f91d2a5846edaffd5734320ee014550e5a68a1449ae31db992d354ca004eb9853777f8bc775d7f64f490656bfb35f4c2fe29dbb2d2bf8cda388311ec106593afd63c487a8732f951eecbbed504ebe514a1b16ebe401b76972e1eba83cf1a91bed56dea35a509fecf5cd12ea9d2e74eb279a9a9583b1", 0xaa}, {&(0x7f0000000080)}, {&(0x7f0000000500)="1e259ffa62ea41bf7ebbaf219cda5c82ac6f60cc86781e162dfde77637ca7a2788c9dabb9a5acd83d8fcdab5a9f7951e9d6ea016e5d7e24a024ea17da55a7537c92065c789368713d587a923adff96ed47920d61f92a520b4de846aaabaad11a75061c1054c5f7a26420e32711e05f77a7656923a34908e84b5ee8d8b5ad5774d82152f409cb7ba95c3482ac6a917c3324bddada1483453f11264215e8004fb3b2dbc71ba875", 0xa6}, {&(0x7f00000005c0)="06729268a23b1d8d4fa3d2fa1ad85d65f0ae110a59b63ad3fc1cea1e01385d870239157f4463aded9338e228dc927634d1e9491607a722ebcc0a1e4bef0eaac7c85444e7d72531458e0aa2c3aefc18a00314b84edaaacfad8469434642150745fbb9a3d3fb39475f74d06bc03dbea40e9e8634f172a1d4b51272d451c04f5faf2e9fed1e42973677fe2b5af562a2f5f15d610c57fecc42ff205e51a44ac22160cfa773", 0xa3}, {&(0x7f0000000680)="be6f74153fb57fcd47a383525a20ddfac5b71b19cdc12dcaf34cc5aa7e762c5358b005b6db993779cff10778f3787f3d44ad4c229f7c75b8e7fc664cf0980a50d91015ef87291f77c3d9003d89f580ef9e28e9dfffe5ac3ea91eb97dc3ad5cabd61417fb09c1e2546403a1a835e852d1b907caec26f82183051681cfd0e7c582a20f5dbf5db53f6edd7fccfcef13f1af9a7bddf5c873fb8117e40fd0bebd5a279624301df0c4d6035758f9a4ee711c23c63531265d1a4239c38d78fa6301543069820dd09926e3fd43323dc85c2b0419fa4eb9aecdcf85c567173d34a420ad60f1227363bcef67ab34616798", 0xec}, {&(0x7f00000000c0)="ebd328211a19b0d406fc", 0xa}, {&(0x7f0000000400)="56da6ae86a71740b86ec3fdf46d2f5b55900b3260ae30e6e772af73f4c0353a5ee347c60a63417e7a045e043f8f1343ce249f153dc218bc0513566ba51cbcbbd22eb0e9edab34d630776", 0x4a}], 0xa, 0x81, 0x8, 0x1e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) fsetxattr$security_capability(r3, &(0x7f0000000080), &(0x7f0000000280)=@v3={0x3000000, [{0x8001, 0x3}, {0xab, 0x1ff}], 0xffffffffffffffff}, 0x18, 0x2) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r6, r10, &(0x7f0000003940)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000003900)={&(0x7f0000000880)=@pppol2tp, 0x80, &(0x7f0000003800)=[{&(0x7f0000002540)=""/105, 0x69}, {&(0x7f00000025c0)=""/72, 0x48}, {&(0x7f0000002640)=""/155, 0x9b}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/193, 0xc1}], 0x5, &(0x7f0000003880)=""/93, 0x5d}, 0x0, 0x20, 0x1}, 0x6) io_uring_enter(r0, 0x58ab, 0xc988, 0x2, 0x0, 0x0) 14:39:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, 0x0}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1411.448234] CPU: 0 PID: 9193 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1411.449113] FAULT_INJECTION: forcing a failure. [ 1411.449113] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.449793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.449813] Call Trace: [ 1411.454600] dump_stack+0x107/0x167 [ 1411.455436] should_fail.cold+0x5/0xa [ 1411.456313] ? create_object.isra.0+0x3a/0xa20 [ 1411.457367] should_failslab+0x5/0x20 [ 1411.458231] kmem_cache_alloc+0x5b/0x310 [ 1411.459151] ? mark_held_locks+0x9e/0xe0 [ 1411.460079] create_object.isra.0+0x3a/0xa20 [ 1411.461078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.462237] kmem_cache_alloc+0x159/0x310 [ 1411.463194] xas_alloc+0x336/0x440 [ 1411.464008] xas_create+0x34a/0x10d0 [ 1411.464891] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.466099] xas_store+0x8c/0x1c40 [ 1411.466938] __xa_store+0x164/0x2d0 [ 1411.467766] ? xa_delete_node+0x280/0x280 [ 1411.468732] ? trace_hardirqs_on+0x5b/0x180 [ 1411.469725] xa_store+0x31/0x50 [ 1411.470479] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.471570] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.472756] ? alloc_fd+0x2e7/0x670 [ 1411.473606] io_uring_setup+0x1fbb/0x2980 [ 1411.474562] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.475701] ? wait_for_completion_io+0x270/0x270 [ 1411.476849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.478035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.479209] do_syscall_64+0x33/0x40 [ 1411.480055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.481220] RIP: 0033:0x7f9af1df9b19 [ 1411.482061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.486221] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.487945] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1411.489561] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.491209] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.492824] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.494432] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1411.496101] CPU: 1 PID: 9197 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1411.498042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.500093] Call Trace: [ 1411.500675] dump_stack+0x107/0x167 [ 1411.501742] should_fail.cold+0x5/0xa [ 1411.502529] ? create_object.isra.0+0x3a/0xa20 [ 1411.503775] should_failslab+0x5/0x20 [ 1411.504650] kmem_cache_alloc+0x5b/0x310 [ 1411.505493] ? mark_held_locks+0x9e/0xe0 [ 1411.506356] create_object.isra.0+0x3a/0xa20 [ 1411.507247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.508293] kmem_cache_alloc+0x159/0x310 [ 1411.509167] xas_alloc+0x336/0x440 [ 1411.509897] xas_create+0x34a/0x10d0 [ 1411.510676] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.511757] xas_store+0x8c/0x1c40 [ 1411.512515] __xa_store+0x164/0x2d0 [ 1411.513260] ? xa_delete_node+0x280/0x280 [ 1411.514126] ? trace_hardirqs_on+0x5b/0x180 [ 1411.515024] xa_store+0x31/0x50 [ 1411.515715] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.516713] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.517792] ? alloc_fd+0x2e7/0x670 [ 1411.518547] io_uring_setup+0x1fbb/0x2980 [ 1411.519396] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.520476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.521548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.522614] do_syscall_64+0x33/0x40 [ 1411.523378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.524420] RIP: 0033:0x7f2db9fa8b19 [ 1411.525185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.528939] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.530494] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1411.531987] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.533470] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.534913] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.536408] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1411.542688] blktrace: Concurrent blktraces are not allowed on loop8 [ 1411.544744] FAULT_INJECTION: forcing a failure. [ 1411.544744] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.547164] CPU: 1 PID: 9196 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1411.548570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.550256] Call Trace: [ 1411.550796] dump_stack+0x107/0x167 [ 1411.551551] should_fail.cold+0x5/0xa [ 1411.552348] ? xas_alloc+0x336/0x440 [ 1411.553126] should_failslab+0x5/0x20 [ 1411.553911] kmem_cache_alloc+0x5b/0x310 [ 1411.554753] xas_alloc+0x336/0x440 [ 1411.555489] xas_create+0x34a/0x10d0 [ 1411.556274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.557373] xas_store+0x8c/0x1c40 [ 1411.558136] __xa_store+0x164/0x2d0 [ 1411.558895] ? xa_delete_node+0x280/0x280 [ 1411.559782] ? trace_hardirqs_on+0x5b/0x180 [ 1411.560712] xa_store+0x31/0x50 [ 1411.561406] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.562408] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.563487] ? alloc_fd+0x2e7/0x670 [ 1411.564287] io_uring_setup+0x1fbb/0x2980 [ 1411.565164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.566199] ? wait_for_completion_io+0x270/0x270 [ 1411.567224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.568309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.569392] do_syscall_64+0x33/0x40 [ 1411.570183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.571242] RIP: 0033:0x7f72c981db19 [ 1411.572014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.575840] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.577413] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1411.578912] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.580408] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.581879] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.583379] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:25 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x500, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) io_uring_enter(r0, 0x1a63, 0x17, 0x2, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1bc}}, 0x20004000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc9a, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c002dce585b21f0ff000000000104000200d076d92952ecb4220000"], 0x1c}}, 0x20040000) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) [ 1411.684184] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. 14:39:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 67) 14:39:25 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 70) [ 1411.738436] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. 14:39:25 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x160, 0x5afb, {{0x27, 0x4, 0x0, 0x5, 0x9c, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xda, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9c}, {@private=0xa010102}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x13, 0xf9, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0x3, "02"}, {0x1, 0xa, "1ac78cc594fd9294"}, {0x5, 0xc, "d7d82b60904e1d8a877c"}, {0x1, 0xc, "031f7794ae822379c159"}]}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x1, [{@empty, 0x7}, {@multicast2}, {@multicast2, 0xf48b}, {@empty, 0x8}, {@multicast1, 0x1f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x5e, 0x3, 0x1, 0x81, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x1, 0x7800, 0x101, 0x1000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r3}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1a8, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0xc010) openat(0xffffffffffffff9c, 0x0, 0x799181, 0x120) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000200)=""/241) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1411.746768] FAULT_INJECTION: forcing a failure. [ 1411.746768] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.749379] CPU: 0 PID: 9209 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1411.750917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.752798] Call Trace: [ 1411.753402] dump_stack+0x107/0x167 [ 1411.754236] should_fail.cold+0x5/0xa [ 1411.755102] ? create_object.isra.0+0x3a/0xa20 [ 1411.756139] should_failslab+0x5/0x20 [ 1411.757022] kmem_cache_alloc+0x5b/0x310 [ 1411.757942] ? mark_held_locks+0x9e/0xe0 [ 1411.758869] create_object.isra.0+0x3a/0xa20 [ 1411.759867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.761039] kmem_cache_alloc+0x159/0x310 [ 1411.761986] xas_alloc+0x336/0x440 [ 1411.762797] xas_create+0x34a/0x10d0 [ 1411.763652] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.764846] xas_store+0x8c/0x1c40 [ 1411.765663] __xa_store+0x164/0x2d0 [ 1411.766488] ? xa_delete_node+0x280/0x280 [ 1411.767431] ? trace_hardirqs_on+0x5b/0x180 [ 1411.768426] xa_store+0x31/0x50 [ 1411.769178] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.770265] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.771444] ? alloc_fd+0x2e7/0x670 [ 1411.772279] io_uring_setup+0x1fbb/0x2980 [ 1411.772868] FAULT_INJECTION: forcing a failure. [ 1411.772868] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.773231] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.773250] ? wait_for_completion_io+0x270/0x270 [ 1411.773297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.778945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.780116] do_syscall_64+0x33/0x40 [ 1411.780965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.782119] RIP: 0033:0x7f72c981db19 [ 1411.782958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.787131] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.788873] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1411.790476] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.792088] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.793710] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.795315] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1411.796967] CPU: 1 PID: 9216 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1411.798387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.800070] Call Trace: [ 1411.800625] dump_stack+0x107/0x167 [ 1411.801380] should_fail.cold+0x5/0xa [ 1411.802160] ? xas_alloc+0x336/0x440 [ 1411.802921] should_failslab+0x5/0x20 [ 1411.803710] kmem_cache_alloc+0x5b/0x310 [ 1411.804561] xas_alloc+0x336/0x440 [ 1411.805300] xas_create+0x34a/0x10d0 14:39:25 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 68) 14:39:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_io_uring_setup(0x10ab, &(0x7f0000000100)={0x0, 0xa428, 0x10, 0x1, 0x45}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000240)) r3 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x30, 0x3}, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x9afb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x20}, {r1, 0x100}, {0xffffffffffffffff, 0x2000}, {r2, 0x2000}, {0xffffffffffffffff, 0x10a}, {r4, 0x800}], 0x6, &(0x7f0000000300)={r5, r6+60000000}, &(0x7f0000000340)={[0xfffffffffffffff9]}, 0x8) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0xee00) perf_event_open$cgroup(&(0x7f0000001100)={0x1, 0x80, 0x9, 0x80, 0x5, 0x8, 0x0, 0x7fff, 0x14000, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0xde0, 0x3c}, 0x101, 0x5, 0x9, 0x8, 0x5, 0x2e1, 0x60, 0x0, 0x28, 0x0, 0x6}, 0xffffffffffffffff, 0x9, r4, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000026c0)={'wlan0\x00'}) [ 1411.806087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.807513] xas_store+0x8c/0x1c40 [ 1411.808316] __xa_store+0x164/0x2d0 [ 1411.809072] ? xa_delete_node+0x280/0x280 [ 1411.809940] ? trace_hardirqs_on+0x5b/0x180 [ 1411.810852] xa_store+0x31/0x50 [ 1411.811547] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.812554] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.813640] ? alloc_fd+0x2e7/0x670 [ 1411.814410] io_uring_setup+0x1fbb/0x2980 [ 1411.815262] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.816298] ? wait_for_completion_io+0x270/0x270 [ 1411.817329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.818391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.819457] do_syscall_64+0x33/0x40 [ 1411.820221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.821280] RIP: 0033:0x7f2db9fa8b19 [ 1411.822042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.825833] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.827417] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1411.828908] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.830384] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.831860] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.833342] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1411.868308] FAULT_INJECTION: forcing a failure. [ 1411.868308] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.870742] CPU: 1 PID: 9222 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1411.872151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.873891] Call Trace: [ 1411.874444] dump_stack+0x107/0x167 [ 1411.875203] should_fail.cold+0x5/0xa [ 1411.875992] ? xas_alloc+0x336/0x440 [ 1411.876781] should_failslab+0x5/0x20 [ 1411.877588] kmem_cache_alloc+0x5b/0x310 [ 1411.878440] xas_alloc+0x336/0x440 [ 1411.879197] xas_create+0x34a/0x10d0 [ 1411.879996] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.881107] xas_store+0x8c/0x1c40 [ 1411.881858] __xa_store+0x164/0x2d0 [ 1411.882610] ? xa_delete_node+0x280/0x280 [ 1411.883474] ? trace_hardirqs_on+0x5b/0x180 [ 1411.884379] xa_store+0x31/0x50 [ 1411.885081] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.886098] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.887175] ? alloc_fd+0x2e7/0x670 [ 1411.887948] io_uring_setup+0x1fbb/0x2980 [ 1411.888829] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1411.889880] ? wait_for_completion_io+0x270/0x270 [ 1411.890899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.891972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.893034] do_syscall_64+0x33/0x40 [ 1411.893806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.894858] RIP: 0033:0x7f9af1df9b19 [ 1411.895636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.899433] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1411.901018] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1411.902481] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1411.903978] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1411.905445] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1411.906900] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5608, &(0x7f0000000200)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x0, 0x20}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @loopback, 0xffff7fff}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) 14:39:26 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 69) [ 1412.059236] FAULT_INJECTION: forcing a failure. [ 1412.059236] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.061668] CPU: 1 PID: 9231 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1412.063104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.064838] Call Trace: [ 1412.065387] dump_stack+0x107/0x167 [ 1412.066147] should_fail.cold+0x5/0xa [ 1412.066939] ? ___slab_alloc+0x155/0x700 [ 1412.067783] ? create_object.isra.0+0x3a/0xa20 [ 1412.068732] should_failslab+0x5/0x20 [ 1412.069525] kmem_cache_alloc+0x5b/0x310 [ 1412.070409] create_object.isra.0+0x3a/0xa20 [ 1412.071308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.072416] kmem_cache_alloc+0x159/0x310 [ 1412.073279] xas_alloc+0x336/0x440 [ 1412.074048] xas_create+0x34a/0x10d0 [ 1412.074839] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.075967] xas_store+0x8c/0x1c40 [ 1412.076735] __xa_store+0x164/0x2d0 [ 1412.077522] ? xa_delete_node+0x280/0x280 [ 1412.078423] ? trace_hardirqs_on+0x5b/0x180 [ 1412.079359] xa_store+0x31/0x50 [ 1412.080077] __io_uring_add_tctx_node+0x1cf/0x520 [ 1412.081113] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1412.082232] ? alloc_fd+0x2e7/0x670 [ 1412.083035] io_uring_setup+0x1fbb/0x2980 [ 1412.083939] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1412.085030] ? wait_for_completion_io+0x270/0x270 [ 1412.086102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.087236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.088355] do_syscall_64+0x33/0x40 [ 1412.089160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.090272] RIP: 0033:0x7f9af1df9b19 [ 1412.091071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.095018] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1412.096659] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1412.098201] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1412.099733] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1412.101269] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1412.102801] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, 0x0}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1427.454397] FAULT_INJECTION: forcing a failure. [ 1427.454397] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.457102] CPU: 0 PID: 9247 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1427.458629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.460485] Call Trace: [ 1427.461092] dump_stack+0x107/0x167 [ 1427.462187] should_fail.cold+0x5/0xa [ 1427.463050] ? xas_alloc+0x336/0x440 [ 1427.463889] should_failslab+0x5/0x20 [ 1427.464757] kmem_cache_alloc+0x5b/0x310 [ 1427.465683] xas_alloc+0x336/0x440 [ 1427.466493] xas_create+0x34a/0x10d0 [ 1427.467366] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1427.468554] xas_store+0x8c/0x1c40 [ 1427.469396] FAULT_INJECTION: forcing a failure. [ 1427.469396] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.469411] __xa_store+0x164/0x2d0 [ 1427.469441] ? xa_delete_node+0x280/0x280 [ 1427.473479] ? trace_hardirqs_on+0x5b/0x180 [ 1427.474469] xa_store+0x31/0x50 [ 1427.475221] __io_uring_add_tctx_node+0x1cf/0x520 [ 1427.476310] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1427.477505] ? alloc_fd+0x2e7/0x670 [ 1427.478353] io_uring_setup+0x1fbb/0x2980 [ 1427.479316] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.480453] ? wait_for_completion_io+0x270/0x270 [ 1427.481599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.482779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.483955] do_syscall_64+0x33/0x40 [ 1427.484813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.485963] RIP: 0033:0x7f9af1df9b19 [ 1427.486804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.490914] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.492630] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1427.494224] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1427.495819] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1427.497418] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1427.499014] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1427.500679] CPU: 1 PID: 9253 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1427.502143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:39:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5608, &(0x7f0000000200)) fcntl$setstatus(r0, 0x4, 0x400) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x14e) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x5a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x6) 14:39:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:41 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x160, 0x5afb, {{0x27, 0x4, 0x0, 0x5, 0x9c, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xda, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9c}, {@private=0xa010102}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x13, 0xf9, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x2b, 0x0, [{0x7, 0x3, "02"}, {0x1, 0xa, "1ac78cc594fd9294"}, {0x5, 0xc, "d7d82b60904e1d8a877c"}, {0x1, 0xc, "031f7794ae822379c159"}]}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x1, [{@empty, 0x7}, {@multicast2}, {@multicast2, 0xf48b}, {@empty, 0x8}, {@multicast1, 0x1f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x5e, 0x3, 0x1, 0x81, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x1, 0x7800, 0x101, 0x1000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r3}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1a8, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0xc010) openat(0xffffffffffffff9c, 0x0, 0x799181, 0x120) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000200)=""/241) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) 14:39:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 70) 14:39:41 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 71) 14:39:41 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @broadcast}, 0x390, 0x0, 0x0, 0x0, 0xa81, &(0x7f0000000000)='syzkaller1\x00', 0xa3, 0x9, 0x9}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000dc0)=@ethtool_sset_info={0x19}}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000b00)=0x8) open(&(0x7f0000000b40)='./file0\x00', 0x101800, 0x9c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x8, 0x9, &(0x7f0000000980)=[{&(0x7f00000002c0)="4adf5c0059570eaf78ce081db0b5d9d74b256f9267295647319fec98ffdfc8ec5223b5fc5a2e7cfaedc5b98d435546f028ebfacd3dcd15603bda7d4ba4f0d39de5c99fd6bf2825126e79d04b19b16d293b9f61528b55ae47bbc50f7aeb4ee1ac56cf31752c53cd6fd3ce51784863ab59f72044ab0c4bdfa51a4404676d79cb821fca1100f68c84d5d5c88db33d36416ad3eb08c75d14b42ae5d4645e051911977a38e78f877bdfb64aaf4927fded844387d260b4b7ab553a5bb0d8603c425533d6da4726e9041a844f149ba8d660aebb242aeceb304301afb7e6bc37", 0xdc, 0x25}, {&(0x7f00000003c0), 0x0, 0x1f}, {&(0x7f0000000400)="b7bf316ba861f3300f41df8fd43a3c6b448da9135da65e5510d7b79dafc64a2efd306535b0adff3e9aeed0465fb9ecf18bfedace7f6495cd9b5da17ee124a7c18af36a57a07341459f77a02ceb62a6fa44ad7924fdc7b7003ebed716925d727c418141c03f710639489ffca45c196ad9d0210c5e2b44fb2183921a344039bbe293dada1b1c32310e1af463b83a3a431d164188e003b4d36f031e", 0x9a, 0x6}, {&(0x7f00000004c0)="964ae1a76e39d7d361d181308e8ce66af8c3284a77a3f256b4df6743d1b553d8d56804907b567b91cc1213111f0bb6934c1d5b348a0dc723a3e63e9caeff3d1eb9da38777281d417a179ac9425e121dbd0ad0c4ca9a7db4e9e1e273a60caf5e733fa9fbe678493335c0e45d9e0b29d75b2cec0f4546d2a2f0e9f288c03b957d69d68a6d1724f3bc2e06477091062abf2be8d6f5f22c43ec0ce1398079dd87d", 0x9f, 0x1}, {&(0x7f0000000580)="7c4b1b5907dc0a4369955e", 0xb, 0xb2d}, {&(0x7f00000005c0)="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", 0xfd, 0x3}, {&(0x7f00000006c0)="29c6c9ed27a19fbce43f340c37bd8ee2eaf2c46f1acaa13a184d2fc1ec82087877bec1114bc0d66304ba07cebdaefe5a418aebc6e0856009ae0933142b7402a3763a3c9d0259bc0025aa34a57fed78d53888632a4a6542bfa7a7548b7bcf7b1053fe459e5bbea0dfffe6e637bc3723101b1c04c36875f650e45446bb289d11b271da4ac1cbaacbe9184d1dd59fd07798f9976c7016daafd90b0d4e41caa42ac7610a1f2c5a7345d2677b6d9a95ecb8c61b4fd7062d769c1410e59bb6533b9452b1f566fc5d84c174305b911d77788d6283fd59b9b9837323654bc95b26870665c964e4f0234e908e0b39be892501014be114233523016bb4640c", 0xfa, 0x7}, {&(0x7f00000007c0)="b48da3134d7f6a411577f39a3d531aadf787be4194cccfcb8467c010f0146480539996e16905631b7dc539d14e2dfa36052d21330fff963117530f6b962ce4fadb4837efeb02ac250811101e6fdd9701bbffeb0cb0fc1ca65da7b5c81d4ac28649fccf7574a7d851b8cd8d65f616d39cb49c063724d48aa06deba8448b7ad32c6298f456d6c65e05165c13fb4121e1976e6962392d58d4f1d26a64532f5a86d7261a1ab297c37f18052baa409876e74cc1f4d793f1d22f14421e3ae4d5e6c86cb27451dcfac8d6268bd47ee573d29481", 0xd0, 0x3}, {&(0x7f00000008c0)="d9cbbf1d77f9309cedf05f60f98f70e0624d3670664f52c6a44d501d5e22543a7b76401f5a81248dfb9dc9f6dee15d71e7d78f2630a977ec613c96bce9f6b1c8e84d6de4c9697434183326fd6a415630598afbef8956009f10f804665159d3c475107de519425f94111f7f88b199d5ed0ee6e723798333e5d2de87102425d00ade3fc29cc6c26a075ecba8278cac6ce15bda69de7256ff35b44ab8169916afbf26817ab90f6d6f8d925ec5", 0xab, 0x9}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="65787434002c2d2c252c2e2c73797a6b616c6c657231002c6175e469742c7375626a5f726f6c653d65787434002c726f6f74636f6e746578743d756e636f6e66696e65645f752c66736d616769633d3078303030303030303030303030307323ff241c01a0f001fcba3830302c666f776e65723e", @ANYRESDEC=0xee01, @ANYBLOB]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x20010, r0, 0xa5c5000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2]}, 0x28) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x3, 0x0, 0x1}, 0x4) 14:39:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 68) [ 1427.504239] Call Trace: [ 1427.504904] dump_stack+0x107/0x167 [ 1427.505668] should_fail.cold+0x5/0xa [ 1427.506460] ? ___slab_alloc+0x155/0x700 [ 1427.507309] ? create_object.isra.0+0x3a/0xa20 [ 1427.508273] should_failslab+0x5/0x20 [ 1427.509079] kmem_cache_alloc+0x5b/0x310 [ 1427.509941] create_object.isra.0+0x3a/0xa20 [ 1427.510852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.511911] kmem_cache_alloc+0x159/0x310 [ 1427.512794] xas_alloc+0x336/0x440 [ 1427.513538] xas_create+0x34a/0x10d0 [ 1427.514338] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1427.515434] xas_store+0x8c/0x1c40 [ 1427.516197] __xa_store+0x164/0x2d0 [ 1427.516975] ? xa_delete_node+0x280/0x280 [ 1427.517862] xa_store+0x31/0x50 [ 1427.518552] __io_uring_add_tctx_node+0x1cf/0x520 [ 1427.519559] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1427.520656] ? alloc_fd+0x2e7/0x670 [ 1427.521427] io_uring_setup+0x1fbb/0x2980 [ 1427.522316] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.523368] ? wait_for_completion_io+0x270/0x270 [ 1427.524398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.525505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.526588] do_syscall_64+0x33/0x40 [ 1427.527360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.528420] RIP: 0033:0x7f2db9fa8b19 [ 1427.529203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.533012] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.534596] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1427.536097] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1427.537592] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1427.539087] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1427.540569] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1427.548749] loop0: detected capacity change from 0 to 262144 [ 1427.567521] EXT4-fs (loop0): Unrecognized mount option "–Já§n9×ÓaÑ0ŽŒæjøÃ(Jw£òV´ßgCѵSØÕh{V{‘Ì ¶“L[4ŠÇ#£æ>œ®ÿ=¹Ú8wrÔ¡y¬”%á!ÛЭ L©§ÛNž':`Êõç3úŸ¾g„“3\EÙà²u²ÎÀôTm*/Ÿ(Œ¹WÖh¦ÑrO;Âàdw b«ò¾o_"Ä>ÀΘØ}" or missing value [ 1427.602917] loop0: detected capacity change from 0 to 262144 [ 1427.607905] EXT4-fs (loop0): Unrecognized mount option "–Já§n9×ÓaÑ0ŽŒæjøÃ(Jw£òV´ßgCѵSØÕh{V{‘Ì ¶“L[4ŠÇ#£æ>œ®ÿ=¹Ú8wrÔ¡y¬”%á!ÛЭ L©§ÛNž':`Êõç3úŸ¾g„“3\EÙà²u²ÎÀôTm*/Ÿ(Œ¹WÖh¦ÑrO;Âàdw b«ò¾o_"Ä>ÀΘØ}" or missing value [ 1427.621999] FAULT_INJECTION: forcing a failure. [ 1427.621999] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.624435] CPU: 1 PID: 9259 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1427.625874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.627576] loop0: detected capacity change from 0 to 5632 [ 1427.627609] Call Trace: [ 1427.629415] dump_stack+0x107/0x167 [ 1427.629490] nfs4: Unknown parameter 'ext4' [ 1427.630179] should_fail.cold+0x5/0xa [ 1427.630202] ? create_object.isra.0+0x3a/0xa20 [ 1427.630227] should_failslab+0x5/0x20 [ 1427.633649] kmem_cache_alloc+0x5b/0x310 [ 1427.634506] ? mark_held_locks+0x9e/0xe0 [ 1427.635357] create_object.isra.0+0x3a/0xa20 [ 1427.636282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.637360] kmem_cache_alloc+0x159/0x310 [ 1427.638247] xas_alloc+0x336/0x440 [ 1427.639000] xas_create+0x34a/0x10d0 [ 1427.639808] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1427.640916] xas_store+0x8c/0x1c40 [ 1427.641678] __xa_store+0x164/0x2d0 [ 1427.642445] ? xa_delete_node+0x280/0x280 [ 1427.643323] ? trace_hardirqs_on+0x5b/0x180 [ 1427.644236] xa_store+0x31/0x50 [ 1427.644952] __io_uring_add_tctx_node+0x1cf/0x520 [ 1427.645964] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1427.647065] ? alloc_fd+0x2e7/0x670 [ 1427.647837] io_uring_setup+0x1fbb/0x2980 [ 1427.648723] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.649784] ? wait_for_completion_io+0x270/0x270 [ 1427.650827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.651926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.653021] do_syscall_64+0x33/0x40 [ 1427.653807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.654888] RIP: 0033:0x7f72c981db19 [ 1427.655678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.659566] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.661193] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1427.662703] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1427.664210] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1427.665714] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1427.667214] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) listen(r0, 0xffffffff) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0xffff) syz_io_uring_setup(0x5365, &(0x7f0000000000)={0x0, 0xd64e, 0x1, 0x1, 0x2fd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x1, 0x1}, 0x41) 14:39:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000440)='hostfs\x00', 0x800004, &(0x7f0000000540)='\x00\x9f\x17\xe3\xf72\x1a+\xe5\x93|AU\xa02\x00') syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(r1, &(0x7f00000002c0)='./file0\x00', 0x783002, 0x182) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00'}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x28, 0x8000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c7b963d79a6178a8a48d003425c2f1f55c7ee7003400000000"]) setresuid(0xffffffffffffffff, r2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xac]}, 0x8, 0x80800) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x88) 14:39:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 71) 14:39:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:41 executing program 0: r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1008, &(0x7f0000000740), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)) mknodat(r5, &(0x7f00000000c0)='./file0\x00', 0x4, 0x200) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r8, 0x5608, &(0x7f0000000200)) r9 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r5, r3, r8, r9], 0x7}, 0x8) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r10, 0x80047213, &(0x7f0000000080)) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r5, 0x58ab, 0x0, 0x2, 0x0, 0x0) 14:39:41 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 72) [ 1427.800885] FAULT_INJECTION: forcing a failure. [ 1427.800885] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.803810] CPU: 1 PID: 9275 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1427.805503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.807547] Call Trace: [ 1427.808207] dump_stack+0x107/0x167 [ 1427.809126] should_fail.cold+0x5/0xa [ 1427.810074] ? create_object.isra.0+0x3a/0xa20 [ 1427.811201] should_failslab+0x5/0x20 [ 1427.812136] kmem_cache_alloc+0x5b/0x310 [ 1427.813143] ? mark_held_locks+0x9e/0xe0 [ 1427.814147] create_object.isra.0+0x3a/0xa20 [ 1427.815231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.816487] kmem_cache_alloc+0x159/0x310 [ 1427.817535] xas_alloc+0x336/0x440 [ 1427.818414] xas_create+0x34a/0x10d0 [ 1427.819350] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1427.820651] xas_store+0x8c/0x1c40 [ 1427.821548] __xa_store+0x164/0x2d0 [ 1427.822461] ? xa_delete_node+0x280/0x280 [ 1427.823487] ? trace_hardirqs_on+0x5b/0x180 [ 1427.824547] xa_store+0x31/0x50 [ 1427.825378] __io_uring_add_tctx_node+0x1cf/0x520 [ 1427.826558] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1427.827852] ? alloc_fd+0x2e7/0x670 [ 1427.828790] io_uring_setup+0x1fbb/0x2980 [ 1427.829815] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.831074] ? wait_for_completion_io+0x270/0x270 [ 1427.832294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.833612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.834860] do_syscall_64+0x33/0x40 [ 1427.835772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.837042] RIP: 0033:0x7f9af1df9b19 [ 1427.837958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.842497] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.842522] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1427.842535] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1427.842548] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1427.842561] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1427.842574] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1427.868483] FAULT_INJECTION: forcing a failure. [ 1427.868483] name failslab, interval 1, probability 0, space 0, times 0 14:39:41 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) getuid() openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x208002, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private2, @in=@empty}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) prctl$PR_MCE_KILL(0x21, 0x6f0cad8134c1f64d, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) getpgid(0xffffffffffffffff) io_uring_setup(0x995, &(0x7f0000002280)) [ 1427.868504] CPU: 0 PID: 9283 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1427.868514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.868520] Call Trace: [ 1427.868546] dump_stack+0x107/0x167 [ 1427.868569] should_fail.cold+0x5/0xa [ 1427.868605] ? create_object.isra.0+0x3a/0xa20 [ 1427.868624] should_failslab+0x5/0x20 [ 1427.868643] kmem_cache_alloc+0x5b/0x310 [ 1427.868662] ? mark_held_locks+0x9e/0xe0 [ 1427.868687] create_object.isra.0+0x3a/0xa20 [ 1427.868703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1427.868729] kmem_cache_alloc+0x159/0x310 [ 1427.868757] xas_alloc+0x336/0x440 14:39:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 69) [ 1427.868780] xas_create+0x34a/0x10d0 [ 1427.868813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1427.868843] xas_store+0x8c/0x1c40 [ 1427.868881] __xa_store+0x164/0x2d0 [ 1427.868904] ? xa_delete_node+0x280/0x280 [ 1427.868933] ? trace_hardirqs_on+0x5b/0x180 [ 1427.868962] xa_store+0x31/0x50 [ 1427.868985] __io_uring_add_tctx_node+0x1cf/0x520 [ 1427.869005] ? io_uring_alloc_task_context+0x6a0/0x6a0 14:39:42 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 73) [ 1427.869021] ? alloc_fd+0x2e7/0x670 [ 1427.869056] io_uring_setup+0x1fbb/0x2980 14:39:42 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 72) [ 1427.869086] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1427.869102] ? wait_for_completion_io+0x270/0x270 [ 1427.869150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1427.869170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1427.869194] do_syscall_64+0x33/0x40 [ 1427.869213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1427.869225] RIP: 0033:0x7f2db9fa8b19 [ 1427.869243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.869253] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1427.869273] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1427.869284] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1427.869294] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1427.869305] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1427.869316] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1428.047497] FAULT_INJECTION: forcing a failure. [ 1428.047497] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.047521] CPU: 1 PID: 9291 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1428.047532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.047539] Call Trace: [ 1428.047565] dump_stack+0x107/0x167 [ 1428.047589] should_fail.cold+0x5/0xa [ 1428.047614] ? xas_alloc+0x336/0x440 [ 1428.047633] should_failslab+0x5/0x20 [ 1428.047655] kmem_cache_alloc+0x5b/0x310 [ 1428.047683] xas_alloc+0x336/0x440 [ 1428.047714] xas_create+0x34a/0x10d0 [ 1428.047750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.047774] xas_store+0x8c/0x1c40 [ 1428.047813] __xa_store+0x164/0x2d0 [ 1428.047836] ? xa_delete_node+0x280/0x280 [ 1428.047867] ? trace_hardirqs_on+0x5b/0x180 [ 1428.047896] xa_store+0x31/0x50 [ 1428.047920] __io_uring_add_tctx_node+0x1cf/0x520 [ 1428.047941] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.047960] ? alloc_fd+0x2e7/0x670 [ 1428.047995] io_uring_setup+0x1fbb/0x2980 [ 1428.048026] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1428.048044] ? wait_for_completion_io+0x270/0x270 [ 1428.048094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.048116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.048141] do_syscall_64+0x33/0x40 [ 1428.048162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.048176] RIP: 0033:0x7f72c981db19 [ 1428.048195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.048206] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1428.048228] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1428.048240] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1428.048252] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1428.048265] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1428.048277] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1428.051493] FAULT_INJECTION: forcing a failure. [ 1428.051493] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.086119] FAULT_INJECTION: forcing a failure. [ 1428.086119] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.086139] CPU: 0 PID: 9297 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1428.086149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.086159] Call Trace: [ 1428.113489] dump_stack+0x107/0x167 [ 1428.113515] should_fail.cold+0x5/0xa [ 1428.113534] ? ___slab_alloc+0x155/0x700 [ 1428.113555] ? create_object.isra.0+0x3a/0xa20 [ 1428.113574] should_failslab+0x5/0x20 [ 1428.113591] kmem_cache_alloc+0x5b/0x310 [ 1428.113623] create_object.isra.0+0x3a/0xa20 [ 1428.113638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.113667] kmem_cache_alloc+0x159/0x310 [ 1428.113700] xas_alloc+0x336/0x440 [ 1428.113726] xas_create+0x34a/0x10d0 [ 1428.113766] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.113791] xas_store+0x8c/0x1c40 [ 1428.113839] __xa_store+0x164/0x2d0 [ 1428.113863] ? xa_delete_node+0x280/0x280 [ 1428.113898] ? trace_hardirqs_on+0x5b/0x180 [ 1428.113932] xa_store+0x31/0x50 [ 1428.113956] __io_uring_add_tctx_node+0x1cf/0x520 [ 1428.113977] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.113993] ? alloc_fd+0x2e7/0x670 [ 1428.114034] io_uring_setup+0x1fbb/0x2980 [ 1428.114069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1428.114084] ? wait_for_completion_io+0x270/0x270 [ 1428.114145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.114164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.114192] do_syscall_64+0x33/0x40 [ 1428.114210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.114222] RIP: 0033:0x7f9af1df9b19 [ 1428.114239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.114249] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1428.114270] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1428.114282] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1428.114293] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1428.114304] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1428.114315] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1428.114378] CPU: 1 PID: 9294 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1428.114391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.114398] Call Trace: [ 1428.114421] dump_stack+0x107/0x167 [ 1428.114444] should_fail.cold+0x5/0xa [ 1428.114466] ? create_object.isra.0+0x3a/0xa20 [ 1428.114485] should_failslab+0x5/0x20 [ 1428.114504] kmem_cache_alloc+0x5b/0x310 [ 1428.114524] ? mark_held_locks+0x9e/0xe0 [ 1428.114550] create_object.isra.0+0x3a/0xa20 [ 1428.114567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.114596] kmem_cache_alloc+0x159/0x310 [ 1428.114623] xas_alloc+0x336/0x440 [ 1428.114648] xas_create+0x34a/0x10d0 [ 1428.114684] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.114708] xas_store+0x8c/0x1c40 [ 1428.114748] __xa_store+0x164/0x2d0 [ 1428.114772] ? xa_delete_node+0x280/0x280 [ 1428.114802] ? trace_hardirqs_on+0x5b/0x180 [ 1428.114832] xa_store+0x31/0x50 [ 1428.114855] __io_uring_add_tctx_node+0x1cf/0x520 [ 1428.114876] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.114893] ? alloc_fd+0x2e7/0x670 [ 1428.114931] io_uring_setup+0x1fbb/0x2980 [ 1428.175504] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1428.175522] ? wait_for_completion_io+0x270/0x270 [ 1428.175575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.175601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.179701] do_syscall_64+0x33/0x40 [ 1428.180495] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1428.181598] RIP: 0033:0x7f2db9fa8b19 [ 1428.182390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.186316] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1428.187935] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1428.189453] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1428.190964] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1428.192467] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1428.193979] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1443.387296] FAULT_INJECTION: forcing a failure. [ 1443.387296] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.388010] loop0: detected capacity change from 0 to 4096 [ 1443.389731] CPU: 1 PID: 9318 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1443.391921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.393718] Call Trace: [ 1443.394298] dump_stack+0x107/0x167 [ 1443.395088] should_fail.cold+0x5/0xa [ 1443.395912] ? xas_alloc+0x336/0x440 [ 1443.396724] should_failslab+0x5/0x20 [ 1443.397550] kmem_cache_alloc+0x5b/0x310 [ 1443.398437] xas_alloc+0x336/0x440 [ 1443.399213] xas_create+0x34a/0x10d0 [ 1443.400038] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.401183] xas_store+0x8c/0x1c40 [ 1443.401950] __xa_store+0x164/0x2d0 [ 1443.402740] ? xa_delete_node+0x280/0x280 14:39:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) fsetxattr$security_selinux(r0, &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xff}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x2e057117, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) syz_io_uring_setup(0x7ce0, &(0x7f00000002c0)={0x0, 0x4e6b, 0x20, 0x3, 0x1bb, 0x0, r1}, &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000800)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000880)={&(0x7f0000000840), &(0x7f0000001e00)=""/4096, 0x1000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x81) r6 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0xfc, 0x1, &(0x7f0000000280)=[{&(0x7f0000000900)="97fe7ffcc5e9cf9c543ad6c21c2e5ff221284d8f02f7e90e89c91770e2aec399a52099a1ac4733a0a75aa85cac72043068e7509be3338e3b95bac562a720091d095b5e523e81f5318ad6c39dc8f010a835e6c4d16b6182b174581199f13bf736954201c6f0c65200b083a8d0782ac94191e782f27878617a2b5baba9db5abcf247678c8459e010d64bfb7ab4965c761bdfbf80a0b4294a9fc5de3f0658325d831383c33c4653b4bfd3dbc5bb6bdda9130f6239ac10876ab597526b73a79aa7b4c8cff5abe1789230b01e10291360bb39c644cb22fa849e34821a4a5e82c5f736c12c3adcce3f9d258f237038862bc2f96b186b26cfa59c1f6c4496ccb5304806e24cfac5d623a595a398ff5c558d33e49aa85605c2ed9a3a675a59667b014c769db5872c63ccde8b9f0d6090254980a3e6b502b6a9f4cf6a3eb85b0ac806b91fecad38488f5bfd304ac4d0fd22c0fff6b652d57ea5a8c0fd043aea53166444225aba47733d8b7e51e8ac562943a862e398560ba87c44345fe6095e1c528e7c4e83af2fc5abcba2ecebe3657475563a379c611ffdc62b37558902a04b911320d973056b2095305e97573c9de974253b232bef373bc2dd9bb628f804bbd5a1b66d4139ba2a3206059ec579a6a086d63c5249d85912d2d3be390a62ff48e61a320291b31dfeb5bce9b4ff02d538713d0efd6d3217cd664f999439e60f5b6bfcdf2a6c8cd7bd15d2465b9a75b10d97df382372ef255ec208578421cc586d81b0ea2b3fae2b5a2cb88880344f373607fe7ec144ccdd3d92d14ba8618b38d00156c8a4a408fbac0b21019310d577cf2ee9b6b759910c5789023a9f98e01a708f95cf96f5364e9b6875451437dbfc06827556654ba8494a6b269a071bff1d39d70742070432f7b8efb0e5dcb98e660b8f56bee435d44a13f9390638a6b0460d947f734493fbb45d7fbc5dc12b4da0693ba2bc56bf38d7d78118e1d3ef69d58f246b5cd1662db6280215de4c39d0c97de69ee34855c42c32a2948031fa702381fa42c984bad65db2f3e2a90a35851796a55c3512c11253d227ff5cae933f082d6acfc12180316f5e201a0e6d70fea27b39150fef8da539e7457f87ddae06e959a83e9301f2679a07d6553807a231f66ccd3ceab06f0bd125decaec0b9a7faeb9fbfe353fed7fa9ac7d2ff6dbccd2c4befcc45034bc102fca51a8416ed8a7a12d0077f099035356e37a2e98dd37973c6ffdc37a693f4c3c118802afac6f91417807cfecf31bd2d5ad164ab23a157c8f438358aa29bd06e8a1acbf1b239515982f114976ab926d1cd96ef66950fc76ae69cd94762996697a590640ba62fb15a1b7cd7fc4161106ab1463ff6aca8046921938874ff52871d5326d3675c55698ed1b0b62ed66f78489d7fe45806b145fe599d7347965e5d9d424de2a37330dd5d0a8aac535a9182d33e9028697b4eb30287d53a6f3ec11b86c313bbcd0376574ba771df082502947d06bed4b1e4c5754a66f2fe591ddda4b7a6cda958e4369a27adc86003f7b638d0a86e2c77eec0e70b71ff70afca372054c0ffb17c42fc1dc2d2fbadbefbdc094cd449c9703dbe38ab5390c389a628829b119ebd1b2b9aa9004bd20e7efba186aa668c91082e4fca6c74976859031c0f810677f62f313c54d4c919a4bfd4f32b8b3f4c3ae532bf90ce4c718c800cf3c9ec4a5dca896023117e63eff9d2a6c60e404e2ce4b54f23df81b242c24e510be5b51173bfd0786c99d806a217a8e53271f2ac5e352132f53bca37c71c947223a41988310047d261c5b6d79194a780d60993754e13cec6380ad3f0b4a661cf5e1ef05b402e45a861dc0c04de8af78591ac7e06e471a090a072ef1a0160038d814557a73ff6e7c18bd7ad5a1b1f8694bb337fe6d4f84a0c3c880391f39bc12018eb75f32863e76122b169e22efb82b7dd4e1636d2a0a84342d63576744cacb7c63f97b13c42375b1e1cce35d789f398dca2230886e23d855eba0fcd2fa0a975fc6e9908532b61c1c64aa60c348acc57eb06aa48d97753dbfe5890c4855ea7fba5f6183049c041c2cd39a39e43f0961032393813ed37486ce996d86e4027a066ab89cf68ce47ef7c3837f7023f3191800e293086761ed371c0259e103c3cba44b5a10c0d685fe76a844ececb4c6e875da8f571b067a7a55799ccac43a0d8f740f77daf23d949b9ee87822640d8b0f7d2dfc8d0369b46caedacdb0daf8d438a4a0cbeffa4ea5bddf60a2f54afd0203662f5c9e2c78b87fd99178a214add52b5d4e25875cdc9887b7ad999829e3e56f652a2ec1a161b81df361435394f1c9e2a53d3541139f2afb41eaa9e7db7457c71af4c43365695ee370cc05873b1342097d14d9448f0b1efc6742f8657d83d23985fbecd070724cb1a22a8d1bca58cd454f3883fd7aa0a45ca4ff9b13b9c62444a8404e2da6209ca0dfffb688d4451dda6bea2cd5ac6d10862e305e9e2ba6cbf1341ed45f04c09d6663f46a4bc9e7a9844ad9f9f3fb88c95400fc6a4fea7b4fc01bd6040d048484d9296fb529b4047dc6b7b17954fcf7ae107c86908308c4d838fcd4f47bbcc189e88ddce094469132701f3c884da43e66bcf278784d1afb73638bccc0f5b5dda0b9ec331d4572bbc74a25a071f4223d7d36a5f6ece51c2df84e38bee75cdb3d1984ea385bd8a3734a016447193475a34613a4102203a07da1413bc00416b05bb9340549189b87f2748f9f2f493ea764d7dbfb2d47db29ed0bac55304bd8b2df8fbec02fc23185b640e53a14b34b02f6b1c2c3cd412b3eb911f9c2241ae66aa4ab2891d163f37afe90efc10b3aca416a441151c1cc9ae64ce55767360d5d5d1a90e9db19d15b7126b06350fb0865e43676ba83c79ecb0e12936e02fb449e8093fd0714e68676984066cf7a7b378712a188a105fd0aef0df30ddecadb44fb92d06c35de16f417680a3edea2b470ea08a03f81ac115c50b73aaa4b7102cf91b4062c9dd9f5d15951dec718afe6dd81cc3bdc1661311f09fa38a43c24b5f78cfb9cb8d2b042c1b12029bc6c5db099da9a70d8b86c635ac0e62f82c72f60d41d9d2a10f4ee71c1fcfc74b546e107b0ff6556189894a83e63988af5dbbffcce76b760e4b16c74d05b88fe1869fa7ab8a7b54a66466b59c7eb156a25a51069d554adbb14a5240621d51d079bb736f8652e85949fed123ab93e68d2c5abe4853f9f33a04db4de574908ad2955626b417b9c687b17f72bd47f4edf445f365e3ccb78d831e818e510e36824dc57e2a786f8be3e24efa106b0fa3f3dbc850e0fc9a8dda7ae4167a0bc85de352acd79c9f6b0f168a3579a663cb520be33fc72fd771474aaa607a275175c263861bff5246af5cb197e5b2d9a4344bcd4a09ee2eeb3f4e10551140686175ad30e77fe5bed9e09f484aaac355941c6c975f962b841512c559b245866944df8a151189fa203b7ad795c04e6026d66bfdcf770d74113a1fd65dd050f05cbb1eeb01e5fd51b7c30f1f0b434968aa8595aec88804d5128e2d794e5cecf517fc6326b5f606c8aed299e4bf7f3ceb8b6460ac152be48d7773b0f16893fc8a5362bd64131dd6165db2ec3e6040b7b49e2263372f5b9d5aa93b6192d7bf839d727ee0604051f299a4a1288ce6f8af4ace6263b212235d51906c16c6262ea4d81736aa3743dceac461a4993ea48ebc093286c566b2a1a8135afd6540e0bf88c33b3379826466f964c6e06ddf9ab20618a6913e36b38cbcfc2f06808765e16856f1321badcfd3b6f195d263b06838df21903900667c71c56c83732999cc5f1df8a4b4d582ed4b4d7056db13c35f6daa50578f19db0dcfc6311a5d349628088a2bff83ebf10babf888627f022c9a0b91c7136ebbae9e9c39bfad174bdec8c6d0746cd690a7b1645edab01c1bc7204bd863cb4da86189ae2289ceac2473c7507e8bc2a77420736080529df273b746ca2d85d4d758e6fcb26b82161aaa47b46e8bde7beb281bc700d22cf254b5ecf78e23ea531efda1b6f2ac5390320663589832f18b307fc5928bdec0c116cf0f2f702d760bc2da90c47037a90cb59e9c78a96a09feb717504957f7dec762b72bc8a23f0b8073386776aa6a5f589397eb52a9439469b4c7c07478fae7748e826479b4eb88c200d61f79982497fe20604e2b5c4f493d5886e3b9294951fbfe823013f1d8b45c7016d1762d127d57c8226e6dbfe7d1a1cd417d5119bf1877b9a9e62e1dbb53c033cfb94b058a1773a1bd2281bb5c0a28890bfc860e81f8998da68429639a260879333807478fe2efd2d1757965d241b89ad7bd8303a852b53983ca3405c0a5523e9533a770e4918cbdc8d19797ba7a30e3b25adcea0423452539a59afdc726540199e0a3cbe5e4bb1fde0439d4834be6b645a3a7cdcb4b263a26b5d29583be55ebdc94f187195644720827931c0a70d8c926edae9a96855be8f40edd205df82c51ee36abd6a2a10a39058eeb4c4fb18a70d388b969440f0081108ed3f1e40206dd76e9e3c1ca9b539b44b8932e8d02cf7c4829ec545c863c975f04cce76581dff2cf4985614c945f613f62ffacc503f7d6028b486f91d95db597bd2073d88e62eff3f4fa1e15de2f08410fd79674bc95dbd19f9cf2072ff9d752255b50dcec3328ef886e4b7b056bc31772e3376c4eeaddfc207344c7e6ce039620e323b629c0c275d57d5944b2aff9dfbbc2be21b0294e2f90df900957009eea62dd396edde8fc9240f706a9b13a8104027c6b7233fce4b94b4502a695f0c6e6fe5012484e998f27df51ca4789f74aadee0651115665da1c5ff571d9b748b8394ef1c091df4821a013901a1cacaff630a87d590ed9e3447da5477e039505c025fd1d1f3692d078129a8b65bcd44106e4691716f37f3276a30975c2929bb2129a7438b09498c59a0d0caa23fd694bdb23c7ae26e15438f75308917d301407069d08152eb85577203d7925a2cefa7ce5a0fa66640832433aa0786df4f58a5cb17cbab4c31f36cd7beb4b27b199f5406a158d71aaaa0a44ba0ca8b1b7ad7703edf32b74bbfbb8bef1bf724d95b22fbee061f3e0caf567f7124fd6ef2c71cc7c49effdc98e11f1e3f9077aa669b78cf8cdb16c1e39338756e4e9285f78ff433ee1153d6606917aad301cc092d4e58678d23c60542263f0e9613cbad30a2cfcc38b04d1e3c7067394fb1db3d0ea0366651189c0e6bc3ad2c30a8c8d0da43d61d1e9abdba6448f62eb7d2511713d62beb4d3d46fd1905b2d59161bca5846b0d31e67bcc6feaac5595b1f1b94808f28d71dba4a3d8033217d51fc77bb9730b959523fd9f0f80c2f1da6173dfeef442e3a5d1c95785464d032c65aa8f6e279b1cf7b8d6474fc5a661f1fba14944a38804915a17a0fd941c5eeb305a5d7af8447c68caf6ee264d72c7a0d0403820a0e4c0cd84350e2d849cff38eb18cf7d1df7f1fd546ad9277c9596847fb0749e4f50a90c4bd59c7943e4ab7ddb588946cad99a1545ae30cccfb1566a0467d5773da8e6b0656640874c2457c58a95090056abbb38a0f031f941a5c24c35f36ba0427ccccf6a346d79015872fc1b49bfd43ea4113f55f7466fa458a13df555b8393b76567e2d5ec184718788c4794b87a1417d36385abc2247219eee4ac80e57d949fd0b82dbc55c32810012b33676f11166a36619f47093bfe221279af020017c5b3dd695f92d8574a06d6025213bc756ce2d9240a8309b2979af7a0aae8e5346c9f5df2d65ff68b8bffc9a895b2c38a66dcd4326ba015a2c07dda9b78b012400baced83a1a07", 0x1000, 0x6}], 0x208c401, &(0x7f0000001900)={[{@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x5a0}}], [{@subj_role={'subj_role', 0x3d, '^[/'}}, {@measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@subj_user={'subj_user', 0x3d, '$[}'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure}]}) fchmodat(r6, &(0x7f0000000380)='./file0\x00', 0x26) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x14) unshare(0x48020200) 14:39:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:57 executing program 3: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/156) socket$nl_generic(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) [ 1443.403878] ? trace_hardirqs_on+0x5b/0x180 14:39:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x86d, &(0x7f0000000000)={0x0, 0xa967, 0x8, 0x2, 0x125}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = creat(0x0, 0x0) fcntl$addseals(r3, 0x409, 0x9) write$binfmt_elf64(r3, &(0x7f00000008c0)=ANY=[], 0x629) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7, 0x0, r3, 0x0, &(0x7f0000000200)="4a0dad99633a953428960c8df97f00a86aa180bb478d408d12614f89cb7e1aea3ee46ef8654caa97c2bed1476dc5113b34ccafbc1a3d5dad46d8740b054392479c12c453195b90129cdc57ee6d01a0fc", 0x50, 0x80, 0x0, {0x0, r4}}, 0x281) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r4}}, 0x8) sync() 14:39:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 70) 14:39:57 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 74) 14:39:57 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 73) [ 1443.405175] xa_store+0x31/0x50 [ 1443.405993] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.407029] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.408151] ? alloc_fd+0x2e7/0x670 [ 1443.408966] io_uring_setup+0x1fbb/0x2980 [ 1443.409866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.409900] FAULT_INJECTION: forcing a failure. [ 1443.409900] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.410946] ? wait_for_completion_io+0x270/0x270 [ 1443.410993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.414650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.415762] do_syscall_64+0x33/0x40 [ 1443.416566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.417676] RIP: 0033:0x7f2db9fa8b19 [ 1443.418475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.422415] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.424043] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1443.425580] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.427105] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.428635] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.430174] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1443.431735] CPU: 0 PID: 9316 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1443.432682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.433800] Call Trace: [ 1443.434165] dump_stack+0x107/0x167 [ 1443.434666] should_fail.cold+0x5/0xa [ 1443.435192] ? xas_alloc+0x336/0x440 [ 1443.435700] should_failslab+0x5/0x20 [ 1443.436220] kmem_cache_alloc+0x5b/0x310 [ 1443.436782] xas_alloc+0x336/0x440 [ 1443.437271] xas_create+0x34a/0x10d0 [ 1443.437789] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.438506] xas_store+0x8c/0x1c40 [ 1443.439002] __xa_store+0x164/0x2d0 [ 1443.439500] ? xa_delete_node+0x280/0x280 [ 1443.440077] ? trace_hardirqs_on+0x5b/0x180 [ 1443.440671] xa_store+0x31/0x50 [ 1443.441130] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.441787] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.442501] ? alloc_fd+0x2e7/0x670 [ 1443.443010] io_uring_setup+0x1fbb/0x2980 [ 1443.443584] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.444273] ? wait_for_completion_io+0x270/0x270 [ 1443.444957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.445672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.446375] do_syscall_64+0x33/0x40 [ 1443.446887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.447586] RIP: 0033:0x7f72c981db19 [ 1443.448094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.450613] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.451652] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1443.452612] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.453604] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.454555] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.455528] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1443.479113] FAULT_INJECTION: forcing a failure. [ 1443.479113] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.480854] CPU: 0 PID: 9327 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1443.481912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.483033] Call Trace: [ 1443.483400] dump_stack+0x107/0x167 [ 1443.483904] should_fail.cold+0x5/0xa [ 1443.484426] ? create_object.isra.0+0x3a/0xa20 [ 1443.485063] should_failslab+0x5/0x20 [ 1443.485583] kmem_cache_alloc+0x5b/0x310 [ 1443.486134] ? mark_held_locks+0x9e/0xe0 [ 1443.486692] create_object.isra.0+0x3a/0xa20 [ 1443.487284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1443.487980] kmem_cache_alloc+0x159/0x310 [ 1443.488551] xas_alloc+0x336/0x440 [ 1443.489048] xas_create+0x34a/0x10d0 [ 1443.489565] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.490278] xas_store+0x8c/0x1c40 [ 1443.490777] __xa_store+0x164/0x2d0 [ 1443.491274] ? xa_delete_node+0x280/0x280 [ 1443.491849] ? trace_hardirqs_on+0x5b/0x180 [ 1443.492443] xa_store+0x31/0x50 [ 1443.492904] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.493569] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.494272] ? alloc_fd+0x2e7/0x670 [ 1443.494777] io_uring_setup+0x1fbb/0x2980 [ 1443.495346] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.496033] ? wait_for_completion_io+0x270/0x270 [ 1443.496710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.497419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.498117] do_syscall_64+0x33/0x40 [ 1443.498617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.499304] RIP: 0033:0x7f9af1df9b19 [ 1443.499806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.502282] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.503306] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1443.504265] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.505233] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.506187] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.507145] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 71) 14:39:57 executing program 3: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = signalfd(r0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x4800) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x1ff, 0x408000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd_index=0x3, 0x0, 0xa7e, 0xffff, 0x18, 0x0, {0x2}}, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r5, 0x5608, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x8}) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0x8, {}, 0x7, 0x4, 0x1}, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x2000002, 0x12110, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1443.641830] loop0: detected capacity change from 0 to 4096 14:39:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x20044004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) unshare(0x48020200) 14:39:57 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 75) [ 1443.689753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.721687] Zero length message leads to an empty skb 14:39:57 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 74) 14:39:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x20044004) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) unshare(0x48020200) [ 1443.753880] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.772188] FAULT_INJECTION: forcing a failure. [ 1443.772188] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.774702] CPU: 1 PID: 9341 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1443.776193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.778018] Call Trace: [ 1443.778604] dump_stack+0x107/0x167 [ 1443.779412] should_fail.cold+0x5/0xa [ 1443.780259] ? xas_alloc+0x336/0x440 [ 1443.781097] should_failslab+0x5/0x20 [ 1443.781930] kmem_cache_alloc+0x5b/0x310 [ 1443.782830] xas_alloc+0x336/0x440 [ 1443.783621] xas_create+0x34a/0x10d0 [ 1443.784465] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.785634] xas_store+0x8c/0x1c40 [ 1443.786431] __xa_store+0x164/0x2d0 [ 1443.787230] ? xa_delete_node+0x280/0x280 [ 1443.788147] ? trace_hardirqs_on+0x5b/0x180 [ 1443.789105] xa_store+0x31/0x50 [ 1443.789830] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.790879] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.792016] ? alloc_fd+0x2e7/0x670 [ 1443.792831] io_uring_setup+0x1fbb/0x2980 [ 1443.793739] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.794836] ? wait_for_completion_io+0x270/0x270 [ 1443.795913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.797058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.798175] do_syscall_64+0x33/0x40 [ 1443.798983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.800087] RIP: 0033:0x7f72c981db19 [ 1443.800902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.804883] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.806535] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1443.807952] FAULT_INJECTION: forcing a failure. [ 1443.807952] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.808065] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.808081] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.808097] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.814010] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1443.815526] CPU: 0 PID: 9347 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1443.816364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.817372] Call Trace: [ 1443.817697] dump_stack+0x107/0x167 [ 1443.818139] should_fail.cold+0x5/0xa [ 1443.818605] ? create_object.isra.0+0x3a/0xa20 [ 1443.819159] should_failslab+0x5/0x20 [ 1443.819620] kmem_cache_alloc+0x5b/0x310 [ 1443.820115] ? mark_held_locks+0x9e/0xe0 [ 1443.820608] create_object.isra.0+0x3a/0xa20 [ 1443.821146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1443.821765] kmem_cache_alloc+0x159/0x310 [ 1443.822279] xas_alloc+0x336/0x440 [ 1443.822710] xas_create+0x34a/0x10d0 [ 1443.823168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.823805] xas_store+0x8c/0x1c40 [ 1443.824243] __xa_store+0x164/0x2d0 [ 1443.824682] ? xa_delete_node+0x280/0x280 [ 1443.825193] ? trace_hardirqs_on+0x5b/0x180 [ 1443.825722] xa_store+0x31/0x50 [ 1443.826126] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.826716] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.827354] ? alloc_fd+0x2e7/0x670 [ 1443.827808] io_uring_setup+0x1fbb/0x2980 [ 1443.828326] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.828947] ? wait_for_completion_io+0x270/0x270 [ 1443.829544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.830179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.830802] do_syscall_64+0x33/0x40 [ 1443.831252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.831871] RIP: 0033:0x7f2db9fa8b19 [ 1443.832322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.834549] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.835472] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1443.836337] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.837205] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.838076] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.838956] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:57 executing program 4: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x40010, r5, 0x8000000) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 14:39:57 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x19ea0dd, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r1}}, 0x10001) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x80, 0x1, 0x0, 0x0, 0x0, 0x1060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xd7f}, 0x0, 0x200, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='comm\x00') r3 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x2, 0x3f, 0x9, 0x0, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5f8a8eec, 0x4, @perf_config_ext={0x9, 0x7fff}, 0x10540, 0x1, 0xff, 0x4, 0x1000, 0x800, 0x1, 0x0, 0x3, 0x0, 0xf8}, r3, 0xb, 0xffffffffffffffff, 0xb) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r7, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7]) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000300)="b1b679c82d5ba564e7a36b4c9a0265c8ca94fd5f3931e77817bc42efbabceed2d81c06ecbae720f9499e90de85cd5fb5a0fb2216e89744f2d9a7c60e", 0x3c}, {&(0x7f0000000340)="576c1c99510aefde5738a28798d6a9ce1615ff7dae3faabaecc68411ddbf500304782f31afdae97d47cde2a17071f046819b8f6ee71c19fb3f079b9a6a12940305dbecb74ae6642c3580c2ac3d373b50156bbcc90ce436d65bac6d5485863b3c7ab456d3140aa6bbad703ce413faee151fa3a4faf3d01df40804db06fe2e0d4af17766c3215f0655cb820067eed576439d15f721e138484eb1a738afa52482089ec4b244a6a46d907157476436cc1a5979a45f5b3f581ccb34df3cb869230d552e", 0xc1}], 0x2) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0x5, 0x81, 0x89, 0x0, 0x0, 0x9000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0xa}, 0x5100, 0x7, 0x5, 0x6, 0x1, 0x9, 0x1, 0x0, 0x9, 0x0, 0xff}, r8, 0x2, r0, 0x3) sendfile(r4, r6, 0x0, 0xffff) fallocate(r5, 0x32, 0xce35, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1443.894183] FAULT_INJECTION: forcing a failure. [ 1443.894183] name failslab, interval 1, probability 0, space 0, times 0 14:39:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 72) [ 1443.896594] CPU: 1 PID: 9352 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1443.898255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.900033] Call Trace: [ 1443.900603] dump_stack+0x107/0x167 [ 1443.901399] should_fail.cold+0x5/0xa [ 1443.902223] ? xas_alloc+0x336/0x440 [ 1443.903027] should_failslab+0x5/0x20 [ 1443.903847] kmem_cache_alloc+0x5b/0x310 [ 1443.904723] xas_alloc+0x336/0x440 [ 1443.905493] xas_create+0x34a/0x10d0 [ 1443.906303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1443.907427] xas_store+0x8c/0x1c40 [ 1443.908204] __xa_store+0x164/0x2d0 [ 1443.909001] ? xa_delete_node+0x280/0x280 [ 1443.909890] ? trace_hardirqs_on+0x5b/0x180 [ 1443.910825] xa_store+0x31/0x50 [ 1443.911538] __io_uring_add_tctx_node+0x1cf/0x520 [ 1443.912574] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1443.913695] ? alloc_fd+0x2e7/0x670 [ 1443.914484] io_uring_setup+0x1fbb/0x2980 [ 1443.915377] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1443.916455] ? wait_for_completion_io+0x270/0x270 [ 1443.917515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.918633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.919740] do_syscall_64+0x33/0x40 [ 1443.920545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.921647] RIP: 0033:0x7f9af1df9b19 [ 1443.922444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.926385] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1443.928011] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1443.929548] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1443.931072] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1443.932594] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1443.934124] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:39:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffffffff2c1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0xe03, 0x0, &(0x7f0000000040)="635b29eaacecdd5f827908f9ce3788e22bd32c7abc70493b32f2b0b9347049b86d190ee13ba9991f915de736840605", 0x7, 0x0, 0x0, {0x2}}, 0xe0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) [ 1444.124686] FAULT_INJECTION: forcing a failure. [ 1444.124686] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.126161] CPU: 0 PID: 9360 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1444.127039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.128112] Call Trace: [ 1444.128458] dump_stack+0x107/0x167 [ 1444.128938] should_fail.cold+0x5/0xa [ 1444.129431] ? xas_alloc+0x336/0x440 [ 1444.129913] should_failslab+0x5/0x20 [ 1444.130404] kmem_cache_alloc+0x5b/0x310 [ 1444.130930] xas_alloc+0x336/0x440 [ 1444.131387] xas_create+0x34a/0x10d0 [ 1444.131870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1444.132540] xas_store+0x8c/0x1c40 [ 1444.133010] __xa_store+0x164/0x2d0 [ 1444.133475] ? xa_delete_node+0x280/0x280 [ 1444.134009] ? trace_hardirqs_on+0x5b/0x180 [ 1444.134566] xa_store+0x31/0x50 [ 1444.134989] __io_uring_add_tctx_node+0x1cf/0x520 [ 1444.135603] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1444.136268] ? alloc_fd+0x2e7/0x670 [ 1444.136738] io_uring_setup+0x1fbb/0x2980 [ 1444.137278] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1444.137922] ? wait_for_completion_io+0x270/0x270 [ 1444.138552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.139219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.139879] do_syscall_64+0x33/0x40 [ 1444.140355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.141014] RIP: 0033:0x7f72c981db19 [ 1444.141488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.143837] RSP: 002b:00007f72c6d72108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1444.144814] RAX: ffffffffffffffda RBX: 00007f72c9931020 RCX: 00007f72c981db19 [ 1444.145724] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1444.146633] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1444.147539] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1444.148448] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:15 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 75) 14:40:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 73) 14:40:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1461.207156] FAULT_INJECTION: forcing a failure. [ 1461.207156] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.207949] FAULT_INJECTION: forcing a failure. [ 1461.207949] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.209571] CPU: 1 PID: 9380 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1461.209589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.214556] Call Trace: [ 1461.215130] dump_stack+0x107/0x167 [ 1461.215915] should_fail.cold+0x5/0xa [ 1461.216732] ? create_object.isra.0+0x3a/0xa20 [ 1461.217717] should_failslab+0x5/0x20 [ 1461.218541] kmem_cache_alloc+0x5b/0x310 [ 1461.219412] ? mark_held_locks+0x9e/0xe0 [ 1461.220287] create_object.isra.0+0x3a/0xa20 [ 1461.221231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1461.222328] kmem_cache_alloc+0x159/0x310 [ 1461.223224] xas_alloc+0x336/0x440 [ 1461.223990] xas_create+0x34a/0x10d0 [ 1461.224811] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.225940] xas_store+0x8c/0x1c40 [ 1461.226725] __xa_store+0x164/0x2d0 [ 1461.227512] ? xa_delete_node+0x280/0x280 [ 1461.228411] ? trace_hardirqs_on+0x5b/0x180 [ 1461.229350] xa_store+0x31/0x50 [ 1461.230064] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.231095] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.232220] ? alloc_fd+0x2e7/0x670 [ 1461.233018] io_uring_setup+0x1fbb/0x2980 [ 1461.233926] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.235012] ? wait_for_completion_io+0x270/0x270 [ 1461.236069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.237201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.238313] do_syscall_64+0x33/0x40 [ 1461.239110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.240206] RIP: 0033:0x7f9af1df9b19 [ 1461.241012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.244936] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.246565] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1461.248104] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.249637] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.251165] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.252696] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1461.254275] CPU: 0 PID: 9385 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1461.255356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.256666] Call Trace: [ 1461.257095] dump_stack+0x107/0x167 [ 1461.257671] should_fail.cold+0x5/0xa [ 1461.258268] ? xas_alloc+0x336/0x440 [ 1461.258854] should_failslab+0x5/0x20 [ 1461.259462] kmem_cache_alloc+0x5b/0x310 [ 1461.260115] xas_alloc+0x336/0x440 [ 1461.260684] xas_create+0x34a/0x10d0 [ 1461.261299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.262128] xas_store+0x8c/0x1c40 [ 1461.262704] __xa_store+0x164/0x2d0 [ 1461.263282] ? xa_delete_node+0x280/0x280 [ 1461.263944] ? trace_hardirqs_on+0x5b/0x180 [ 1461.264628] xa_store+0x31/0x50 [ 1461.265155] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.265915] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.266732] ? alloc_fd+0x2e7/0x670 [ 1461.267313] io_uring_setup+0x1fbb/0x2980 [ 1461.267965] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.268749] ? wait_for_completion_io+0x270/0x270 [ 1461.269523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.270338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.271139] do_syscall_64+0x33/0x40 [ 1461.271717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.272511] RIP: 0033:0x7f2db9fa8b19 [ 1461.273095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.275970] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.277174] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1461.278295] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.279413] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.280536] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.281671] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1461.299984] FAULT_INJECTION: forcing a failure. [ 1461.299984] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.301842] CPU: 0 PID: 9384 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1461.302899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.304186] Call Trace: [ 1461.304598] dump_stack+0x107/0x167 [ 1461.305172] should_fail.cold+0x5/0xa [ 1461.305766] ? create_object.isra.0+0x3a/0xa20 [ 1461.306487] should_failslab+0x5/0x20 [ 1461.307083] kmem_cache_alloc+0x5b/0x310 [ 1461.307715] ? mark_held_locks+0x9e/0xe0 [ 1461.308349] create_object.isra.0+0x3a/0xa20 [ 1461.309055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1461.309861] kmem_cache_alloc+0x159/0x310 [ 1461.310510] xas_alloc+0x336/0x440 [ 1461.311067] xas_create+0x34a/0x10d0 [ 1461.311650] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.312466] xas_store+0x8c/0x1c40 [ 1461.313047] __xa_store+0x164/0x2d0 [ 1461.313621] ? xa_delete_node+0x280/0x280 [ 1461.314270] ? trace_hardirqs_on+0x5b/0x180 [ 1461.314943] xa_store+0x31/0x50 [ 1461.315452] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.316196] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.317013] ? alloc_fd+0x2e7/0x670 [ 1461.317587] io_uring_setup+0x1fbb/0x2980 [ 1461.318238] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.319017] ? wait_for_completion_io+0x270/0x270 [ 1461.319775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.320584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.321389] do_syscall_64+0x33/0x40 [ 1461.321966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.322774] RIP: 0033:0x7f72c981db19 [ 1461.323355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.326451] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.327621] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1461.328720] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.329823] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.330912] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.332011] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:15 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 76) 14:40:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:15 executing program 4: keyctl$read(0xb, 0x0, &(0x7f0000000040)=""/27, 0x1b) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000140)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701be49d4c63c8c69629e21664885", 0x33, 0xb800}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000080)='./file0\x00', 0x0) 14:40:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x45, 0x1, 0x0, 0x68, 0x0, 0xfffffffffffffffb, 0x800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x4240, 0x4, 0x0, 0x1, 0xfff, 0xbe, 0x9, 0x0, 0x3, 0x0, 0x3f}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x7, r0, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x200c040, &(0x7f0000000580)=ANY=[@ANYBLOB="466ff55d00b9616812bd1fe7340100000000000000004000a0751b182f1dc95f017e466f2cff000000000000006bd5aa7e27a3de6b2545c3e6893bfdf6563c24074126044ef06e18493a26283d3d4998169d09f60c637032dd6fe5c48d2d63c75be19f7e6ab871ef5dcd3eea627209ae4cab09c5a78e9fddc153fcde92d64cdf0513ff9d966a3f8de1c4e62a916fa60c0000c56334307977f297149ba2257b062e8073db420799962cd476e0f68bfc9ef6eda94a6ec3f5d5abb44a58d7c79bc7af7c5681b6714f118481a93bc2a61b2678c8b6731633caf79a"]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') pread64(r3, 0x0, 0x0, 0x6800) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:var_spool_t:s0\x00', 0x21, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x4, 0x8, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0xd169, [0x4fc, 0x8, 0x1f, 0x100, 0x9, 0x2]}}, @jumbo={0xc2, 0x4, 0x4ed8}]}, 0x48) [ 1461.344252] loop0: detected capacity change from 0 to 16896 14:40:15 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 77) 14:40:15 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c0208000099cc47048c9916b9000000000000000000", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0) 14:40:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x45, 0x1, 0x0, 0x68, 0x0, 0xfffffffffffffffb, 0x800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x4240, 0x4, 0x0, 0x1, 0xfff, 0xbe, 0x9, 0x0, 0x3, 0x0, 0x3f}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x7, r0, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x200c040, &(0x7f0000000580)=ANY=[@ANYBLOB="466ff55d00b9616812bd1fe7340100000000000000004000a0751b182f1dc95f017e466f2cff000000000000006bd5aa7e27a3de6b2545c3e6893bfdf6563c24074126044ef06e18493a26283d3d4998169d09f60c637032dd6fe5c48d2d63c75be19f7e6ab871ef5dcd3eea627209ae4cab09c5a78e9fddc153fcde92d64cdf0513ff9d966a3f8de1c4e62a916fa60c0000c56334307977f297149ba2257b062e8073db420799962cd476e0f68bfc9ef6eda94a6ec3f5d5abb44a58d7c79bc7af7c5681b6714f118481a93bc2a61b2678c8b6731633caf79a"]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') pread64(r3, 0x0, 0x0, 0x6800) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:var_spool_t:s0\x00', 0x21, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x4, 0x8, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0xd169, [0x4fc, 0x8, 0x1f, 0x100, 0x9, 0x2]}}, @jumbo={0xc2, 0x4, 0x4ed8}]}, 0x48) 14:40:15 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x36) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001081a3b03ab3c8202110000000802110000000000da68b429000000000000000064000100000602020202020201"], 0x33) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:40:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 74) [ 1461.433301] FAULT_INJECTION: forcing a failure. [ 1461.433301] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.435744] CPU: 1 PID: 9405 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1461.437218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.439003] Call Trace: [ 1461.439572] dump_stack+0x107/0x167 [ 1461.440362] should_fail.cold+0x5/0xa [ 1461.441189] ? ___slab_alloc+0x155/0x700 [ 1461.442060] ? create_object.isra.0+0x3a/0xa20 [ 1461.443037] should_failslab+0x5/0x20 [ 1461.443871] kmem_cache_alloc+0x5b/0x310 [ 1461.444752] create_object.isra.0+0x3a/0xa20 [ 1461.445696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1461.446804] kmem_cache_alloc+0x159/0x310 [ 1461.447701] xas_alloc+0x336/0x440 [ 1461.448470] xas_create+0x34a/0x10d0 [ 1461.449299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.450437] xas_store+0x8c/0x1c40 [ 1461.451219] __xa_store+0x164/0x2d0 [ 1461.452010] ? xa_delete_node+0x280/0x280 [ 1461.452918] ? trace_hardirqs_on+0x5b/0x180 [ 1461.453861] xa_store+0x31/0x50 [ 1461.454574] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.455629] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.456757] ? alloc_fd+0x2e7/0x670 [ 1461.457572] io_uring_setup+0x1fbb/0x2980 [ 1461.458474] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.459566] ? wait_for_completion_io+0x270/0x270 [ 1461.460633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.461774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.462885] do_syscall_64+0x33/0x40 [ 1461.463682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.464788] RIP: 0033:0x7f2db9fa8b19 [ 1461.465590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.469599] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.471232] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1461.472760] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.474294] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.475819] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.477349] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:15 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 76) [ 1461.529390] loop0: detected capacity change from 0 to 16896 [ 1461.557216] FAULT_INJECTION: forcing a failure. [ 1461.557216] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.557965] FAULT_INJECTION: forcing a failure. [ 1461.557965] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.558861] CPU: 0 PID: 9416 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1461.558880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.563419] Call Trace: [ 1461.563812] dump_stack+0x107/0x167 [ 1461.564352] should_fail.cold+0x5/0xa [ 1461.564907] ? xas_alloc+0x336/0x440 [ 1461.565467] should_failslab+0x5/0x20 [ 1461.566017] kmem_cache_alloc+0x5b/0x310 [ 1461.566613] xas_alloc+0x336/0x440 [ 1461.567137] xas_create+0x34a/0x10d0 [ 1461.567693] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.568458] xas_store+0x8c/0x1c40 [ 1461.568988] __xa_store+0x164/0x2d0 [ 1461.569528] ? xa_delete_node+0x280/0x280 [ 1461.570147] ? trace_hardirqs_on+0x5b/0x180 [ 1461.570774] xa_store+0x31/0x50 [ 1461.571255] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.571948] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.572706] ? alloc_fd+0x2e7/0x670 [ 1461.573251] io_uring_setup+0x1fbb/0x2980 [ 1461.573861] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.574588] ? wait_for_completion_io+0x270/0x270 [ 1461.575312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.576065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.576814] do_syscall_64+0x33/0x40 [ 1461.577363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.578105] RIP: 0033:0x7f9af1df9b19 [ 1461.578648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.581295] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.582390] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1461.583401] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.584418] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.585457] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.586473] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1461.587547] CPU: 1 PID: 9415 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1461.589041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.590800] Call Trace: [ 1461.591374] dump_stack+0x107/0x167 [ 1461.592159] should_fail.cold+0x5/0xa [ 1461.592978] ? xas_alloc+0x336/0x440 [ 1461.593787] should_failslab+0x5/0x20 [ 1461.594605] kmem_cache_alloc+0x5b/0x310 [ 1461.595490] xas_alloc+0x336/0x440 [ 1461.596252] xas_create+0x34a/0x10d0 [ 1461.597078] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1461.598196] xas_store+0x8c/0x1c40 [ 1461.598975] __xa_store+0x164/0x2d0 [ 1461.599751] ? xa_delete_node+0x280/0x280 [ 1461.600640] ? trace_hardirqs_on+0x5b/0x180 [ 1461.601574] xa_store+0x31/0x50 [ 1461.602285] __io_uring_add_tctx_node+0x1cf/0x520 [ 1461.603310] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1461.604420] ? alloc_fd+0x2e7/0x670 [ 1461.605222] io_uring_setup+0x1fbb/0x2980 [ 1461.606115] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1461.607193] ? wait_for_completion_io+0x270/0x270 [ 1461.608251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1461.609379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1461.610498] do_syscall_64+0x33/0x40 [ 1461.611308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1461.612413] RIP: 0033:0x7f72c981db19 [ 1461.613213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.617192] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1461.618808] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1461.620340] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1461.621869] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1461.623387] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1461.624903] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1461.631135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.725817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.051385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:40:31 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r1, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) semget(0x3, 0x4, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget(0x0, 0x0, 0x400) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000100)=""/31) 14:40:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:31 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0xbaf, 0x7, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x20, 0x0, 0x0, 0x5, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) fcntl$setown(r0, 0x8, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000001, 0x101002) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd00d677de3ec3072a0000561897ed77d88d41d3f4b580a60b8fce5478e1ac28656567"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 14:40:31 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 77) 14:40:31 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 78) 14:40:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 75) 14:40:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x800a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x10002d) ptrace(0x10, r1) getpgrp(r1) ptrace$cont(0x1f, r1, 0x6, 0x2) fork() ptrace$cont(0x7, r1, 0x8, 0x8) r2 = gettid() perf_event_open(0x0, r2, 0x1, 0xffffffffffffffff, 0xc) capset(&(0x7f0000000180)={0x20080522, r2}, &(0x7f00000000c0)={0x0, 0x2, 0xfffffaf3, 0x6, 0xffffffff}) ptrace$cont(0x16, r2, 0x5, 0xfffffffffffffff7) 14:40:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1477.365023] FAULT_INJECTION: forcing a failure. [ 1477.365023] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.367501] CPU: 1 PID: 9439 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1477.368935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.370698] Call Trace: [ 1477.371267] dump_stack+0x107/0x167 [ 1477.372035] should_fail.cold+0x5/0xa [ 1477.372847] ? create_object.isra.0+0x3a/0xa20 [ 1477.373813] should_failslab+0x5/0x20 [ 1477.374621] kmem_cache_alloc+0x5b/0x310 [ 1477.375479] ? mark_held_locks+0x9e/0xe0 [ 1477.376338] create_object.isra.0+0x3a/0xa20 [ 1477.377277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.377839] FAULT_INJECTION: forcing a failure. [ 1477.377839] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.378354] kmem_cache_alloc+0x159/0x310 [ 1477.378383] xas_alloc+0x336/0x440 [ 1477.378406] xas_create+0x34a/0x10d0 [ 1477.378444] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.378466] xas_store+0x8c/0x1c40 [ 1477.385548] __xa_store+0x164/0x2d0 [ 1477.386317] ? xa_delete_node+0x280/0x280 [ 1477.387195] ? trace_hardirqs_on+0x5b/0x180 [ 1477.388113] xa_store+0x31/0x50 [ 1477.388813] __io_uring_add_tctx_node+0x1cf/0x520 [ 1477.389832] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1477.390923] ? alloc_fd+0x2e7/0x670 [ 1477.391700] io_uring_setup+0x1fbb/0x2980 [ 1477.392579] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1477.393650] ? wait_for_completion_io+0x270/0x270 [ 1477.394677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.395778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.396879] do_syscall_64+0x33/0x40 [ 1477.397667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.398738] RIP: 0033:0x7f72c981db19 [ 1477.399523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.403377] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.404975] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1477.406482] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1477.407971] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1477.409488] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1477.410981] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1477.412519] CPU: 0 PID: 9446 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1477.414236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.416230] Call Trace: [ 1477.416873] dump_stack+0x107/0x167 [ 1477.417763] should_fail.cold+0x5/0xa [ 1477.418680] ? vm_area_dup+0x78/0x290 [ 1477.419602] should_failslab+0x5/0x20 [ 1477.420521] kmem_cache_alloc+0x5b/0x310 [ 1477.421516] vm_area_dup+0x78/0x290 [ 1477.422396] ? lock_release+0x680/0x680 [ 1477.423343] ? mark_lock+0xf5/0x2df0 [ 1477.424247] ? lock_chain_count+0x20/0x20 [ 1477.425243] ? mark_lock+0xf5/0x2df0 [ 1477.426099] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.427357] ? lock_chain_count+0x20/0x20 [ 1477.428327] ? mark_lock+0xf5/0x2df0 [ 1477.429208] ? vm_area_alloc+0x110/0x110 [ 1477.430192] ? __lock_acquire+0x1657/0x5b00 [ 1477.431248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.432512] ? SOFTIRQ_verbose+0x10/0x10 [ 1477.433499] ? vmacache_find+0x55/0x2a0 [ 1477.434461] __split_vma+0xa8/0x4e0 [ 1477.435331] __do_munmap+0x365/0x1260 [ 1477.436219] ? arch_get_unmapped_area+0x450/0x450 [ 1477.437353] ? lock_release+0x680/0x680 [ 1477.438317] mmap_region+0x7c8/0x1500 [ 1477.439262] do_mmap+0xcdb/0x11e0 [ 1477.440103] vm_mmap_pgoff+0x198/0x1f0 [ 1477.441031] ? randomize_page+0xb0/0xb0 [ 1477.441956] ksys_mmap_pgoff+0x41c/0x560 [ 1477.442930] ? find_mergeable_anon_vma+0x250/0x250 [ 1477.444053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.445239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.446404] do_syscall_64+0x33/0x40 [ 1477.447240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.448387] RIP: 0033:0x7f2db9fa8b62 [ 1477.449228] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1477.453353] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1477.455071] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1477.456664] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1477.458295] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1477.459897] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1477.461529] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1477.476399] FAULT_INJECTION: forcing a failure. [ 1477.476399] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.478917] CPU: 1 PID: 9450 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1477.480355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.482117] Call Trace: [ 1477.482667] dump_stack+0x107/0x167 [ 1477.483436] should_fail.cold+0x5/0xa [ 1477.484232] ? create_object.isra.0+0x3a/0xa20 [ 1477.485201] should_failslab+0x5/0x20 [ 1477.486000] kmem_cache_alloc+0x5b/0x310 [ 1477.486849] ? mark_held_locks+0x9e/0xe0 [ 1477.487706] create_object.isra.0+0x3a/0xa20 [ 1477.488631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.489703] kmem_cache_alloc+0x159/0x310 [ 1477.490583] xas_alloc+0x336/0x440 [ 1477.491339] xas_create+0x34a/0x10d0 [ 1477.492135] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.493246] xas_store+0x8c/0x1c40 [ 1477.494017] __xa_store+0x164/0x2d0 [ 1477.494785] ? xa_delete_node+0x280/0x280 [ 1477.495669] ? trace_hardirqs_on+0x5b/0x180 [ 1477.496587] xa_store+0x31/0x50 [ 1477.497297] __io_uring_add_tctx_node+0x1cf/0x520 [ 1477.498307] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1477.499407] ? alloc_fd+0x2e7/0x670 [ 1477.500188] io_uring_setup+0x1fbb/0x2980 [ 1477.501067] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1477.502136] ? wait_for_completion_io+0x270/0x270 [ 1477.503191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.504295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.505383] do_syscall_64+0x33/0x40 [ 1477.506170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.507264] RIP: 0033:0x7f9af1df9b19 [ 1477.508045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.511909] RSP: 002b:00007f9aef34e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.513531] RAX: ffffffffffffffda RBX: 00007f9af1f0d020 RCX: 00007f9af1df9b19 [ 1477.515030] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1477.516538] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1477.518042] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1477.519550] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 76) 14:40:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1477.799409] FAULT_INJECTION: forcing a failure. [ 1477.799409] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.801903] CPU: 1 PID: 9468 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1477.803342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.805078] Call Trace: [ 1477.805642] dump_stack+0x107/0x167 [ 1477.806426] should_fail.cold+0x5/0xa [ 1477.807235] ? xas_alloc+0x336/0x440 [ 1477.808015] should_failslab+0x5/0x20 [ 1477.808833] kmem_cache_alloc+0x5b/0x310 [ 1477.809704] xas_alloc+0x336/0x440 [ 1477.810450] xas_create+0x34a/0x10d0 [ 1477.811239] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.812342] xas_store+0x8c/0x1c40 [ 1477.813098] __xa_store+0x164/0x2d0 [ 1477.813862] ? xa_delete_node+0x280/0x280 [ 1477.814738] ? trace_hardirqs_on+0x5b/0x180 [ 1477.815647] xa_store+0x31/0x50 [ 1477.816340] __io_uring_add_tctx_node+0x1cf/0x520 [ 1477.817369] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1477.818465] ? alloc_fd+0x2e7/0x670 [ 1477.819240] io_uring_setup+0x1fbb/0x2980 [ 1477.820115] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1477.821190] ? wait_for_completion_io+0x270/0x270 [ 1477.822242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.823348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.824432] do_syscall_64+0x33/0x40 [ 1477.825223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.826294] RIP: 0033:0x7f72c981db19 [ 1477.827073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.830934] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.832516] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1477.834010] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1477.835511] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1477.837004] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1477.838520] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:31 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 78) 14:40:31 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 79) 14:40:32 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r1, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) semget(0x3, 0x4, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget(0x0, 0x0, 0x400) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000100)=""/31) 14:40:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1477.955538] FAULT_INJECTION: forcing a failure. [ 1477.955538] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.957961] CPU: 1 PID: 9475 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1477.959395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.961135] Call Trace: [ 1477.961725] dump_stack+0x107/0x167 [ 1477.962496] should_fail.cold+0x5/0xa [ 1477.963306] ? create_object.isra.0+0x3a/0xa20 [ 1477.964264] should_failslab+0x5/0x20 [ 1477.965059] kmem_cache_alloc+0x5b/0x310 [ 1477.965918] ? mark_held_locks+0x9e/0xe0 [ 1477.966769] create_object.isra.0+0x3a/0xa20 [ 1477.967685] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1477.968767] kmem_cache_alloc+0x159/0x310 [ 1477.969667] xas_alloc+0x336/0x440 [ 1477.970430] xas_create+0x34a/0x10d0 [ 1477.971237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1477.972348] xas_store+0x8c/0x1c40 [ 1477.973119] __xa_store+0x164/0x2d0 [ 1477.973903] ? xa_delete_node+0x280/0x280 [ 1477.974786] ? trace_hardirqs_on+0x5b/0x180 [ 1477.975703] xa_store+0x31/0x50 [ 1477.976402] __io_uring_add_tctx_node+0x1cf/0x520 [ 1477.977426] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1477.978528] ? alloc_fd+0x2e7/0x670 [ 1477.979310] io_uring_setup+0x1fbb/0x2980 [ 1477.980194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1477.981278] ? wait_for_completion_io+0x270/0x270 [ 1477.982324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.983443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1477.984540] do_syscall_64+0x33/0x40 [ 1477.985332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1477.986413] RIP: 0033:0x7f9af1df9b19 [ 1477.986775] FAULT_INJECTION: forcing a failure. [ 1477.986775] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.987201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.987213] RSP: 002b:00007f9aef36f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1477.987245] RAX: ffffffffffffffda RBX: 00007f9af1f0cf60 RCX: 00007f9af1df9b19 [ 1477.996767] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1477.998286] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1477.999787] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1478.001293] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1478.002836] CPU: 0 PID: 9478 Comm: syz-executor.2 Not tainted 5.10.240 #1 14:40:32 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xe8, 0x8, 0x1, 0x0, 0xffffffff, 0x88066, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x20, 0x4, @perf_config_ext={0x3, 0x8}, 0x164, 0x3, 0x3, 0x8, 0xe5, 0x9, 0x7fff, 0x0, 0xffff, 0x0, 0x6}, 0x0, 0x8, r0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="af", 0x1, 0xffffff) ftruncate(r1, 0x0) [ 1478.004439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.006542] Call Trace: [ 1478.007259] dump_stack+0x107/0x167 [ 1478.008082] should_fail.cold+0x5/0xa [ 1478.008947] ? xas_alloc+0x336/0x440 [ 1478.009852] should_failslab+0x5/0x20 [ 1478.010732] kmem_cache_alloc+0x5b/0x310 [ 1478.011667] xas_alloc+0x336/0x440 [ 1478.012495] xas_create+0x34a/0x10d0 [ 1478.013359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.014574] xas_store+0x8c/0x1c40 [ 1478.015408] __xa_store+0x164/0x2d0 [ 1478.016256] ? xa_delete_node+0x280/0x280 [ 1478.017231] ? trace_hardirqs_on+0x5b/0x180 [ 1478.018248] xa_store+0x31/0x50 [ 1478.019022] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.020123] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.021343] ? alloc_fd+0x2e7/0x670 [ 1478.022192] io_uring_setup+0x1fbb/0x2980 [ 1478.023149] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.024323] ? wait_for_completion_io+0x270/0x270 [ 1478.025446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.026633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.027841] do_syscall_64+0x33/0x40 [ 1478.028691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.029870] RIP: 0033:0x7f2db9fa8b19 [ 1478.030723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.034994] RSP: 002b:00007f2db751e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.036740] RAX: ffffffffffffffda RBX: 00007f2dba0bbf60 RCX: 00007f2db9fa8b19 [ 1478.038388] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1478.040006] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1478.041650] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1478.043288] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 77) 14:40:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000fbffffff0000ffff000003"], 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x60, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x3963591762fe6e03) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000006c0)={0x0, 0x0, 0x5}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x20}, 0x7fff}) perf_event_open(0x0, r1, 0x9, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d6361000000006d6d61702c6673636f6e746578743d736a137815724b3a3e722f2ebed5bfba720ec42e555412a8dfda0fbca32a797361646d5f75"]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) lseek(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x48}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) [ 1478.243943] FAULT_INJECTION: forcing a failure. [ 1478.243943] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.246848] CPU: 0 PID: 9490 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1478.248527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.250562] Call Trace: [ 1478.251213] dump_stack+0x107/0x167 [ 1478.252116] should_fail.cold+0x5/0xa [ 1478.253056] ? create_object.isra.0+0x3a/0xa20 [ 1478.254189] should_failslab+0x5/0x20 [ 1478.255113] kmem_cache_alloc+0x5b/0x310 [ 1478.256116] ? mark_held_locks+0x9e/0xe0 [ 1478.257125] create_object.isra.0+0x3a/0xa20 [ 1478.258210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1478.259465] kmem_cache_alloc+0x159/0x310 [ 1478.260490] xas_alloc+0x336/0x440 [ 1478.261244] xas_create+0x34a/0x10d0 [ 1478.262153] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.263431] xas_store+0x8c/0x1c40 [ 1478.264306] __xa_store+0x164/0x2d0 [ 1478.265183] ? xa_delete_node+0x280/0x280 [ 1478.266216] ? trace_hardirqs_on+0x5b/0x180 [ 1478.267281] xa_store+0x31/0x50 [ 1478.268101] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.269297] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.270574] ? alloc_fd+0x2e7/0x670 [ 1478.271350] io_uring_setup+0x1fbb/0x2980 [ 1478.272359] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.273601] ? wait_for_completion_io+0x270/0x270 [ 1478.274807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.276079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.277348] do_syscall_64+0x33/0x40 [ 1478.278252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.279509] RIP: 0033:0x7f72c981db19 [ 1478.280399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.284821] RSP: 002b:00007f72c6d93108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.286656] RAX: ffffffffffffffda RBX: 00007f72c9930f60 RCX: 00007f72c981db19 [ 1478.288357] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 0000000000003c45 [ 1478.290070] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 1478.291766] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000020000100 [ 1478.293483] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:48 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 79) 14:40:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 78) 14:40:48 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x4}, 0x1) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r7, 0x8000000) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) syz_io_uring_setup(0x45eb, &(0x7f0000000400)={0x0, 0x8d1b, 0x1e2de3cab03cf804, 0x2, 0x146}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000580)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x80180, 0x0) signalfd(r8, &(0x7f00000003c0)={[0x1000]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x4010, r5, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 14:40:48 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r1, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) semget(0x3, 0x4, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget(0x0, 0x0, 0x400) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000100)=""/31) 14:40:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000fbffffff0000ffff000003"], 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x60, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x3963591762fe6e03) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000006c0)={0x0, 0x0, 0x5}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x20}, 0x7fff}) perf_event_open(0x0, r1, 0x9, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d6361000000006d6d61702c6673636f6e746578743d736a137815724b3a3e722f2ebed5bfba720ec42e555412a8dfda0fbca32a797361646d5f75"]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) lseek(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x48}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 14:40:48 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 80) [ 1494.439220] FAULT_INJECTION: forcing a failure. [ 1494.439220] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.441647] CPU: 1 PID: 9518 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1494.443081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.444817] Call Trace: [ 1494.445486] dump_stack+0x107/0x167 [ 1494.446405] should_fail.cold+0x5/0xa [ 1494.447371] ? vm_area_dup+0x78/0x290 [ 1494.448345] should_failslab+0x5/0x20 [ 1494.449311] kmem_cache_alloc+0x5b/0x310 [ 1494.450363] vm_area_dup+0x78/0x290 [ 1494.451289] ? lock_release+0x680/0x680 [ 1494.452305] ? mark_lock+0xf5/0x2df0 [ 1494.453257] ? lock_chain_count+0x20/0x20 [ 1494.454301] ? mark_lock+0xf5/0x2df0 [ 1494.455237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.456559] ? lock_chain_count+0x20/0x20 [ 1494.457617] ? mark_lock+0xf5/0x2df0 [ 1494.458558] ? vm_area_alloc+0x110/0x110 [ 1494.459579] ? __lock_acquire+0x1657/0x5b00 [ 1494.460710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.462048] ? SOFTIRQ_verbose+0x10/0x10 [ 1494.463069] ? vmacache_find+0x55/0x2a0 [ 1494.464083] __split_vma+0xa8/0x4e0 [ 1494.465009] __do_munmap+0x365/0x1260 [ 1494.465977] ? arch_get_unmapped_area+0x450/0x450 [ 1494.467206] ? lock_release+0x680/0x680 [ 1494.468220] mmap_region+0x7c8/0x1500 [ 1494.469215] do_mmap+0xcdb/0x11e0 [ 1494.470113] vm_mmap_pgoff+0x198/0x1f0 [ 1494.471125] ? randomize_page+0xb0/0xb0 [ 1494.472153] ksys_mmap_pgoff+0x41c/0x560 [ 1494.473191] ? find_mergeable_anon_vma+0x250/0x250 [ 1494.474442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.475769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.477072] do_syscall_64+0x33/0x40 [ 1494.478046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.479339] RIP: 0033:0x7f72c981db62 [ 1494.480266] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1494.484889] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1494.486798] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1494.488563] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1494.490339] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1494.492110] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1494.493883] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1494.500844] FAULT_INJECTION: forcing a failure. [ 1494.500844] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.503793] CPU: 1 PID: 9521 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1494.505498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.507546] Call Trace: [ 1494.508207] dump_stack+0x107/0x167 [ 1494.508379] FAULT_INJECTION: forcing a failure. [ 1494.508379] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.509116] should_fail.cold+0x5/0xa [ 1494.509142] ? create_object.isra.0+0x3a/0xa20 [ 1494.509166] should_failslab+0x5/0x20 [ 1494.514581] kmem_cache_alloc+0x5b/0x310 [ 1494.515609] create_object.isra.0+0x3a/0xa20 [ 1494.516694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1494.517977] kmem_cache_alloc+0x159/0x310 [ 1494.519024] vm_area_dup+0x78/0x290 [ 1494.519933] ? lock_release+0x680/0x680 [ 1494.520916] ? mark_lock+0xf5/0x2df0 [ 1494.521849] ? lock_chain_count+0x20/0x20 [ 1494.522863] ? mark_lock+0xf5/0x2df0 [ 1494.523788] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.525092] ? lock_chain_count+0x20/0x20 [ 1494.526131] ? mark_lock+0xf5/0x2df0 [ 1494.527060] ? vm_area_alloc+0x110/0x110 [ 1494.528068] ? __lock_acquire+0x1657/0x5b00 [ 1494.529187] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.530494] ? SOFTIRQ_verbose+0x10/0x10 [ 1494.531506] ? vmacache_find+0x55/0x2a0 [ 1494.532479] __split_vma+0xa8/0x4e0 [ 1494.533377] __do_munmap+0x365/0x1260 [ 1494.534331] ? arch_get_unmapped_area+0x450/0x450 [ 1494.535522] ? lock_release+0x680/0x680 [ 1494.536507] mmap_region+0x7c8/0x1500 [ 1494.537475] do_mmap+0xcdb/0x11e0 [ 1494.538349] vm_mmap_pgoff+0x198/0x1f0 [ 1494.539363] ? randomize_page+0xb0/0xb0 [ 1494.540460] ksys_mmap_pgoff+0x41c/0x560 [ 1494.541552] ? find_mergeable_anon_vma+0x250/0x250 [ 1494.542859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.544220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.545607] do_syscall_64+0x33/0x40 [ 1494.546582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.547949] RIP: 0033:0x7f9af1df9b62 [ 1494.548902] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1494.553702] RSP: 002b:00007f9aef36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1494.555631] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f9af1df9b62 [ 1494.557471] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1494.559288] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1494.561097] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1494.562964] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1494.564846] CPU: 0 PID: 9532 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1494.566647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.568780] Call Trace: [ 1494.569476] dump_stack+0x107/0x167 [ 1494.570420] should_fail.cold+0x5/0xa [ 1494.571398] ? anon_vma_clone+0xdc/0x590 [ 1494.572439] should_failslab+0x5/0x20 [ 1494.573427] kmem_cache_alloc+0x5b/0x310 [ 1494.574332] anon_vma_clone+0xdc/0x590 [ 1494.575331] __split_vma+0x17c/0x4e0 [ 1494.576150] __do_munmap+0x365/0x1260 [ 1494.576981] ? arch_get_unmapped_area+0x450/0x450 [ 1494.578118] ? lock_release+0x680/0x680 [ 1494.579047] mmap_region+0x7c8/0x1500 [ 1494.579958] do_mmap+0xcdb/0x11e0 [ 1494.580721] vm_mmap_pgoff+0x198/0x1f0 [ 1494.581671] ? randomize_page+0xb0/0xb0 [ 1494.582639] ksys_mmap_pgoff+0x41c/0x560 [ 1494.583514] ? find_mergeable_anon_vma+0x250/0x250 [ 1494.584591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.585819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.586968] do_syscall_64+0x33/0x40 [ 1494.587863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.588990] RIP: 0033:0x7f2db9fa8b62 [ 1494.589827] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1494.593761] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1494.595395] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1494.597047] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1494.598689] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1494.600208] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1494.601776] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:40:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1494.881624] FAULT_INJECTION: forcing a failure. [ 1494.881624] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.883807] CPU: 0 PID: 9547 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1494.885060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.886586] Call Trace: [ 1494.887073] dump_stack+0x107/0x167 [ 1494.887740] should_fail.cold+0x5/0xa [ 1494.888452] ? create_object.isra.0+0x3a/0xa20 [ 1494.889274] should_failslab+0x5/0x20 [ 1494.889630] FAULT_INJECTION: forcing a failure. [ 1494.889630] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.889978] kmem_cache_alloc+0x5b/0x310 [ 1494.890001] create_object.isra.0+0x3a/0xa20 [ 1494.890013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1494.890038] kmem_cache_alloc+0x159/0x310 [ 1494.896031] vm_area_dup+0x78/0x290 [ 1494.896688] ? mark_lock+0xf5/0x2df0 [ 1494.897367] ? lock_chain_count+0x20/0x20 [ 1494.898114] ? mark_lock+0xf5/0x2df0 [ 1494.898788] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.899727] ? lock_chain_count+0x20/0x20 [ 1494.900465] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1494.901262] ? trace_hardirqs_on+0x5b/0x180 [ 1494.902040] ? mark_lock+0xf5/0x2df0 [ 1494.902699] ? vm_area_alloc+0x110/0x110 [ 1494.903502] ? __lock_acquire+0x1657/0x5b00 [ 1494.904339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.905420] ? SOFTIRQ_verbose+0x10/0x10 [ 1494.906235] ? vmacache_find+0x55/0x2a0 [ 1494.907044] __split_vma+0xa8/0x4e0 [ 1494.907770] __do_munmap+0x365/0x1260 [ 1494.908518] ? arch_get_unmapped_area+0x450/0x450 [ 1494.909479] ? lock_release+0x680/0x680 [ 1494.910228] mmap_region+0x7c8/0x1500 [ 1494.911012] do_mmap+0xcdb/0x11e0 [ 1494.911663] vm_mmap_pgoff+0x198/0x1f0 [ 1494.912444] ? randomize_page+0xb0/0xb0 [ 1494.913189] ksys_mmap_pgoff+0x41c/0x560 [ 1494.913979] ? find_mergeable_anon_vma+0x250/0x250 [ 1494.914871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.915790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.916718] do_syscall_64+0x33/0x40 [ 1494.917472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.918398] RIP: 0033:0x7f2db9fa8b62 [ 1494.919121] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1494.922677] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1494.924149] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1494.925464] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1494.926820] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1494.928052] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1494.929284] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1494.930570] CPU: 1 PID: 9546 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1494.932276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.934359] Call Trace: [ 1494.935019] dump_stack+0x107/0x167 [ 1494.935947] should_fail.cold+0x5/0xa [ 1494.936907] ? create_object.isra.0+0x3a/0xa20 [ 1494.938057] should_failslab+0x5/0x20 [ 1494.939074] kmem_cache_alloc+0x5b/0x310 [ 1494.940168] create_object.isra.0+0x3a/0xa20 [ 1494.941344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1494.942711] kmem_cache_alloc+0x159/0x310 [ 1494.943833] vm_area_dup+0x78/0x290 [ 1494.944809] ? lock_release+0x680/0x680 [ 1494.945884] ? mark_lock+0xf5/0x2df0 [ 1494.946877] ? lock_chain_count+0x20/0x20 [ 1494.947979] ? mark_lock+0xf5/0x2df0 [ 1494.948975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.950380] ? lock_chain_count+0x20/0x20 [ 1494.951483] ? mark_lock+0xf5/0x2df0 [ 1494.952473] ? vm_area_alloc+0x110/0x110 [ 1494.953565] ? __lock_acquire+0x1657/0x5b00 [ 1494.954730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1494.956117] ? SOFTIRQ_verbose+0x10/0x10 [ 1494.957188] ? vmacache_find+0x55/0x2a0 [ 1494.958258] __split_vma+0xa8/0x4e0 [ 1494.959224] __do_munmap+0x365/0x1260 [ 1494.960237] ? arch_get_unmapped_area+0x450/0x450 [ 1494.961514] ? lock_release+0x680/0x680 [ 1494.962556] mmap_region+0x7c8/0x1500 [ 1494.963573] do_mmap+0xcdb/0x11e0 [ 1494.964499] vm_mmap_pgoff+0x198/0x1f0 [ 1494.965534] ? randomize_page+0xb0/0xb0 [ 1494.966598] ksys_mmap_pgoff+0x41c/0x560 [ 1494.967661] ? find_mergeable_anon_vma+0x250/0x250 [ 1494.968949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.970333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.971693] do_syscall_64+0x33/0x40 [ 1494.972670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.974024] RIP: 0033:0x7f72c981db62 [ 1494.974987] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1494.979756] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1494.981741] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1494.983590] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1494.985445] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1494.987294] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 14:40:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 79) 14:40:48 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 81) [ 1494.989127] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 80) 14:41:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000300)=""/62, 0x3e}, {0x0}, {&(0x7f0000001740)=""/251, 0xfb}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000001c0)=""/36, 0x24}], 0x8) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(0xffffffffffffffff, 0x27b, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x0, 0x101]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000440)="a083e523f26f2b16522c276461ab739171658dc8fe56eb591260cd49a84b55c39b64eefaa4f8368c8633ffd493702ef931467bbf906ed85c7d09d4bfbbf138c6e5deadbabea5d16a644462ab66abec85f986474e694af79b1abdadc046f819f44d5112c3bdbd087455a968b1533789f963318a0396d21071f1f7421b7de7", 0x7e, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x3, 0x1, 0x0, 0x81, 0x0, 0x1ff, 0x91800, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x1, 0x9}, 0x8, 0xffffffffffffff97, 0x0, 0x3, 0x9, 0x854, 0x6bc, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, r2, 0x2) getpeername$unix(r1, &(0x7f0000000380), &(0x7f0000000400)=0x6e) signalfd4(r1, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x40086607, 0xfffffffffffffffd) fadvise64(r3, 0x1, 0x1, 0x4) 14:41:01 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r1, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) semget(0x3, 0x4, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = semget(0x0, 0x0, 0x400) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000100)=""/31) 14:41:01 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 82) 14:41:01 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) flock(r1, 0x0) flock(r1, 0x2) flock(r0, 0x6) flock(r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0xb0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0xfff, 0x6, 0xee, 0x400, 0x7}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x200200, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r5, @ANYBLOB="000c25bd7000ffdbdf5cb1f994c985fbc319", @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000440)={{}, "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"}) 14:41:01 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 80) 14:41:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1507.457553] FAULT_INJECTION: forcing a failure. [ 1507.457553] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.459290] CPU: 1 PID: 9569 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1507.460156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.461193] Call Trace: [ 1507.461528] dump_stack+0x107/0x167 [ 1507.461996] should_fail.cold+0x5/0xa [ 1507.462476] ? vm_area_alloc+0x1c/0x110 [ 1507.462976] should_failslab+0x5/0x20 [ 1507.463456] kmem_cache_alloc+0x5b/0x310 [ 1507.463970] vm_area_alloc+0x1c/0x110 [ 1507.464446] mmap_region+0x97e/0x1500 [ 1507.464947] do_mmap+0xcdb/0x11e0 [ 1507.465414] vm_mmap_pgoff+0x198/0x1f0 [ 1507.465948] ? randomize_page+0xb0/0xb0 [ 1507.466478] ksys_mmap_pgoff+0x41c/0x560 [ 1507.467009] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.467652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.468336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.469025] do_syscall_64+0x33/0x40 [ 1507.469523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.470202] RIP: 0033:0x7f2db9fa8b62 [ 1507.470698] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.473080] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.474066] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1507.475009] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.475929] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1507.476853] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.477781] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1507.486703] FAULT_INJECTION: forcing a failure. [ 1507.486703] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.488237] CPU: 1 PID: 9567 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1507.489111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.490208] Call Trace: [ 1507.490603] dump_stack+0x107/0x167 [ 1507.491115] should_fail.cold+0x5/0xa [ 1507.491741] ? anon_vma_clone+0xdc/0x590 [ 1507.492395] should_failslab+0x5/0x20 [ 1507.493016] kmem_cache_alloc+0x5b/0x310 [ 1507.493691] anon_vma_clone+0xdc/0x590 [ 1507.494324] __split_vma+0x17c/0x4e0 [ 1507.494932] __do_munmap+0x365/0x1260 [ 1507.495542] ? arch_get_unmapped_area+0x450/0x450 [ 1507.496324] ? lock_release+0x680/0x680 [ 1507.496962] mmap_region+0x7c8/0x1500 [ 1507.497597] do_mmap+0xcdb/0x11e0 [ 1507.498171] vm_mmap_pgoff+0x198/0x1f0 [ 1507.498803] ? randomize_page+0xb0/0xb0 [ 1507.499447] ksys_mmap_pgoff+0x41c/0x560 [ 1507.500108] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.500905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.501756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.502590] do_syscall_64+0x33/0x40 [ 1507.503193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.504025] RIP: 0033:0x7f72c981db62 [ 1507.504632] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.507620] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.508860] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1507.510030] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.511188] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1507.512340] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.513490] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1507.545435] FAULT_INJECTION: forcing a failure. [ 1507.545435] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.546903] CPU: 1 PID: 9576 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1507.547774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.548815] Call Trace: [ 1507.549157] dump_stack+0x107/0x167 [ 1507.549631] should_fail.cold+0x5/0xa [ 1507.550114] ? anon_vma_clone+0xdc/0x590 [ 1507.550631] should_failslab+0x5/0x20 [ 1507.551110] kmem_cache_alloc+0x5b/0x310 [ 1507.551623] anon_vma_clone+0xdc/0x590 [ 1507.552120] __split_vma+0x17c/0x4e0 [ 1507.552597] __do_munmap+0x365/0x1260 [ 1507.553080] ? arch_get_unmapped_area+0x450/0x450 [ 1507.553693] ? lock_release+0x680/0x680 [ 1507.554194] mmap_region+0x7c8/0x1500 [ 1507.554683] do_mmap+0xcdb/0x11e0 [ 1507.555132] vm_mmap_pgoff+0x198/0x1f0 [ 1507.555633] ? randomize_page+0xb0/0xb0 [ 1507.556137] ksys_mmap_pgoff+0x41c/0x560 [ 1507.556653] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.557270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.557932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.558577] do_syscall_64+0x33/0x40 [ 1507.559042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.559679] RIP: 0033:0x7f9af1df9b62 [ 1507.560147] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.562441] RSP: 002b:00007f9aef34e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.563388] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f9af1df9b62 [ 1507.564280] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.565173] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1507.566077] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.566964] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 83) 14:41:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 81) [ 1507.633639] FAULT_INJECTION: forcing a failure. [ 1507.633639] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.635044] CPU: 1 PID: 9586 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1507.635859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.636850] Call Trace: [ 1507.637177] dump_stack+0x107/0x167 [ 1507.637630] should_fail.cold+0x5/0xa [ 1507.638093] ? create_object.isra.0+0x3a/0xa20 [ 1507.638643] should_failslab+0x5/0x20 [ 1507.639108] kmem_cache_alloc+0x5b/0x310 [ 1507.639602] create_object.isra.0+0x3a/0xa20 [ 1507.640129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1507.640749] kmem_cache_alloc+0x159/0x310 [ 1507.641253] vm_area_alloc+0x1c/0x110 [ 1507.641719] mmap_region+0x97e/0x1500 [ 1507.642192] do_mmap+0xcdb/0x11e0 [ 1507.642624] vm_mmap_pgoff+0x198/0x1f0 [ 1507.643101] ? randomize_page+0xb0/0xb0 [ 1507.643587] ksys_mmap_pgoff+0x41c/0x560 [ 1507.644075] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.644670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.645302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.645935] do_syscall_64+0x33/0x40 [ 1507.646381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.646989] RIP: 0033:0x7f2db9fa8b62 [ 1507.647431] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.649612] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.650519] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1507.651366] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.652209] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1507.653056] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.653915] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000080)) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000540)=0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000440)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)=0x0) timer_gettime(r4, &(0x7f0000000400)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400009349cce3ffffffffffffff0000000000000040000000000000"], 0x14}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:41:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d00)={0x28, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e00009c"]}, @nested={0x4, 0xf}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x28, 0x800, 0x70bd26, 0x25dfdbff, {0x11}, [@typed={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x8881) 14:41:01 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 81) [ 1507.694503] FAULT_INJECTION: forcing a failure. [ 1507.694503] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.695921] CPU: 1 PID: 9589 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1507.696712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.697680] Call Trace: [ 1507.697994] dump_stack+0x107/0x167 [ 1507.698422] should_fail.cold+0x5/0xa [ 1507.698865] ? create_object.isra.0+0x3a/0xa20 [ 1507.699396] should_failslab+0x5/0x20 [ 1507.699844] kmem_cache_alloc+0x5b/0x310 [ 1507.700318] create_object.isra.0+0x3a/0xa20 [ 1507.700827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1507.701418] kmem_cache_alloc+0x159/0x310 [ 1507.701914] anon_vma_clone+0xdc/0x590 [ 1507.702374] __split_vma+0x17c/0x4e0 [ 1507.702809] __do_munmap+0x365/0x1260 [ 1507.703254] ? arch_get_unmapped_area+0x450/0x450 [ 1507.703811] ? lock_release+0x680/0x680 [ 1507.704273] mmap_region+0x7c8/0x1500 [ 1507.704722] do_mmap+0xcdb/0x11e0 [ 1507.705127] vm_mmap_pgoff+0x198/0x1f0 [ 1507.705593] ? randomize_page+0xb0/0xb0 [ 1507.706066] ksys_mmap_pgoff+0x41c/0x560 [ 1507.706539] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.707105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.707716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.708314] do_syscall_64+0x33/0x40 [ 1507.708745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.709337] RIP: 0033:0x7f72c981db62 [ 1507.709773] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.711871] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.712740] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1507.713552] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.714381] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1507.715197] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.716013] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1507.764449] FAULT_INJECTION: forcing a failure. [ 1507.764449] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.765781] CPU: 1 PID: 9595 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1507.766554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.767481] Call Trace: [ 1507.767787] dump_stack+0x107/0x167 [ 1507.768209] should_fail.cold+0x5/0xa [ 1507.768638] ? create_object.isra.0+0x3a/0xa20 [ 1507.769154] should_failslab+0x5/0x20 [ 1507.769593] kmem_cache_alloc+0x5b/0x310 [ 1507.770051] create_object.isra.0+0x3a/0xa20 [ 1507.770549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1507.771120] kmem_cache_alloc+0x159/0x310 [ 1507.771591] anon_vma_clone+0xdc/0x590 [ 1507.772035] __split_vma+0x17c/0x4e0 [ 1507.772455] __do_munmap+0x365/0x1260 [ 1507.772888] ? arch_get_unmapped_area+0x450/0x450 [ 1507.773438] ? lock_release+0x680/0x680 [ 1507.773899] mmap_region+0x7c8/0x1500 [ 1507.774333] do_mmap+0xcdb/0x11e0 [ 1507.774729] vm_mmap_pgoff+0x198/0x1f0 [ 1507.775171] ? randomize_page+0xb0/0xb0 [ 1507.775628] ksys_mmap_pgoff+0x41c/0x560 [ 1507.776088] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.776642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.777232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.777820] do_syscall_64+0x33/0x40 [ 1507.778240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.778813] RIP: 0033:0x7f9af1df9b62 [ 1507.779229] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.781277] RSP: 002b:00007f9aef36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.782138] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f9af1df9b62 [ 1507.782925] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.783718] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1507.784505] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.785295] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:01 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 84) [ 1507.886181] FAULT_INJECTION: forcing a failure. [ 1507.886181] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.887491] CPU: 1 PID: 9604 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1507.888243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.889167] Call Trace: [ 1507.889471] dump_stack+0x107/0x167 [ 1507.889893] should_fail.cold+0x5/0xa [ 1507.890316] ? vm_area_alloc+0x1c/0x110 [ 1507.890755] should_failslab+0x5/0x20 [ 1507.891175] kmem_cache_alloc+0x5b/0x310 [ 1507.891627] vm_area_alloc+0x1c/0x110 [ 1507.892046] mmap_region+0x97e/0x1500 [ 1507.892479] do_mmap+0xcdb/0x11e0 [ 1507.892868] vm_mmap_pgoff+0x198/0x1f0 [ 1507.893299] ? randomize_page+0xb0/0xb0 [ 1507.893756] ksys_mmap_pgoff+0x41c/0x560 [ 1507.894206] ? find_mergeable_anon_vma+0x250/0x250 [ 1507.894749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.895326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.895896] do_syscall_64+0x33/0x40 [ 1507.896314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.896876] RIP: 0033:0x7f2db9fa8b62 [ 1507.897285] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1507.899307] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1507.900144] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1507.900924] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1507.901722] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1507.902504] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1507.903285] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 82) 14:41:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x3, 0x37e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:14 executing program 2: syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 85) 14:41:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x3}, 0x80, 0x4bd, 0x6, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000340)=""/34, 0x22) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='\r\x00\x00\x00\x00']) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0xa, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r2) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d", 0xbb, 0xb800}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c000000000000c8730400000010000000689c235a86ae7434d0a516a1c3907f5bf0030922263461b24c92fab5df5f2f5269"]) 14:41:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4b220, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xd}, 0x0, 0xb2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=@updsa={0x1bc, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0xc4, 0x14, {{'sha256\x00'}, 0x3c0, 0x0, "5a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d7580c0bb8bc4a600300009ebf1fd296cb32d8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843d514f7feef875b4d8b47d8028280268536e3fd7a983c0ce3f890c1bb41"}}, @XFRMA_SET_MARK={0x8}]}, 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) io_setup(0x5, &(0x7f0000000700)) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x0, r3}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x5, 0x0, 0x4, 0x1}, 0x9) 14:41:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 82) [ 1520.440769] FAULT_INJECTION: forcing a failure. [ 1520.440769] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.442304] CPU: 1 PID: 9611 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 1520.443214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.444292] Call Trace: [ 1520.444646] dump_stack+0x107/0x167 [ 1520.445131] should_fail.cold+0x5/0xa [ 1520.445644] ? vm_area_alloc+0x1c/0x110 [ 1520.446115] should_failslab+0x5/0x20 [ 1520.446523] kmem_cache_alloc+0x5b/0x310 [ 1520.446958] vm_area_alloc+0x1c/0x110 [ 1520.447091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1520.447362] mmap_region+0x97e/0x1500 [ 1520.447381] do_mmap+0xcdb/0x11e0 [ 1520.447402] vm_mmap_pgoff+0x198/0x1f0 [ 1520.450994] ? randomize_page+0xb0/0xb0 [ 1520.451435] ksys_mmap_pgoff+0x41c/0x560 [ 1520.451871] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.452403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.452964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.453515] do_syscall_64+0x33/0x40 [ 1520.453923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.454470] RIP: 0033:0x7f72c981db62 [ 1520.454868] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.456827] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.457644] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1520.458413] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.459171] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1520.459930] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.460689] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1520.474678] FAULT_INJECTION: forcing a failure. [ 1520.474678] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.475940] CPU: 1 PID: 9619 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1520.476669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.477551] Call Trace: [ 1520.477844] loop0: detected capacity change from 0 to 135266304 [ 1520.477909] dump_stack+0x107/0x167 [ 1520.479413] should_fail.cold+0x5/0xa [ 1520.479825] ? ptlock_alloc+0x1d/0x70 [ 1520.480233] should_failslab+0x5/0x20 [ 1520.480642] kmem_cache_alloc+0x5b/0x310 [ 1520.481081] ptlock_alloc+0x1d/0x70 [ 1520.481473] pte_alloc_one+0x68/0x1a0 [ 1520.481892] __pte_alloc+0x1d/0x330 [ 1520.482286] remap_pfn_range_internal+0x9a3/0xf60 [ 1520.482807] ? lookup_memtype+0x5b/0x200 [ 1520.483251] ? apply_to_existing_page_range+0x40/0x40 [ 1520.483810] remap_pfn_range+0xcd/0x160 [ 1520.484239] ? remap_pfn_range_notrack+0x70/0x70 [ 1520.484749] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1520.485305] io_uring_mmap+0x398/0x530 [ 1520.485734] mmap_file+0x5e/0xe0 [ 1520.486098] mmap_region+0xc49/0x1500 [ 1520.486515] do_mmap+0xcdb/0x11e0 [ 1520.486892] vm_mmap_pgoff+0x198/0x1f0 [ 1520.487313] ? randomize_page+0xb0/0xb0 [ 1520.487747] ksys_mmap_pgoff+0x41c/0x560 [ 1520.488184] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.488714] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.489276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.489840] do_syscall_64+0x33/0x40 [ 1520.490246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.490795] RIP: 0033:0x7f2db9fa8b62 [ 1520.491193] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.493152] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.493980] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1520.494765] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.495554] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1520.496336] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.497114] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1520.507866] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1520.522454] FAULT_INJECTION: forcing a failure. [ 1520.522454] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.523730] CPU: 1 PID: 9623 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 1520.524692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.525646] Call Trace: [ 1520.526038] dump_stack+0x107/0x167 [ 1520.526557] should_fail.cold+0x5/0xa [ 1520.527085] ? vm_area_alloc+0x1c/0x110 [ 1520.527639] should_failslab+0x5/0x20 [ 1520.528171] kmem_cache_alloc+0x5b/0x310 [ 1520.528740] vm_area_alloc+0x1c/0x110 [ 1520.529277] mmap_region+0x97e/0x1500 [ 1520.529837] do_mmap+0xcdb/0x11e0 [ 1520.530326] vm_mmap_pgoff+0x198/0x1f0 [ 1520.530874] ? randomize_page+0xb0/0xb0 [ 1520.531438] ksys_mmap_pgoff+0x41c/0x560 [ 1520.532009] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.532710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.533431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.534160] do_syscall_64+0x33/0x40 [ 1520.534677] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.535394] RIP: 0033:0x7f9af1df9b62 [ 1520.535906] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.538458] RSP: 002b:00007f9aef36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.539514] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f9af1df9b62 [ 1520.540504] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.541498] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1520.542506] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.543497] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 14:41:14 executing program 3: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') perf_event_open(0x0, 0x0, 0x4, r1, 0x8) r2 = creat(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) gettid() sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x42808, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642cff66646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cde5f7f46becf08eb74a47900"]) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000240)) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 14:41:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000180)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1a) 14:41:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x3}, 0x80, 0x4bd, 0x6, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000340)=""/34, 0x22) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='\r\x00\x00\x00\x00']) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0xa, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r2) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d", 0xbb, 0xb800}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c000000000000c8730400000010000000689c235a86ae7434d0a516a1c3907f5bf0030922263461b24c92fab5df5f2f5269"]) [ 1520.624168] ------------[ cut here ]------------ [ 1520.624928] WARNING: CPU: 1 PID: 9619 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1520.626295] Modules linked in: [ 1520.626715] CPU: 1 PID: 9619 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1520.627603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.628683] RIP: 0010:get_pat_info+0x216/0x270 [ 1520.629293] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 45 99 5a 00 e9 [ 1520.632296] RSP: 0018:ffff8880567e7898 EFLAGS: 00010216 [ 1520.634182] RAX: 00000000000197b9 RBX: ffff88800e61a800 RCX: ffffc9000884b000 [ 1520.636922] RDX: 0000000000040000 RSI: ffffffff811243e6 RDI: 0000000000000007 [ 1520.639053] RBP: ffff8880567e7950 R08: 0000000000000000 R09: ffff8880567e7820 [ 1520.640075] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1520.641101] R13: 1ffff1100acfcf13 R14: 0000000000000000 R15: ffff88800e61a850 [ 1520.642124] FS: 00007f2db751e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1520.643278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1520.644120] CR2: 0000001b2d524000 CR3: 0000000019f0e000 CR4: 0000000000350ee0 [ 1520.645142] Call Trace: [ 1520.645518] ? pgprot_writethrough+0xc0/0xc0 [ 1520.646162] ? finish_task_switch+0x126/0x5d0 [ 1520.646787] ? finish_task_switch+0xef/0x5d0 [ 1520.647432] untrack_pfn+0xdc/0x240 [ 1520.647936] ? track_pfn_insert+0x150/0x150 [ 1520.648562] ? lock_downgrade+0x6d0/0x6d0 [ 1520.649156] ? uprobe_munmap+0x95/0x560 [ 1520.649711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.650403] unmap_single_vma+0x1bc/0x300 [ 1520.650895] zap_page_range_single+0x2ce/0x450 [ 1520.651451] ? unmap_single_vma+0x300/0x300 [ 1520.651950] ? remap_pfn_range_internal+0xc56/0xf60 [ 1520.652565] ? lookup_memtype+0x5b/0x200 [ 1520.653066] ? apply_to_existing_page_range+0x40/0x40 [ 1520.653674] remap_pfn_range+0x139/0x160 [ 1520.654178] ? remap_pfn_range_notrack+0x70/0x70 [ 1520.654736] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1520.655375] io_uring_mmap+0x398/0x530 [ 1520.655832] mmap_file+0x5e/0xe0 [ 1520.656255] mmap_region+0xc49/0x1500 [ 1520.656710] do_mmap+0xcdb/0x11e0 [ 1520.657143] vm_mmap_pgoff+0x198/0x1f0 [ 1520.657600] ? randomize_page+0xb0/0xb0 [ 1520.658107] ksys_mmap_pgoff+0x41c/0x560 [ 1520.658588] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.659180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.659786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.660405] do_syscall_64+0x33/0x40 [ 1520.660838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.661459] RIP: 0033:0x7f2db9fa8b62 [ 1520.661904] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.662813] loop0: detected capacity change from 0 to 135266304 [ 1520.664030] RSP: 002b:00007f2db751e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.664042] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2db9fa8b62 [ 1520.664049] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.664055] RBP: 0000000020ffd000 R08: 0000000000000004 R09: 0000000000000000 [ 1520.664061] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.664068] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1520.664087] irq event stamp: 1349 [ 1520.664100] hardirqs last enabled at (1355): [] vprintk_emit+0x490/0x4e0 [ 1520.664111] hardirqs last disabled at (1360): [] vprintk_emit+0x422/0x4e0 [ 1520.664123] softirqs last enabled at (864): [] asm_call_irq_on_stack+0x12/0x20 14:41:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r5, &(0x7f0000000280)=0x80, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x80000001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) [ 1520.664134] softirqs last disabled at (807): [] asm_call_irq_on_stack+0x12/0x20 [ 1520.664139] ---[ end trace 1c9e913a5944f480 ]--- 14:41:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0xed09, 0x2, 0x2, 0x3d3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 83) 14:41:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c45, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (fail_nth: 83) 14:41:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x130c, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000500)) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f00000005c0)}, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) stat(&(0x7f0000000340)='.\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x1, {0x0, r5}}, 0xc6) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000000c0)=0xcd5f021146f438dc, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1520.775653] FAULT_INJECTION: forcing a failure. [ 1520.775653] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.777065] CPU: 1 PID: 9647 Comm: syz-executor.5 Tainted: G W 5.10.240 #1 [ 1520.778038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.779021] Call Trace: [ 1520.779334] dump_stack+0x107/0x167 [ 1520.779766] should_fail.cold+0x5/0xa [ 1520.780228] ? create_object.isra.0+0x3a/0xa20 [ 1520.780766] should_failslab+0x5/0x20 [ 1520.781215] kmem_cache_alloc+0x5b/0x310 [ 1520.781695] create_object.isra.0+0x3a/0xa20 [ 1520.782232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.782827] kmem_cache_alloc+0x159/0x310 [ 1520.783330] vm_area_alloc+0x1c/0x110 [ 1520.783775] mmap_region+0x97e/0x1500 [ 1520.784249] do_mmap+0xcdb/0x11e0 [ 1520.784659] vm_mmap_pgoff+0x198/0x1f0 [ 1520.785117] ? randomize_page+0xb0/0xb0 [ 1520.785598] ksys_mmap_pgoff+0x41c/0x560 [ 1520.786082] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.786658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.787273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.787885] do_syscall_64+0x33/0x40 [ 1520.788325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.788922] RIP: 0033:0x7f72c981db62 [ 1520.789361] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.791536] RSP: 002b:00007f72c6d930f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.792428] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f72c981db62 [ 1520.793276] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.794121] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1520.794953] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.795787] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 [ 1520.811789] FAULT_INJECTION: forcing a failure. [ 1520.811789] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.813160] CPU: 1 PID: 9650 Comm: syz-executor.7 Tainted: G W 5.10.240 #1 [ 1520.814148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.815070] Call Trace: [ 1520.815367] dump_stack+0x107/0x167 [ 1520.815781] should_fail.cold+0x5/0xa [ 1520.816208] ? vm_area_alloc+0x1c/0x110 [ 1520.816647] should_failslab+0x5/0x20 [ 1520.817070] kmem_cache_alloc+0x5b/0x310 [ 1520.817526] vm_area_alloc+0x1c/0x110 [ 1520.817970] mmap_region+0x97e/0x1500 [ 1520.818402] do_mmap+0xcdb/0x11e0 [ 1520.818797] vm_mmap_pgoff+0x198/0x1f0 [ 1520.819231] ? randomize_page+0xb0/0xb0 [ 1520.819685] ksys_mmap_pgoff+0x41c/0x560 [ 1520.820137] ? find_mergeable_anon_vma+0x250/0x250 [ 1520.820680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.821267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.821842] do_syscall_64+0x33/0x40 [ 1520.822254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.822816] RIP: 0033:0x7f9af1df9b62 [ 1520.823229] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1520.825234] RSP: 002b:00007f9aef36f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1520.826081] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f9af1df9b62 [ 1520.826868] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffd000 [ 1520.827644] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 1520.828421] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1520.829211] R13: 0000000020ffe000 R14: 0000000020000000 R15: 0000000020ffd000 VM DIAGNOSIS: 14:41:14 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800d8057ec RCX=1ffff11001b00b00 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8686fa79 RBP=ffffffff8686f9c0 RSP=ffff88801cdd7900 R8 =0000000000000000 R9 =ffffffff8686e6a7 R10=fffffbfff0d0dcd4 R11=0000000000000001 R12=ffff88800d804ec0 R13=ffff88800d805808 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8126f178 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8a3009d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8a32c3b018 CR3=0000000051b8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000dddd06aa EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8a32c0e7c000007f8a32c0e7c8 XMM02=00007f8a32c0e7e000007f8a32c0e7c0 XMM03=00007f8a32c0e7c800007f8a32c0e7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e2601 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff8880567e72a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000066 R13=0000000000000066 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e2658 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2db751e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d524000 CR3=0000000019f0e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f2dba08f7c000007f2dba08f7c8 XMM02=00007f2dba08f7e000007f2dba08f7c0 XMM03=00007f2dba08f7c800007f2dba08f7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000