_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3700e5867e1f91caa2ddb32bff", @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:18:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x91ffffff}, 0x1c) 11:18:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 11:18:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8, 0x3}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x6, 0x7f}, {0xd7, 0x4}, 0xa3, 0x2, 0x1}) 11:18:18 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 2296.438933] FAULT_INJECTION: forcing a failure. [ 2296.438933] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.440481] CPU: 0 PID: 10967 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2296.444888] FAULT_INJECTION: forcing a failure. [ 2296.444888] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.449398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.449403] Call Trace: [ 2296.449422] dump_stack+0x107/0x167 [ 2296.449436] should_fail.cold+0x5/0xa [ 2296.449450] ? create_object.isra.0+0x3a/0xa20 [ 2296.449472] should_failslab+0x5/0x20 [ 2296.449485] kmem_cache_alloc+0x5b/0x310 [ 2296.449504] ? mark_held_locks+0x9e/0xe0 [ 2296.449523] create_object.isra.0+0x3a/0xa20 [ 2296.449535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2296.449551] kmem_cache_alloc_bulk+0x168/0x320 [ 2296.449568] io_submit_sqes+0x6fe6/0x8610 [ 2296.449598] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.449609] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.449623] ? find_held_lock+0x2c/0x110 [ 2296.449638] ? io_submit_sqes+0x8610/0x8610 [ 2296.449657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2296.449672] ? wait_for_completion_io+0x270/0x270 [ 2296.449686] ? rcu_read_lock_any_held+0x75/0xa0 [ 2296.449697] ? vfs_write+0x354/0xb10 [ 2296.449708] ? fput_many+0x2f/0x1a0 [ 2296.449721] ? ksys_write+0x1a9/0x260 [ 2296.449733] ? __ia32_sys_read+0xb0/0xb0 [ 2296.449748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.449760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.449773] do_syscall_64+0x33/0x40 [ 2296.449785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.449794] RIP: 0033:0x7f2aef7e0b19 [ 2296.449805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.449812] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2296.449825] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2296.449833] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2296.449839] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.449846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.449853] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2296.478437] CPU: 1 PID: 10980 Comm: syz-executor.7 Not tainted 5.10.233 #1 11:18:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xd487015e}, 0x1c) 11:18:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x3000000}, 0x1c) 11:18:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:18:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 11:18:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x3, 0xea}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) fsetxattr$security_capability(r1, &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0x3, 0x2}, {0xfffffff8, 0x5e2}], r2}, 0x18, 0x1) [ 2296.479276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.488051] Call Trace: [ 2296.488386] dump_stack+0x107/0x167 [ 2296.488829] should_fail.cold+0x5/0xa [ 2296.489299] ? create_object.isra.0+0x3a/0xa20 [ 2296.489877] should_failslab+0x5/0x20 [ 2296.490341] kmem_cache_alloc+0x5b/0x310 [ 2296.490838] ? mark_held_locks+0x9e/0xe0 [ 2296.491333] create_object.isra.0+0x3a/0xa20 [ 2296.491866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2296.492487] kmem_cache_alloc_bulk+0x168/0x320 [ 2296.493051] io_submit_sqes+0x6fe6/0x8610 [ 2296.493598] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.494203] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.494793] ? find_held_lock+0x2c/0x110 [ 2296.495290] ? io_submit_sqes+0x8610/0x8610 [ 2296.495823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2296.496414] ? wait_for_completion_io+0x270/0x270 [ 2296.497003] ? rcu_read_lock_any_held+0x75/0xa0 [ 2296.497577] ? vfs_write+0x354/0xb10 [ 2296.498029] ? fput_many+0x2f/0x1a0 [ 2296.498474] ? ksys_write+0x1a9/0x260 [ 2296.498935] ? __ia32_sys_read+0xb0/0xb0 [ 2296.499434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.500070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.500699] do_syscall_64+0x33/0x40 [ 2296.501154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.501798] RIP: 0033:0x7f61c5901b19 [ 2296.502256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.504497] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2296.509475] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2296.510341] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2296.511206] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.512071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.512939] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:18:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x40, @tick=0x5, 0x0, {0x81, 0xff}, 0x6, 0x0, 0xff}) 11:18:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x4000000}, 0x1c) 11:18:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x5000000}, 0x1c) 11:18:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) dup2(r1, r3) 11:18:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xe8030000}, 0x1c) 11:18:18 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 11:18:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2296.642589] FAULT_INJECTION: forcing a failure. [ 2296.642589] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.644010] CPU: 0 PID: 10996 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2296.644848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.645879] Call Trace: [ 2296.646209] dump_stack+0x107/0x167 [ 2296.646654] should_fail.cold+0x5/0xa [ 2296.647122] ? create_object.isra.0+0x3a/0xa20 [ 2296.647681] should_failslab+0x5/0x20 [ 2296.648149] kmem_cache_alloc+0x5b/0x310 [ 2296.648648] ? mark_held_locks+0x9e/0xe0 [ 2296.649146] create_object.isra.0+0x3a/0xa20 [ 2296.649713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2296.650337] kmem_cache_alloc_bulk+0x168/0x320 [ 2296.650901] io_submit_sqes+0x6fe6/0x8610 [ 2296.651431] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.652042] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2296.652634] ? find_held_lock+0x2c/0x110 [ 2296.653135] ? io_submit_sqes+0x8610/0x8610 [ 2296.653696] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2296.654288] ? wait_for_completion_io+0x270/0x270 [ 2296.654880] ? rcu_read_lock_any_held+0x75/0xa0 [ 2296.655450] ? vfs_write+0x354/0xb10 [ 2296.655904] ? fput_many+0x2f/0x1a0 [ 2296.656349] ? ksys_write+0x1a9/0x260 [ 2296.656814] ? __ia32_sys_read+0xb0/0xb0 [ 2296.657315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.661986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.662614] do_syscall_64+0x33/0x40 [ 2296.663066] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.663686] RIP: 0033:0x7f2aef7e0b19 [ 2296.664136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.666383] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2296.667309] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2296.668174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2296.669040] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.669970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.670838] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:18:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x6000000}, 0x1c) 11:18:31 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 11:18:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x7000000}, 0x1c) 11:18:31 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x262140, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5020000002816bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x0, 0xfffffffc}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {r1}], 0x2, 0x2000000) close(r0) 11:18:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 11:18:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:18:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:18:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xed93f08e}, 0x1c) 11:18:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 2309.868962] FAULT_INJECTION: forcing a failure. [ 2309.868962] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.870527] CPU: 0 PID: 11012 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2309.871367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.872367] Call Trace: [ 2309.872695] dump_stack+0x107/0x167 [ 2309.873138] should_fail.cold+0x5/0xa [ 2309.873609] should_failslab+0x5/0x20 [ 2309.874119] kmem_cache_alloc_bulk+0x4b/0x320 [ 2309.874673] io_submit_sqes+0x6fe6/0x8610 [ 2309.875195] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2309.875800] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2309.876391] ? find_held_lock+0x2c/0x110 [ 2309.876888] ? io_submit_sqes+0x8610/0x8610 [ 2309.877421] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.878455] ? wait_for_completion_io+0x270/0x270 [ 2309.879702] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.880905] ? vfs_write+0x354/0xb10 [ 2309.881896] ? fput_many+0x2f/0x1a0 [ 2309.882835] ? ksys_write+0x1a9/0x260 [ 2309.883812] ? __ia32_sys_read+0xb0/0xb0 [ 2309.884862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.886020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.886649] do_syscall_64+0x33/0x40 [ 2309.887105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.887730] RIP: 0033:0x7f2aef7e0b19 [ 2309.888187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.894469] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.895393] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2309.896258] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2309.897122] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.898379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2309.900237] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2309.900552] FAULT_INJECTION: forcing a failure. [ 2309.900552] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.904216] CPU: 1 PID: 11025 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2309.905288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.906468] Call Trace: [ 2309.906797] dump_stack+0x107/0x167 [ 2309.907298] should_fail.cold+0x5/0xa [ 2309.907762] ? xas_alloc+0x336/0x440 [ 2309.908274] should_failslab+0x5/0x20 [ 2309.908735] kmem_cache_alloc+0x5b/0x310 [ 2309.909289] xas_alloc+0x336/0x440 [ 2309.909728] xas_create+0x34a/0x10d0 [ 2309.910984] ? kernel_text_address+0xf2/0x120 [ 2309.911637] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2309.912404] xas_store+0x8c/0x1c40 [ 2309.912846] __xa_store+0x164/0x2d0 [ 2309.913397] ? xa_delete_node+0x280/0x280 [ 2309.913923] ? trace_hardirqs_on+0x5b/0x180 [ 2309.914572] xa_store+0x31/0x50 [ 2309.914977] __io_uring_add_tctx_node+0x1cf/0x520 [ 2309.915623] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2309.916325] __do_sys_io_uring_enter+0x146f/0x1890 [ 2309.916920] ? find_held_lock+0x2c/0x110 [ 2309.917496] ? io_submit_sqes+0x8610/0x8610 [ 2309.918041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.918687] ? wait_for_completion_io+0x270/0x270 [ 2309.919329] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.919890] ? vfs_write+0x354/0xb10 [ 2309.920397] ? fput_many+0x2f/0x1a0 [ 2309.920841] ? ksys_write+0x1a9/0x260 [ 2309.921381] ? __ia32_sys_read+0xb0/0xb0 [ 2309.921892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.922587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.923272] do_syscall_64+0x33/0x40 [ 2309.923725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.924403] RIP: 0033:0x7f61c5901b19 [ 2309.924855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.927289] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.928265] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2309.929129] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2309.930081] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.931001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2309.931944] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:18:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x8000000}, 0x1c) 11:18:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:18:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = fsmount(r0, 0x0, 0x81) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x5, 0x2, 0xc, 0x9, 0x9d, "ef5319f76da77a9bbed5e0cdba434dc1b734485ee980fd32f4d5bf4b099fe6870a7b341b6caa60efddf81d1cc114ef40dfbf8b52ec738f635520adf9e253a87aa63ada3cf993ad129331268531d075eaa50e800132ce248f4e2e431d52c9f4d89751f73cd3a7cd8bfb4abb17542b205c4ecf85a03d57f9bb9651c80187934a50908cc98ee91ddcd25c2a497bd014a42612a65322462db3c0b318a3a768"}, 0xa6, 0x4) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:18:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 11:18:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x6, 0x0, 'client1\x00', 0xffffffff8000000e, "2727a1e119ba24cf", "5e44e38a9b97caa81bdd9366a7bc61b2424ee39f1a7c264dd807941f7bb88a9f", 0x0, 0xe2b1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x61, 0x3, 0x5, 0x3, 0x1, 0x5, 0x9897, 0xe42, 0xd258, 0x5, 0x6f2, 0x1f, 0x0, 0x2}}) [ 2323.627312] FAULT_INJECTION: forcing a failure. [ 2323.627312] name failslab, interval 1, probability 0, space 0, times 0 [ 2323.628720] CPU: 1 PID: 11047 Comm: syz-executor.3 Not tainted 5.10.233 #1 11:18:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 11:18:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:18:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xf4010000}, 0x1c) 11:18:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:18:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x9da1447}, 0x1c) 11:18:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) [ 2323.629560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2323.634596] Call Trace: [ 2323.634923] dump_stack+0x107/0x167 [ 2323.635364] should_fail.cold+0x5/0xa [ 2323.635828] ? create_object.isra.0+0x3a/0xa20 [ 2323.636383] should_failslab+0x5/0x20 [ 2323.636850] kmem_cache_alloc+0x5b/0x310 [ 2323.637345] create_object.isra.0+0x3a/0xa20 [ 2323.637876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2323.638529] kmem_cache_alloc_bulk+0x168/0x320 [ 2323.639090] io_submit_sqes+0x6fe6/0x8610 [ 2323.639612] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2323.640216] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2323.640810] ? find_held_lock+0x2c/0x110 [ 2323.641307] ? io_submit_sqes+0x8610/0x8610 [ 2323.641837] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2323.642452] ? wait_for_completion_io+0x270/0x270 [ 2323.643040] ? rcu_read_lock_any_held+0x75/0xa0 [ 2323.643608] ? vfs_write+0x354/0xb10 [ 2323.644058] ? fput_many+0x2f/0x1a0 [ 2323.644499] ? ksys_write+0x1a9/0x260 [ 2323.644961] ? __ia32_sys_read+0xb0/0xb0 [ 2323.645455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2323.646088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2323.646742] do_syscall_64+0x33/0x40 [ 2323.647194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2323.647813] RIP: 0033:0x7f2aef7e0b19 [ 2323.648263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2323.650520] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2323.651442] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2323.652302] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2323.653168] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2323.654031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2323.654922] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:18:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xf5ffffff}, 0x1c) 11:18:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xe000000}, 0x1c) [ 2323.753456] FAULT_INJECTION: forcing a failure. [ 2323.753456] name failslab, interval 1, probability 0, space 0, times 0 [ 2323.754956] CPU: 1 PID: 11067 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2323.755790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2323.756785] Call Trace: [ 2323.757115] dump_stack+0x107/0x167 [ 2323.757557] should_fail.cold+0x5/0xa [ 2323.758019] ? create_object.isra.0+0x3a/0xa20 [ 2323.758595] should_failslab+0x5/0x20 [ 2323.759056] kmem_cache_alloc+0x5b/0x310 [ 2323.759552] ? find_held_lock+0x2c/0x110 [ 2323.760047] create_object.isra.0+0x3a/0xa20 [ 2323.760580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2323.761205] __kmalloc_node+0x1ae/0x420 [ 2323.761692] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2323.762323] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2323.762936] kmem_cache_alloc_bulk+0x182/0x320 [ 2323.763498] io_submit_sqes+0x6fe6/0x8610 [ 2323.764020] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2323.764627] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2323.765215] ? find_held_lock+0x2c/0x110 [ 2323.765711] ? io_submit_sqes+0x8610/0x8610 [ 2323.766251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2323.766845] ? wait_for_completion_io+0x270/0x270 [ 2323.767435] ? rcu_read_lock_any_held+0x75/0xa0 [ 2323.767999] ? vfs_write+0x354/0xb10 [ 2323.768455] ? fput_many+0x2f/0x1a0 [ 2323.768902] ? ksys_write+0x1a9/0x260 [ 2323.769365] ? __ia32_sys_read+0xb0/0xb0 [ 2323.769862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2323.770513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2323.771143] do_syscall_64+0x33/0x40 [ 2323.771596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2323.772221] RIP: 0033:0x7f61c5901b19 [ 2323.772673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2323.774921] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2323.775848] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2323.776715] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2323.777581] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2323.778470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2323.779343] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 11:19:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 11:19:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 11:19:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfc000000}, 0x1c) 11:19:00 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x1, 0x7f}, 'port0\x00', 0x2, 0x40840, 0x101, 0x5, 0x2, 0x2, 0x9, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x1, {0x3, 0x3, 0x40, 0x2, 0x7}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:19:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x18020000}, 0x1c) 11:19:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 2338.177458] FAULT_INJECTION: forcing a failure. [ 2338.177458] name failslab, interval 1, probability 0, space 0, times 0 [ 2338.178951] CPU: 1 PID: 11084 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2338.179790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2338.180041] FAULT_INJECTION: forcing a failure. [ 2338.180041] name failslab, interval 1, probability 0, space 0, times 0 [ 2338.180792] Call Trace: [ 2338.180812] dump_stack+0x107/0x167 [ 2338.180826] should_fail.cold+0x5/0xa [ 2338.180842] ? create_object.isra.0+0x3a/0xa20 [ 2338.180858] should_failslab+0x5/0x20 [ 2338.180871] kmem_cache_alloc+0x5b/0x310 [ 2338.180885] ? mark_held_locks+0x9e/0xe0 [ 2338.180900] create_object.isra.0+0x3a/0xa20 [ 2338.185925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2338.186547] kmem_cache_alloc_bulk+0x168/0x320 [ 2338.187123] io_submit_sqes+0x6fe6/0x8610 [ 2338.187653] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2338.188258] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2338.188846] ? find_held_lock+0x2c/0x110 [ 2338.189344] ? io_submit_sqes+0x8610/0x8610 [ 2338.189876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2338.190465] ? wait_for_completion_io+0x270/0x270 [ 2338.191075] ? rcu_read_lock_any_held+0x75/0xa0 [ 2338.191644] ? vfs_write+0x354/0xb10 [ 2338.192107] ? fput_many+0x2f/0x1a0 [ 2338.192561] ? ksys_write+0x1a9/0x260 [ 2338.193031] ? __ia32_sys_read+0xb0/0xb0 [ 2338.193529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2338.194168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2338.198828] do_syscall_64+0x33/0x40 [ 2338.199281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2338.199900] RIP: 0033:0x7f2aef7e0b19 [ 2338.200351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2338.202579] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2338.203521] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2338.204386] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2338.205251] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2338.206117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2338.207000] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2338.207885] CPU: 0 PID: 11075 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2338.208733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2338.209732] Call Trace: [ 2338.210052] dump_stack+0x107/0x167 [ 2338.210503] should_fail.cold+0x5/0xa [ 2338.210992] ? xas_alloc+0x336/0x440 [ 2338.211445] should_failslab+0x5/0x20 [ 2338.211906] kmem_cache_alloc+0x5b/0x310 [ 2338.212401] xas_alloc+0x336/0x440 [ 2338.212835] xas_create+0x34a/0x10d0 [ 2338.213297] ? kernel_text_address+0xf2/0x120 [ 2338.213841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2338.214477] xas_store+0x8c/0x1c40 [ 2338.214936] __xa_store+0x164/0x2d0 [ 2338.215379] ? xa_delete_node+0x280/0x280 [ 2338.215887] ? trace_hardirqs_on+0x5b/0x180 [ 2338.216414] xa_store+0x31/0x50 [ 2338.216822] __io_uring_add_tctx_node+0x1cf/0x520 [ 2338.217405] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2338.218047] __do_sys_io_uring_enter+0x146f/0x1890 [ 2338.218642] ? find_held_lock+0x2c/0x110 [ 2338.219163] ? io_submit_sqes+0x8610/0x8610 [ 2338.219697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2338.220285] ? wait_for_completion_io+0x270/0x270 [ 2338.220870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2338.221432] ? vfs_write+0x354/0xb10 [ 2338.221884] ? fput_many+0x2f/0x1a0 [ 2338.222327] ? ksys_write+0x1a9/0x260 [ 2338.222804] ? __ia32_sys_read+0xb0/0xb0 [ 2338.223299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2338.223933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2338.224558] do_syscall_64+0x33/0x40 [ 2338.225010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2338.225634] RIP: 0033:0x7f61c5901b19 [ 2338.226085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2338.228318] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2338.229240] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2338.230102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2338.230975] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2338.231837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2338.232705] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:19:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x438100) write$sndseq(r0, &(0x7f0000000080)=[{0x1, 0x1f, 0x7, 0x7, @tick=0xe8f, {0x3f, 0x1}, {0x1f, 0x4}, @ext={0x5, &(0x7f0000000040)="2fad8b754b"}}, {0x3, 0x1f, 0x1f, 0x67, @tick=0x98e9, {0x4, 0x1}, {0x80, 0x1f}, @time=@tick=0x6}], 0x38) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) fallocate(r2, 0x20, 0x10001, 0x8) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x8b4, r0, &(0x7f0000000140)="08c10a49fd1c0c72a70b0d1dc72f6a04280d8cfa34cf79c3dc51b2186ad2517aff2e562e9d053a173ebc49de1bfdff58af8e8a6c4dc96965cfcebf2595268c6ad7e1eb64faefbbdbf33abeb382f964346ca2f21140fc305e696be0f16963be4d5f71af2d270b899a12a53a7ae676484a7d59703e95f775d1f69f463ab70d8dc871b0ad476872", 0x86, 0x7, 0x0, 0x1, r0}, &(0x7f0000000240)) r4 = dup(r2) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000280)={0x1000, 0x7}) 11:19:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfe800000}, 0x1c) 11:19:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x1bcd991c}, 0x1c) 11:19:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x77f) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x81, 0x2, 0x100, {0x8, 0x4766}, 0x4, 0x1ff}) 11:19:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000028c0)={'syztnl1\x00', &(0x7f0000002840)={'ip6_vti0\x00', r3, 0x2f, 0x9, 0x6, 0x7, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x7800, 0x80, 0x2e, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002a40)={'ip6gre0\x00', &(0x7f00000029c0)={'ip6gre0\x00', r3, 0x29, 0x9, 0x9, 0x8, 0x2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003bc0)={'sit0\x00', &(0x7f0000003b40)={'sit0\x00', r3, 0x29, 0x3, 0x3, 0x9, 0x14, @private2, @empty, 0x20, 0x7, 0x23, 0x7ff}}) sendmmsg$inet(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)="74a9247f970f86ecd8b3374096728bd3da80c1ae581879a705efb2cb0b385b658ce3fbcbee24d340d889927f87be32eec065c2cf05b1895998e03b1ce9a9015b63569306b16efef50164854309bd3a80240a05b94af30fdbdf2844f5a42d3241e2f96fad742829914dc4203c6405a36bc7027723f5976a35e07a1a296fe05e5890b6765c4e7ac908d73ab8f9bad904b207ed8d9879b1b119b3b3cdab4abe9a633c927b3643ee0cfb93d9da29168c94195a1b494fb46805b66ce9df2e05cf3a2ffcee3a6b33", 0xc5}, {&(0x7f0000000540)="92bdd929e078d9f62d69be2b5a17ebf45d5acc01dbbafcc0eff91fa651b93b75297db21e61b15de6951d31a14e6605831f9b64511e185e0325c845d46133693f87c3dc8f8224818ae752c915953195b636db5ca12f533051449d066d721b1b60a422abb7bc1369d3d6cfa3586a6b0592bf79266594e2c1d4bec49c99bc780de4d66e205f4f54f0ba814dc0daea09aa39d1", 0x91}, {&(0x7f0000000600)="7d84b62416418255c02c98dcdeed42292c919db594dc94a644e5becfbfb554f4a3c45bd2897ce7dddd0f582465297cb9c4875241f084f5228388079bb4bb602ffb018cbf1ef10fdca36a295b151b65ca793205334c26d0cb72369a525639527629f04e76e9b567186a1a68ce61c6a9bdf7aaf55b249afa8dc739888aa8a5d31331a9f0fd7d9eefd7b23549026b5b6c9f853458", 0x93}, {&(0x7f00000006c0)="183ee936b26db0cc99c0c8b7b37c7cda251fe78cb8b7e07d6931d99758d839e2031fcdc0b6fd6ce813c90e49240615178e652d4a11c64ffe41c5005079d248474d1b807b8e67ff558e5eddd41806a4b8d14b2cb7cbb0a324bad83bec0aa257a7489a9227505d352f9eff1756196463a6cc58e970f683ed0879c205095890a5d7f0da6d3ad39dcc91b94e6288f72a9990a882ca172597", 0x96}, {&(0x7f0000000780)="dcb3d6b21c374b4bec8f6669f104a1466563c5e3b598848ba791827e09ff3aff6aec3681b0c924ab59d0b3460983591109f8ab73e7", 0x35}, {&(0x7f00000007c0)="45f39cc7e7177675b77bcd5b157860d95db0d55048487bf0189d550285119bf64907914260c5619f8ded365cf7eb0b376889644ffcb63807b65d1f9895b8e8cc5b2cf53245478af6b04d5cd00e97c62ada88ed4225a1c0ab6e0114c755c6734d3661995148bb4511f341e7405170d442e97d183e6e201cff1d80fc1168cb68ed9ed4bbf1b7e5b174ef0f3abaae24d55920b1323aea4b0876d8f099ef306b9c7ca9cefc67d72111be212498e001b72dbc62897f262c5e49a9a916365a9c2dac4462f6889b78c077487561cb5bcdf93ce913eecfa9", 0xd4}, {&(0x7f00000008c0)="b8cabf74ab71e0d3e408659c4a4060250096b954806402595e75b03bbb50422bcd7defa25a98f24c796c86699025f6c6833e9b966107c4c161182ab16b869d6c6b197bd79fe492603eb66d09f9b572c535b49fef97f30907bd7ad20f2cf71b26909b8e79f57ae9fae8dad3b3bf65181b0380e86253e5bc89b33f91c74789", 0x7e}, {&(0x7f0000000940)="1f", 0x1}, {&(0x7f0000000980)="bac3ffdf95f4f1bba3ec4a7da318f66fecf0c100156fea23faee8e58439d31e4beef60acf51fc61aa9ca8dbc8452d9217effe3a6d7d58728a1847f723ca7c2b6378849f540ac6aea1b68b5394f70497128126ebc4a6984fad3bf34dacc6a489ff6184692e9ac9a45762aa00faaf98f08a2e37ac7c5dd84f09acd4fd6254a79d20085cb8715cab97f4d09ca56f3b6c9170218286e7730b6f9806fff2418ecd3b9e40acfb148e6a6bea859bceed3864732006fe226e6a659065cb6b014e6c692c0fa986c442c305049c3d9d2481ef02df4d630de", 0xd3}, {&(0x7f0000000a80)="d6fafe56b82a987a82a52f7795ae4efc50192b311b907cd1102abf9e", 0x1c}], 0xa}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b80)="bf2a24fb2c5c4980a090cea6db58ae5ffff4507dedfcb14c1a9c5c8f6a443a041fdc621bf91b7b8087e60a08a6b24ae95b8d1c4679f929d0c926c8355a6ec3d0e2d144", 0x43}, {&(0x7f0000000c00)="6fd966cc3fd3cc08cc702b7a2fbf9978d14efdb3237e2eef8f8bdb13243a64379f389c60a41ee3bbcdb518d1281bb4aa9910ca5b2f1001eb09669329be8fa60bf8d40bd1199c81cf3cd64c423fe5600427f6d5dfeb394804a4cb5580a3478da5f9839f95d23d73978e1b912e2049b0cdd57011c6323bc80dd21df203650509e0e360acb4451d6f41d1c7d4fe2676b1225fba37817f32fcda355a42919c07939b9fd4aa14e7b26967175b23574fe4edfbe7a788d60a5e8ab7a15c57ff987f1f2ca81d0b1800da211e3fb30a4368bf928d640d4202a8f95847df4bcb6a0ecc558ce144ac5853c99864faacc9", 0xeb}, {&(0x7f0000000d00)="0b90", 0x2}, {&(0x7f0000000d40)="4560dd18d2a9660feb29abc06e7313cab2019be919d3dcece5522c7cf8d02b631a0bd09a14914a092c9ad05b6c32944ddc48186fea927bd659b73d31d3248ff99d75140907b5bb437114c54d9968897076504ed61c95d3f44fae1069c889f7b7b1a8ef23aa70c056be7ee6a8173bb040cb2098a332200c818ed01391fece0cf15cdf3bc16d6b4e4f", 0x88}, {&(0x7f0000000e00)="914fc3eeb6a4afdfd60e83fdbe01ad5f941283c6da737923a160dc9f16aa2470ef8322e585be9649ec7b273f24988452d1aa9eb8fd198b176863e7875a486f3bb8a6dff1773a1ff1044960fa1845d21fc7522c180031fea734287bf5641e292f525288fc7a872fd84aa20ab81e1389fefa49631122f92670a093635165f4ec0c85b0c0871a36945c2e31fe", 0x8b}, {&(0x7f0000000ec0)="68fabceb2e12a71e6a8fb5a55d920610e17e89c67971bc31c1e7294973913f5aaa87cc0db94d31a96bb25daaeeb1573975b059ac54ab7604a51bc653f0104960b88dbe776932b038acaabd9aed77a5386953fbd9a2f0c4f78475f8f01a9b3b857d185f7965386364494e8732befb20a5c9344b30366b6c967bc2f78f22831f7787b0362b5f8e49e6b4b1cbdf7417277c91546a8de68e97f410faf2de3628e2", 0x9f}, {&(0x7f0000000f80)="74177af8c571f7de4e91477cc0c8e011f8cb2d3e4dcf56ffaff67e79b57a9120088e16f1b8aa75e7fed76652fe7d4adbffaab2d8cc454e6ee906ef4ff48a94db51b10dbf7df9ba2bb27ffc4c49bb1b1c9a991e0e260aac90d7b7ee86a8b4d9d9076c58495d25951e14cf8d56d91a1f88276408392ba8f98caef45967d56fd0730cedd4bc74", 0x85}, {&(0x7f0000001040)="2e08953ffc4d26ff14ad5165a6847304175856b806e93b8040", 0x19}], 0x8, &(0x7f0000001100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe50e}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x90}}, {{&(0x7f00000011c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="39a8d434548dadc86be4d448dd29498e384b67fc0cfec8f04b17d862f294eff7b78c3e2ac19099032850e96706e661685812545ccf0ae2ef138afdf88c1c90dfcdac6fc323c694ff572819f2d80c71f2bc8855511015d2825e45", 0x5a}, {&(0x7f0000002280)="1a22db24d3b49a07f326806dc20e6ce3884c7e692a72def3eb2ac0bb05bd3b62f3ccbbc029ec76b56eb03ea02c927cc66685c8ef4b9b4452d68b5d792e2aefb48ad80fdd9adfbddb01ecfebcf8273a2a975880b38f9e0fef5308dff76cc27b6c49e6c1bc892ede7225a20bbe2217d2ed0cf2cee8fd2f68ef", 0x78}, {&(0x7f0000002300)="09fafaed87c8a85c4f63", 0xa}, {&(0x7f0000002340)}, {&(0x7f0000002380)="ea30784df17c71ffce15158a743e2a8d884c7b092ce7fe8d64ab92f3041c29c3521d10bca07cd20bb9d7ac6f967ba25881e40740faaa2ae6cbf4bbe4cf296334f5d698988b2422349872c44c71cf89f99feb0f54b6e1cf7cd8f1b896ea0057b912c4790944424986fa64d34794d05437fd20", 0x72}, {&(0x7f0000002400)="8ef6b2f0e03cb252f90e8cc9bbf9548fe2bf1086b2ec3f6d469d6d050b612c9db0e7de929ec2ec6b26207c773f7802c51bbfa166f180e060a61ad588cbf213789626957268c028ced0ee5b3619287bac87ac215bef0316ec7f79f60c1db6a8b020bd5020ec7f6b5b773adb674b87308ca2fd38e7cd63e39160817ddd997a242d7c1f18c3b1fd6326b440fe7e7367efdb6182f0146c35c9a457019c7ce95b62876350e59fcd00294c1e81d63e71c88f3cfec1b6d51ca95d30dc9f1c70a5f6931902230876", 0xc4}, {&(0x7f0000002500)="e4b37da4cb1248cc5cbaf94026d51b1bd9c5efa5d36a9db4e8b62e23729e10eee3c15e42e3f10bcc14b8ab6190d6e647a4cfc87ec5c921fba8189c832ece9928d54199bf1cd269d58b0d1c2efd58dc48b01aea5aa3a21debe97fda769dc4ddaecf064ac5bdef726812fe183ff0e6fb92f64e1534077437041e55fa8c4dd5b4a4a6f5a571fea2bdcb1fea89e31dc7bad13da0524ca1b044a096cf63d1f50f890b0913ffe6b81a8a9a31fc9f267a92ca72568537f6e12586ea24595dbd61d4431952419e21a96f16418ab2440f645ef54f3ab112ba2da9631b79b4715f8af32a10ca90", 0xe2}, {&(0x7f0000002600)="a32385f9e0e403743ddcf07d54fd794201ed34d922c07d3f03fb1b82d3e85d3e8878e49f0cd00b05a615b995c5bd879fc500cf95051648a306e803284638dad54cb88f3059b6fc398828852d0e4fe68e5efb38b312450f0d22caeb64cd931a9bd686c1787b23565adb3e2fa3789a1aa424126380b6f4e823b83cac72134fe0303c3aa90f0cb373e961114e7d5900eab1cc43294a", 0x94}], 0x9, &(0x7f0000003c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @local}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0xb, 0x48, [@dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @lsrr={0x83, 0x17, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @local, @local]}, @ssrr={0x89, 0xb, 0xb6, [@local, @private=0xa010100]}, @end, @end]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x20, 0x3, [{0x2, 0x2}, {0x5, 0x3, 'u'}, {0x0, 0x4, "b5a5"}, {0x6, 0x11, "cc7dae61901efd9c6c3ef565835926"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x52, [@broadcast, @loopback, @rand_addr=0x64010100, @private=0xa010101, @local, @rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xa9, 0x0, 0xc, [0x1, 0x6, 0x2]}, @rr={0x7, 0xb, 0x59, [@remote, @loopback]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x180}}, {{&(0x7f0000003d80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003dc0)="f8439f30317ca6e6421296b99dd1e89f5a46af7976736bf9c965460b6fc455656fc60f2af67adea514c2c3a4ba5d5e50dd74a73bde91e6fa07ecf1c2be629db69e3dab05b44f061e7559e038ddd6c9d128648d49564c29acdda4c2e109ed9e6b607674f0329d273f5d00bf1d4350a2bb6d04a35fae222ce6ed1a81300f2bc234403107ae8cca59d94c35fb0d199d9025523f6ba3269d0f888c564b5ef77dc63e9e1ca72825be78f69ae0a3fd1c2fd32a2de2af2fb4bfe913e062dba4916fc37ead1ca065b65bbd915ac9bc07c9", 0xcd}, {&(0x7f0000003ec0)="88baecb4aa3909110e7c6bd95ebc36feb0aef962226878b5624ea3cfec41d6dd3c9ddc3c49cc8728e88b83df1db495ee778f63b88e76ac20c97350cafa38bba91592a8258ccbe083fc0cbcfe5c16337d05d979a63ddbe6e0a8c27e3bc74eca4d2f4c9ea93f200b0ae59229a9228ba33bfb752f0d3a9c30940b9238a6189196327319cb683e826a2c19ab67da6f357b985b1a17e08c43ccb99ec403", 0x9b}, {&(0x7f0000003f80)="9015ed7f565f8b504f0eb6b5e776c46328276e00abcd8e78c3540d7e5f0df76a22b53c5e59dab15a7aba01d76d7118c63238af935949f60f3eb844b88408e56cb287d9bfc2ea258167b48509e4001f99470d93db1c2eadb61eac3e2239d0f1fd96c9cedcaea3baa5a433fafd4296fd6b37c4e26ebda6a1155f32707c04cb26a53f946704bd457860df0e8b6f487265e648a7931b5d8b4ac0ca", 0x99}], 0x3, &(0x7f0000004080)=[@ip_retopts={{0x70, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0xa, [{@remote, 0x2}, {@empty, 0x200}]}, @rr={0x7, 0x1b, 0x7a, [@multicast1, @private=0xa010102, @rand_addr=0x64010100, @remote, @empty, @local]}, @timestamp_prespec={0x44, 0x2c, 0x7, 0x3, 0x1, [{@multicast1, 0xc3}, {@rand_addr=0x64010100, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x739}, {@empty, 0x7e4}, {@multicast1, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x70}}], 0x4, 0x4000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037, r3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x700, 0x5, 0x4, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x5, [{@local}]}]}}}}}) r9 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000300)) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r9, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x81, 0x3, 0x401, 0x2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x302, 0x101}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) 11:19:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x1c99cd1b}, 0x1c) 11:19:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 11:19:13 executing program 1: wait4(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000e1b72141a494f2f6fadbf81996979997cbeae18d4f6ff56d177bfd5a66574cac7c23694a977694e300", @ANYRES32=r1, @ANYBLOB='e0\x00']) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x14048010}, 0x8040) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff0000002e2f66296c653100"]) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x88, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r6, 0x300, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x391}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x94}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x42a5, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc, @local, 0x80000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9d1b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004015) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) openat(r7, &(0x7f0000000000)='./file0\x00', 0x20000, 0x110) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 11:19:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfec00000}, 0x1c) 11:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = epoll_create(0x8) lseek(r1, 0x401, 0x4) [ 2351.200666] FAULT_INJECTION: forcing a failure. [ 2351.200666] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.202101] CPU: 0 PID: 11125 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2351.202937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.203961] Call Trace: [ 2351.204287] dump_stack+0x107/0x167 [ 2351.204728] should_fail.cold+0x5/0xa [ 2351.205191] ? create_object.isra.0+0x3a/0xa20 [ 2351.205754] should_failslab+0x5/0x20 [ 2351.206218] kmem_cache_alloc+0x5b/0x310 [ 2351.206714] ? mark_held_locks+0x9e/0xe0 [ 2351.207231] create_object.isra.0+0x3a/0xa20 [ 2351.207763] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2351.208384] kmem_cache_alloc_bulk+0x168/0x320 [ 2351.208944] io_submit_sqes+0x6fe6/0x8610 [ 2351.209466] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2351.210071] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2351.210657] ? find_held_lock+0x2c/0x110 [ 2351.211164] ? io_submit_sqes+0x8610/0x8610 [ 2351.211698] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2351.212288] ? wait_for_completion_io+0x270/0x270 [ 2351.212877] ? rcu_read_lock_any_held+0x75/0xa0 [ 2351.213441] ? vfs_write+0x354/0xb10 [ 2351.213895] ? fput_many+0x2f/0x1a0 [ 2351.214339] ? ksys_write+0x1a9/0x260 [ 2351.214802] ? __ia32_sys_read+0xb0/0xb0 [ 2351.215324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.215960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.216587] do_syscall_64+0x33/0x40 [ 2351.217039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.217661] RIP: 0033:0x7f2aef7e0b19 [ 2351.218113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.220362] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2351.221299] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2351.222174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2351.223053] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2351.223936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.224803] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:19:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 11:19:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2351.266882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2351.277818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:19:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x40000000}, 0x1c) 11:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000140)=""/193, 0xc1, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) sendfile(r0, r1, &(0x7f0000000100)=0x4, 0xfffff7ffffffff83) 11:19:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xff000000}, 0x1c) 11:19:13 executing program 1: syncfs(0xffffffffffffffff) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000000c0)=""/138) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2351.360009] FAULT_INJECTION: forcing a failure. [ 2351.360009] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.361538] CPU: 1 PID: 11119 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2351.362376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.363397] Call Trace: [ 2351.363722] dump_stack+0x107/0x167 [ 2351.364167] should_fail.cold+0x5/0xa [ 2351.364631] ? create_object.isra.0+0x3a/0xa20 [ 2351.365186] should_failslab+0x5/0x20 [ 2351.365648] kmem_cache_alloc+0x5b/0x310 [ 2351.366141] ? mark_held_locks+0x9e/0xe0 [ 2351.366636] create_object.isra.0+0x3a/0xa20 [ 2351.367246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2351.367866] kmem_cache_alloc+0x159/0x310 [ 2351.368374] xas_alloc+0x336/0x440 [ 2351.368808] xas_create+0x34a/0x10d0 [ 2351.369266] ? kernel_text_address+0xf2/0x120 [ 2351.369816] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2351.370452] xas_store+0x8c/0x1c40 [ 2351.370893] __xa_store+0x164/0x2d0 [ 2351.371397] ? xa_delete_node+0x280/0x280 [ 2351.371906] ? trace_hardirqs_on+0x5b/0x180 [ 2351.372434] xa_store+0x31/0x50 [ 2351.372843] __io_uring_add_tctx_node+0x1cf/0x520 [ 2351.373428] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2351.374073] __do_sys_io_uring_enter+0x146f/0x1890 [ 2351.374669] ? find_held_lock+0x2c/0x110 [ 2351.375286] ? io_submit_sqes+0x8610/0x8610 [ 2351.376418] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2351.377684] ? wait_for_completion_io+0x270/0x270 [ 2351.378943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2351.379635] ? vfs_write+0x354/0xb10 [ 2351.380091] ? fput_many+0x2f/0x1a0 [ 2351.380536] ? ksys_write+0x1a9/0x260 [ 2351.381000] ? __ia32_sys_read+0xb0/0xb0 [ 2351.381498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.382135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.382764] do_syscall_64+0x33/0x40 [ 2351.383279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.383902] RIP: 0033:0x7f61c5901b19 [ 2351.384355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.386584] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2351.388049] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2351.389856] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2351.391670] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2351.393486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.395306] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:19:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x40020000}, 0x1c) 11:19:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) sendto$inet6(r1, &(0x7f0000001400)="256feff6bb73e51b2f22d34dca1eef6365103801490d3f775ce75a54d8c0e510296744bbac5a18c0d4b98e7e0cf1848c4a2b35012038785600e816e749101813839549f60dad5d74c42868274b41a11d430d2295d462", 0x56, 0xc0, &(0x7f0000001480)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xedc}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037, r3}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r5 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x309801, 0x27) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001340)={0x0, 0xfffffffffffffffd, 0x96, 0x3f, @buffer={0x0, 0x5d, &(0x7f0000000140)=""/93}, &(0x7f0000000240)="d75e9a9f654a7d6e3b1dc5d6576b3d2fb885feef7b35adf67abe6cc6496a711204ad13c03eea855284076719565d730c5dd85389124ea083fbb017d0d5f0bfb531c696752c847c26329878853d52acdd41a062f3ba1841db90f862709594742505edd48ddb05bd42d0007b7d2ba8b12f89f7361ba0c5c46e85b1e6dd7df6b173fded2749049cf79d4437ad7a819ba299dadd9330a73e", &(0x7f0000000300)=""/4096, 0x7, 0x10, 0x3, &(0x7f0000001300)}) 11:19:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xff0f0000}, 0x1c) 11:19:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 11:19:13 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client1\x00', 0x0, "0e497603f1df4293", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) 11:19:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xffffff91}, 0x1c) 11:19:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x4, 0x0, 0x8, 0x0, 0x8, 0x40083, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x600000000000000, 0x400}, 0x0, 0x2, 0x40, 0x9, 0x200, 0xf3, 0x2, 0x0, 0xc15, 0x0, 0x3ff}, r3, 0x9, r4, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='coredump_filter\x00') r7 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000300)) r8 = syz_open_pts(r6, 0x24500) ioctl$TCGETS(r8, 0x5401, &(0x7f0000000140)) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="ff0000002e2f66296c653100"]) io_uring_enter(r9, 0x3fcd, 0x5666, 0x3, &(0x7f0000000100)={[0x4]}, 0x8) pread64(r6, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2351.553836] FAULT_INJECTION: forcing a failure. [ 2351.553836] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.555338] CPU: 0 PID: 11170 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2351.556264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.557260] Call Trace: [ 2351.557585] dump_stack+0x107/0x167 [ 2351.558026] should_fail.cold+0x5/0xa [ 2351.558489] ? create_object.isra.0+0x3a/0xa20 [ 2351.559044] should_failslab+0x5/0x20 [ 2351.559769] kmem_cache_alloc+0x5b/0x310 [ 2351.560286] ? mark_held_locks+0x9e/0xe0 [ 2351.560783] create_object.isra.0+0x3a/0xa20 [ 2351.561317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2351.561937] kmem_cache_alloc_bulk+0x168/0x320 [ 2351.562498] io_submit_sqes+0x6fe6/0x8610 [ 2351.563026] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2351.563669] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2351.564259] ? find_held_lock+0x2c/0x110 [ 2351.564755] ? io_submit_sqes+0x8610/0x8610 [ 2351.565287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2351.565876] ? wait_for_completion_io+0x270/0x270 [ 2351.566466] ? rcu_read_lock_any_held+0x75/0xa0 [ 2351.567031] ? vfs_write+0x354/0xb10 [ 2351.567513] ? fput_many+0x2f/0x1a0 [ 2351.567958] ? ksys_write+0x1a9/0x260 [ 2351.568422] ? __ia32_sys_read+0xb0/0xb0 [ 2351.568920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.569559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.570187] do_syscall_64+0x33/0x40 [ 2351.570826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.571653] RIP: 0033:0x7f2aef7e0b19 [ 2351.572108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.575038] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2351.576040] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2351.577104] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2351.578345] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2351.579230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.580276] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:19:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x4714da09}, 0x1c) 11:19:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 11:19:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:27 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 11:19:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="000000160000000000000040", @ANYRES32=0xffffffffffffffff, @ANYRES32=r2]) fcntl$setlease(r3, 0x400, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000100)=""/15, 0xf}], 0x6) write$P9_RLOPEN(r3, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x4, 0x3, 0x5}, 0x1}}, 0x18) 11:19:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfffffff5}, 0x1c) 11:19:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x50000000}, 0x1c) 11:19:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 11:19:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x17) 11:19:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2365.251260] FAULT_INJECTION: forcing a failure. [ 2365.251260] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.256743] CPU: 0 PID: 11195 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2365.257580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.258580] Call Trace: [ 2365.258908] dump_stack+0x107/0x167 [ 2365.259352] should_fail.cold+0x5/0xa [ 2365.259850] ? create_object.isra.0+0x3a/0xa20 [ 2365.260409] should_failslab+0x5/0x20 [ 2365.260873] kmem_cache_alloc+0x5b/0x310 [ 2365.261368] ? mark_held_locks+0x9e/0xe0 [ 2365.261862] create_object.isra.0+0x3a/0xa20 [ 2365.262394] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2365.263015] kmem_cache_alloc_bulk+0x168/0x320 [ 2365.263595] io_submit_sqes+0x6fe6/0x8610 [ 2365.264156] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2365.264760] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2365.265350] ? find_held_lock+0x2c/0x110 [ 2365.265847] ? io_submit_sqes+0x8610/0x8610 [ 2365.266380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2365.266970] ? wait_for_completion_io+0x270/0x270 [ 2365.267574] ? rcu_read_lock_any_held+0x75/0xa0 [ 2365.268160] ? vfs_write+0x354/0xb10 [ 2365.268614] ? fput_many+0x2f/0x1a0 [ 2365.269056] ? ksys_write+0x1a9/0x260 [ 2365.269518] ? __ia32_sys_read+0xb0/0xb0 [ 2365.270015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.270651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.271277] do_syscall_64+0x33/0x40 [ 2365.271764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.272386] RIP: 0033:0x7f2aef7e0b19 [ 2365.272840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.275073] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2365.276047] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2365.276912] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2365.277779] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.278645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.279513] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:19:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x2000001c) [ 2365.291908] FAULT_INJECTION: forcing a failure. [ 2365.291908] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.293367] CPU: 1 PID: 11202 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2365.294203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.295204] Call Trace: [ 2365.295531] dump_stack+0x107/0x167 [ 2365.296000] should_fail.cold+0x5/0xa [ 2365.296461] ? create_object.isra.0+0x3a/0xa20 [ 2365.297014] should_failslab+0x5/0x20 [ 2365.297475] kmem_cache_alloc+0x5b/0x310 [ 2365.297968] ? mark_held_locks+0x9e/0xe0 [ 2365.298463] create_object.isra.0+0x3a/0xa20 [ 2365.298995] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2365.299632] kmem_cache_alloc_bulk+0x168/0x320 [ 2365.300197] io_submit_sqes+0x6fe6/0x8610 [ 2365.300720] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2365.301324] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2365.301909] ? find_held_lock+0x2c/0x110 [ 2365.302407] ? io_submit_sqes+0x8610/0x8610 [ 2365.302937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2365.303531] ? wait_for_completion_io+0x270/0x270 [ 2365.304136] ? rcu_read_lock_any_held+0x75/0xa0 [ 2365.304700] ? vfs_write+0x354/0xb10 [ 2365.305152] ? fput_many+0x2f/0x1a0 [ 2365.305595] ? ksys_write+0x1a9/0x260 [ 2365.306059] ? __ia32_sys_read+0xb0/0xb0 [ 2365.306554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.307191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.307839] do_syscall_64+0x33/0x40 [ 2365.308291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.308913] RIP: 0033:0x7f61c5901b19 [ 2365.309366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.311618] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2365.312546] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2365.313410] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2365.314275] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.315139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.316028] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 [ 2378.630402] FAULT_INJECTION: forcing a failure. [ 2378.630402] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.631769] CPU: 0 PID: 11220 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2378.632703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.633653] Call Trace: [ 2378.633963] dump_stack+0x107/0x167 [ 2378.634384] should_fail.cold+0x5/0xa [ 2378.634827] ? create_object.isra.0+0x3a/0xa20 [ 2378.635360] should_failslab+0x5/0x20 [ 2378.635802] kmem_cache_alloc+0x5b/0x310 [ 2378.636302] ? mark_held_locks+0x9e/0xe0 [ 2378.636772] create_object.isra.0+0x3a/0xa20 [ 2378.637275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.637862] kmem_cache_alloc_bulk+0x168/0x320 [ 2378.638392] io_submit_sqes+0x6fe6/0x8610 [ 2378.638886] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.639456] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.640038] ? find_held_lock+0x2c/0x110 [ 2378.640528] ? io_submit_sqes+0x8610/0x8610 [ 2378.641033] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2378.641592] ? wait_for_completion_io+0x270/0x270 [ 2378.642151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2378.642685] ? vfs_write+0x354/0xb10 [ 2378.643115] ? fput_many+0x2f/0x1a0 [ 2378.643535] ? ksys_write+0x1a9/0x260 [ 2378.643974] ? __ia32_sys_read+0xb0/0xb0 [ 2378.645112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.646360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2378.647585] do_syscall_64+0x33/0x40 [ 2378.648609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2378.649801] RIP: 0033:0x7f2aef7e0b19 [ 2378.650658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.655741] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2378.656637] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2378.657457] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2378.658276] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.659093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.659915] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:19:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 11:19:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 11:19:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x5e000000}, 0x1c) 11:19:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:19:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:19:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80601) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000b1f644c149bd8c337d0f01d3a25f0100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x1, 0x105, 0x1, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x2, 'client1\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x0, 0x7e}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/187, 0xbb}], 0x2, 0xb1, 0x800007) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000040)=0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) 11:19:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 11:19:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2378.715666] FAULT_INJECTION: forcing a failure. [ 2378.715666] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.719547] CPU: 1 PID: 11226 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2378.721738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.724428] Call Trace: [ 2378.725241] dump_stack+0x107/0x167 [ 2378.726364] should_fail.cold+0x5/0xa [ 2378.727546] ? create_object.isra.0+0x3a/0xa20 [ 2378.728979] should_failslab+0x5/0x20 [ 2378.730154] kmem_cache_alloc+0x5b/0x310 [ 2378.731411] ? mark_held_locks+0x9e/0xe0 [ 2378.732681] create_object.isra.0+0x3a/0xa20 [ 2378.734050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.735630] kmem_cache_alloc_bulk+0x168/0x320 [ 2378.737086] io_submit_sqes+0x6fe6/0x8610 [ 2378.738387] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.739933] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.741444] ? find_held_lock+0x2c/0x110 [ 2378.742700] ? io_submit_sqes+0x8610/0x8610 [ 2378.744061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2378.745569] ? wait_for_completion_io+0x270/0x270 [ 2378.747103] ? rcu_read_lock_any_held+0x75/0xa0 [ 2378.748566] ? vfs_write+0x354/0xb10 [ 2378.749720] ? fput_many+0x2f/0x1a0 [ 2378.750845] ? ksys_write+0x1a9/0x260 [ 2378.752049] ? __ia32_sys_read+0xb0/0xb0 [ 2378.753318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.754971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2378.756588] do_syscall_64+0x33/0x40 [ 2378.757737] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2378.759338] RIP: 0033:0x7f61c5901b19 [ 2378.760516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.766320] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 11:19:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0x5, 0x3}, {0x8, 0x7986}, 0x5}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28048041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 11:19:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) [ 2378.768717] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 11:19:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2378.776240] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2378.784166] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.786392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.788639] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:19:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x2688, &(0x7f0000000200)={0x0, 0x3165, 0x4, 0x1, 0x9f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r4, 0x0, {0x0, r0}, 0x4, 0x5, 0x0, {0x0, 0x0, r1}}, 0x10000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2378.835025] FAULT_INJECTION: forcing a failure. [ 2378.835025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2378.836786] CPU: 0 PID: 11238 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2378.837709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.838841] Call Trace: [ 2378.839208] dump_stack+0x107/0x167 [ 2378.839694] should_fail.cold+0x5/0xa [ 2378.840228] __alloc_pages_nodemask+0x182/0x600 [ 2378.840840] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2378.841668] alloc_pages_current+0x187/0x280 [ 2378.842253] allocate_slab+0x26f/0x380 [ 2378.843227] ___slab_alloc+0x470/0x700 [ 2378.843776] ? io_submit_sqes+0x6fe6/0x8610 [ 2378.845025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.846510] ? trace_hardirqs_on+0x5b/0x180 [ 2378.847737] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2378.849126] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2378.850427] io_submit_sqes+0x6fe6/0x8610 [ 2378.851618] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.853069] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2378.854441] ? find_held_lock+0x2c/0x110 [ 2378.855598] ? io_submit_sqes+0x8610/0x8610 [ 2378.856867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2378.858239] ? wait_for_completion_io+0x270/0x270 [ 2378.859605] ? rcu_read_lock_any_held+0x75/0xa0 [ 2378.860967] ? vfs_write+0x354/0xb10 [ 2378.862020] ? fput_many+0x2f/0x1a0 [ 2378.863050] ? ksys_write+0x1a9/0x260 [ 2378.864167] ? __ia32_sys_read+0xb0/0xb0 [ 2378.865319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.866804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2378.868312] do_syscall_64+0x33/0x40 [ 2378.869364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2378.870819] RIP: 0033:0x7f2aef7e0b19 [ 2378.871872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.877214] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2378.879375] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2378.881458] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2378.883484] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.885548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.887574] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:19:41 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f00000000c0)={0x40, 0x0, 'client0\x00', 0x1, '\x00', "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x4}) 11:19:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x91ffffff}, 0x1c) 11:19:41 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) getpid() r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/snmp6\x00') r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() fcntl$setown(r5, 0x8, r6) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() fcntl$setown(r7, 0x8, r8) ptrace$poke(0x5, r8, &(0x7f0000000200), 0x80000000) fcntl$getown(r5, 0x9) pread64(r5, &(0x7f0000000180)=""/92, 0x5c, 0x800) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x81, 0xbb, 0xa3, 0x3f, 0x0, 0x80, 0x41080, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x80}, 0x18220, 0x6, 0x200, 0x2, 0x1, 0x5, 0x801f, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0xa) pread64(r4, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:19:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="dfd719841db25b5f8a419b209d0505b2accef7b129c4bd2f368c3b9631c4060000000000000045dd9532a606b2a6e4665f4c635e3d84ace63eadf58c366d2fb6ac9d19bb645601", @ANYRES16=0x0, @ANYBLOB="000a2abd7000ffdbdf"], 0x18}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10080, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2041, 0x0) 11:19:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f000000a1c0), 0x1, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f000000a200), 0x1, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() fcntl$setown(r7, 0x8, r8) fcntl$getown(r7, 0x9) r9 = accept$inet6(r0, &(0x7f000000a240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f000000a280)=0x1c) sendmsg$netlink(r0, &(0x7f000000a400)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f0000004dc0)=[{&(0x7f0000000180)={0x24, 0x32, 0x8, 0x70bd26, 0x25dfdbfd, "", [@typed={0x4, 0x93}, @typed={0x8, 0x4a, 0x0, 0x0, @fd}, @typed={0x4, 0x80}, @typed={0x4}]}, 0x24}, {&(0x7f00000001c0)=ANY=[@ANYBLOB="940000003800000229bd7000fedbdf0200000000000000e1a36cf45feb568a991a0b6dcc2ef3450414bc34a47252c6ba00e5968f7ee46a1c3a15099d64ed5ec7a8037cfb87b16ae3349db37dde5a887c056acb1080d8574958a771e7d9520723cd6b6552a42cc886c9b1a3e900572d1db36b27bc262da8e0ab5f6ed3e3220818c257d30bcf5ea459bc2a0cb424d2606015000000"], 0x94}, {&(0x7f0000004e40)={0x2740, 0x3a, 0x8, 0x70bd29, 0x25dfdbfe, "", [@generic="ae2395b553d464fe2c503a13803c951ad6d70795748ae9befbc3193eefd0ab3b4d368b8aa67666fb9272eab5a1b2627e62ce1133c05b0574c44e637fbd0b94a420a6b5a1c054e1666a530fb3a2ad3853f0c1d89ed3d87c13fc248dfb8ea2431502a674f97179e4da676f263ac4c3f0e7ebd281c1a64dc5c5cac525cc64", @generic="c00d48f6a846626d2d0c8ab9019f3ced315241ae6d577659234ab795a3adf0ac6b607d9f131b34418604ff5061ebfe8e954e0a8c26669322730d5c70011b0f1c2bfa1c2a6353a63dea227126e701110e15ad72d1a470b10e10fa9d6f38e10d4b7db2fff5c2cc853f3809d6669fc76191", @generic="eed5cacacdd8673d84bd9cbf0cc7036fb9ca59b06ce49a3d2d3bfcfa7cebf54564f857f34bf5c967c05a50d967c00d06f196986cdfecf5c262725bcad478b726085ff6dda06fdd57964bb046938bc5df97733660fac6c612424bae24683ec7564b673558f968597782f9f70a9ea9127d2ca8be87a37b0075ebee3c1dae67682fd5652973c94a5114d3ad33e00d0cfb", @generic="ca8f0cc097f81b85c1cd972e664354f0337998a9820c098f3d3e433672cc629cdb43a81a29b882b068c0fc9c7aa73ac4fc0200f011fe68320557f2ee81a59525407100eea201a27416d744c19d4de2e463383ccd6998d483cc6c2e482bb70f3692cf78b7147799f7ea4bf07f1a657dd31d550244a2d5e7e6781faae9e8c677c827d1ed9b43cd9029e96445d579a659b92186cd204fc2f95469a5db284be419471b5f0c0e4c9d728fb8f43323eb1abb1669f8ccf4390a61c733fbdd30b6cf79a3a82e0f9f561ff8428a61a4f521483abe77a924", @generic="f9f48d2bd38bd37caa1fcb348549a26df8bf8f12e175b0a8f1b7927d8267953e64bc9a776ae4f3f3d64bcc25053b3407b6860fb143dc1d2ffcb5d83f535a2316b5271a65ee3de40803a8d299e3ebb936afb6c8912e050e10a03b18", @nested={0x1004, 0x78, 0x0, 0x1, [@generic="107318b3a9d66a70174bc32b23ec43c470434ce2eb063cc6136f6584338797520994f52947d1664957239a74bfb99d818ada2466adebf2c26eaa1a47e796b751fdb97998085fdb0643f337d2e407b4f9f475edde5c4945fbf8b4ceab39069040f1a30aac605f71ef9176aafa6577bb899a1c8989f82a7007acbbd5539d0371e523e0dc879ca831d6ca9faa2929c43c31c0a5a4436e750676dddadc95019629a765db12936fe48ebf9ef997f6ef0a16c9d13775011317294eb163c74898f6d3ee7ca23e892471697729f8b1c0866ff0220afb52cc296c94e293ca5266cca33d08bbb5a33316d205196c6661644c82a3b59430703801cb023d633b30a6c0663a41823bb95ec2bc6b3f4293138342a2e52ad2e6d942277220bc85ebf9f70c30f93f01ca161672f7c6d3be2ff42752cbb6fe955d8428a2df7be95660b3d7b202f00f4dec7600a955051b7af15a8307e33231f8377e759b0950ec05ac263c2ad7f6369f899b2e4f5d38e7fd9b28e4837dc72e8dd4876ee59d2cda8866f9766794c0e640aa531b5871e1847e45b2bf9f8e838c4ba0b4fadd9eedd3abb2862248d4ae24f8386ecc155b114a436d03c6f9476ca24ebe94341a3c04dd82984d009cca3361adea7f90611f2575eb23f2803dcc1abe0837b8a782f165a2818bc0e4bb63a0a7f1849efafb380bea028c0dddc871995f50f5741adc3b33d075665bef8f1f0e76323e4f3b6c8615a5ab5bfabfb9a2dcebe974f24bdb4423017ea74fadfbad87d81da832a5672dae54c33b7109a94f0c166efd80ee55c551eaea74560e8c40099a07980656c286ca341f05167b69e007fe20ed288eefe922ad40c1174e01c98643a511eb274b06796738c9d849286e9c6679eb6c86348c234b5663205c6b1ad0d1c282fece404ce784fe23dab93004154ac0651001074b33502f998c9a5657df8046c439bd5ab8a531c7e2846a2afdcda299e516ca155b570afe12193ccc89875e45596bf4938b2c96542d93b3775753ce7e377478bad126d130c1778f83afb13e9fe5bf5550b3c72f412bb5e9a9f794604d95c70c7001afe8c4de210f73f218fe3a6389e3fe6afbd1c90c5c4afaa6e8dfaea740635296d5c70872a493b68c91588e28fe16bc44bc4df92f67d51decd092d370755c11fc10411f16a23eade657c8cc113197c15bdfbe504cd9a29130f59dca77d10722c5c42d6f4facd7e2a4218a39da4cea4b5b29654153455af1e7f4582a7f5312996bc2fe5332c0e47a21ad9d319002de7dfb60e27b4b8a72272118652e46aba1aebb353de4b1fb8cbb201462373765ba560d67ae42891c947e8989d7b8c43ad5c7aaa5abddee1eaf4220346d2b341366284e4254a527f79cba93b81533cdc75192c066b5fc4da3fa47383d9378d253cde99c56a516e380171e063bfddf53e09cf33d8773e1c74efebd571c8d98bb61dc68814cf256c8a41a56e09467bdce97a31f02487e69170cf8142d0896ca2e38a183770bc1eafbf2e15fd14a998f47d0800821e73dd8b9132338bd93c116726a70941de612cd2cf36aaf4645a8bd402b0ed2f42b5524ab3c68c29fa627dc1ab23e8e386a6f89690f6679be8f0bfe2b25272f6e5ca70c9001410878bf12005c24bb3f47bf8539c43b6a3387381b9bb17f58a4cee54b57d25917b231bc1ffe349d6e2779ef5443fb2c646dc31e35505fc655a479bba77059d81e5d04cc2ee8a3ec85dc4012de74b638471dde87ae5898bb48f24b9a99b7c68363b78a657a98319c079d794464d8d606d3fe5c82fef989d35b181ced853ea37ed66efd8782c219113b54996e4f55663279fc8bf9b672ae867737bf8c4a046f0571a4dd3edac028c32b2f4c999cabfcca844f68fc87ce3ea6f372aa493c82628b7690110fe97f4e9c2034cf5129698ea3bc1bcd1de057dd7fda724305abf0ee3b675dc844800b46232a79cec6f56180f6360fab7f55cf1c7e05d463ff73e22dfcc5f20a161e33fc42e26cebbb56d774661f2dd80a938276b836b74f88df9bdb03e8518b4f052dcc4940b3848d36973075ea47a8cf8797d03cbf33eca75ea4f0d30e088f4d570f9c4a11b1cedefcfbb6b4c905525cf7ae3cb586f19e3f6510359ab269ca7cb83e5b773844532d15e44238ab85cff093c143d24ac3d3b62816d363c2f412bfba355f432a687fcb300e5b37fc5ff7d54047fcefd8e6fa444c3d7415749930f825eb8614aec57a143171fb0cbf055df372a8887a56eb960195ea4ef711bc8dfc7459210b8f90c94f5f200279a97dcb0eee3d60eb905ebc4233f0b88c6013385ab69cb9bae75cbe365b7395099247f130014fa3ea432dc14c300d6e790a641841498307be017de024e96ed50e5b963da4a665047c4a045329940fea979fdcc0992005ece74d539d61560b8f46b32e97330d4559db1c35dfd9b1e1d399378aedd0aba2490ecaf79e5c30c7b3564dcd989a4c8335c37a7f0d75eb8dfdf7bc41c4645d54d2f8f5ceb124792a4b9fce3aa2e6176abeb31b07299e84e83e59ebdc41efeec85eb1fac4b228fa244338d08612480f1afbb4e8a324273b8ae67995012c26bde33382cb19f9d8b80275bc335320de50bda6cf07fa6014ccf7f55ec44a6ad78ba3459018cf2ffbda6cf122f56e3f8cf5fd2d7c24ac7d4e8e039ed9e8a6054ed0084f9b4029cc0b989a233188eb0deecd652331f2a7e8093bcb7806ae7086ccf12a12ce1990c65ef72dd7f2c873619f0f8829fb31abc61ca64bfa4b9f6da52724f50124b11a567c9322b3a7b36dfaa1f1fe85c759915848524447f6a37c73173f54698354eafbd53b32d80aa8e20943a0c8204fe32ef7113f5ec4794958e3b6ce48c61830663a634d5ff41c24944c58e7d40c08af445790bf552e34f15a89a813e4b3fe67a0946036b55d29a094acc986be051ee5e66b10cceaf751405fd46a57ab640c66b6822023f13eaf7ee75e24d4fa99ba7369595ee8ee9d2826fed0d91dac34df135b2875f90f30a0e3933afd99ce758f53eb865811adcfb416082dfac2544157e5a477ad5dea3b9b39e07b4595cdf727813a6d18490db098cbb8e432da5379d2f76dbc1a7a36d8380b0b63f8757aa568b9b0925b494624e9af566fd5f93193b88bfafb263da9c5a3c96b7b946585e091836d5d8a6d4bae14bbebc8b03daab86c2418c7b4bce74dd93e95ac7466e23eadb015372ce2aaabe26fc02452c6a88622ccc352e080146d200f86fd8a1bd2c4111c848fce7337f793f9e52e6d5ed4bb5a5c4da6ad9c4f9ce163888d97ee6cbfcf34467a4641094e95b38e65576cd0cdd01683439bd88041451fd9fa20ee8c6fdf8c732c6eae20e8faf1434cbc78a7f28e88258dd389348e6b62c9e4e743db5f50e63cf9ad5e38681c7d258329c6f8806f530613807c54e6a03a29503d14bd0929fb09cbb2374463d09d66063928c84fc2417a13261bbfcae3ecec9735ef802281cc578188126f959c8275e2ee9cba0abd38e9ab6cc73a681a57efe264d326adb86409488929db83ad4aceb94c9cb42120ba4f78f524917d36ffc8d9951560dbab140c21037f34eefc49c5629e9f79b0583d76742f59b99d7456d06034daf0a3b7cd93e0f92c7b5f0c8db5ad217f1df7752c730122f026dfaa01f3861f6be39b15ebb496f8f1e3453f5ed69fcdeb57f013ba301bb5791a14f778bcd105208d20b0fe0d9582fa9df98a9d0290c868b5a49f45c7d779cda23d0d8f3d9b339184b0a2d3dfb54d28b8697fc5ec71f7ccf6dac7f07b9c2f62bb6109b029ef0ae8cc166556bf17e06b74a626ff0f94a8e878ca6fdf7e29eea476f4e2b8fb8adb34c182c32c9bd9fc14b8e7f0e1bcc5b5e1245f36dcf4cd7b9743107930bc737bbc124a5ea9be41bc1a97ee7f2285e9a4b9157e925cdcb6a5746577bd8dc6134e1994dca35b2868c203d52a48efe4fbb4e98f32d218d0279c3a576df907adbdd71844e26a08cfd2bd757ea24ccac5a659656ea82eb1c8ba1da3f21f2977094a13a760af7ae389fd6f6e9f3a9b95c9a4c3c92450bf2eb36952e03fbd83d50a4b05af2905a129f15cfd5f24fc84b79c0f98ada6afed7450ee159667bd08119a8dab9b2dc6c124d5964bb0c53536f2bdabf9074cdf0cef798c529cc49acc0753835f648cc60e0d6ac1de39b051149715815cdab59c2de9995aef61adb9c500f9308235585857e30becd80f8d71e52604b8028327500be8ba6e6330a3234abac6a4099041744673d6a12bb3005f8e9fb3e53a743d829d64bc3ebe11003729a973c2fd62c23f7a9c288feee9d735142394003c1669561d1e6e4e8381cdb816358719eb340c11ff299a59390ccff4ef6fea9b5a9123021a53b33c9af8de98fa3cad2a7a8013260d37fa52e4f9269f69f73055e7c7c8816aca5b7e2200ebd63a646f5fba24a5cf64cc4fb6e887ce3b074837a9eb7f608243179e21b6b7fc99535418d0ea88505e7d80544a1b90f6744bbebfbc0dc993a3f23525f887729070372a79dd16dda362cac185727e35e204f8a3a7206eb754a0813f29203bf84ea7c9d1691ba1e9fb669a3b7e1c558c5a3756c890c29937daf79d1ebb84ba7a4c9a0023c238498733c923ea9e07961b9a23e9362bbd70ff6b0865c1100604e7140910b78fbecd068aa2d85d7c9daa32b72737393d1bab762d321ff8c6163365ddbaed10ae7035fe992c82b9f86a633b68be9ad2fb3cfa0f9442eef3f615f17c1c4924abe266586cdb81abd895705632e75eba802552e38ffea583eaeea0c64970e42d300a7f6f7ba36bdc92321d81f72b34c61e5f24484a5677e835f4ecf040f4c843b4060ec12f61cb8a13ea5c96345a496418fb713558317f10453a72ed0daf1feb5408d2636d780e867c32946626ac2b0600cf3da73b2d63907e2ad852bef366d903eeadd098bdf5ca739c278060f5d25f65e002c84899e8daea2993b2bc4a6349f1563c5ec6fe9b1c72b4063580b0838dbecebc40966740b89c77f1a45bb5662b3db98b22fdc67a15d083ef40b43829a12639eb9983a2b88b72b86bfe57ec7d273169bf5003ce85162be59e26c0d6c3e1f2c9b1f35c4ea4153c275b9b065fb278607604cd3b84dab5c49522c8f1dcaae9d8911cda95ee79e668175381566911072e4223b4a6cf7942ab79dd8a9e7e8507c1314796d8d1c1894ae0b69f4fb0416a4d384a58555b56a1828e2ef8c035e3372d4f619fe4327b1f3e4f855475cc5585114275f2487f3fb70a981e6b13ad19161caaef992ceee2d8e2fa549552fce78f76608a614c0b9130e035136020f9faae10acd92c311a000d689452de7cf948267736ca8a19a616682f344524a930952108ad6305f16af1d0416b3b78c6f0e7ae069be599e3f932023e0ef527875fae0ad25d2743779e47b93ff0bee88e5c01fa0b41dad594e93cf30a8e0df8598f4346b7f403f72afb6ca3d1afa018735bd6e7a32a13392725718fb444be77352a48e9a41ee7043943e99cc5cb9909ddfbec6278965f226538c7d66205c286397ea14a4449ed9ae2d8ee7208c2ac4268596c96b63166452f05537a81b443f1070d4a14658a325aed984a4998977faa150a598f1993a7cd7b66dd53b4aea6b73cd387d5ab632505f1ee0229a5ab5e67dbf7da4a219b196b3d98ca750b007c4cc087c206ee9aa9d4b8c4f3c724cc265454e83caeb51f6d098dfca514f8c52b8739c65d6121e96c23bc98b65ca3a12252d4c81ce92adb11d07e00f06d03d6d16225f1f6e87e444220c64689b02c1760b41aed38b1f8802ec0006d68ba5666711fdd60bc67da0e0a226e"]}, @nested={0x1113, 0x54, 0x0, 0x1, [@generic="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", @generic="8901b1e8b1d53fba7e34ec0c54dd915f0c5c2980af6eed80bf6addc48cca1258916595c7b5b03de7f808a92de850456d9c0e74787045b0", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x4, 0x0, 0x0, @pid}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @generic, @generic="b436f368fade0670e804746fd1533a64054b721e08cca61c6d9ef85ecf2fc4c9d3151bf27c78dd3f8c73ea8a98cb3e280e871a2a194ac957c5332c5ffd03390f95688cb87ca7deb5c47b7d19a20cf70717a34c18ee72c09124fa79ace5e3511191e44ef7b527dd2c9351677c6434af44a730e5cdb6b49ec789dc1066ccb4f0517432e19ca1bacc16843caf8b18dad40a093a18d47a8997a1d8dae379027c8dbcc190c22edea9d4027217e1a1", @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x221, 0x53, 0x0, 0x1, [@typed={0x5, 0x86, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x6}, @generic="eb74595c8a2d02f02e49d30e2a6931976f091cf48b4a363eb5c8d638642f3d133dff6c7db08ba0be4a2111aba36a243017975940fa5b5fa30b1624ae895d9942", @generic="0709e12a3cfd8260ead52e3c7b2953b419bf4ce313d025b9731f7640545b4e9dc14df13bda3cb8e7758a5a4c9ac1ced1ed0bd073b8cfee521eed4c906ec23e9c67aa74fb83753d4df5f415d5c8422475", @generic="dec30c5de10a7078832250936cc9dd2b92f7d892c963fda673cfd1967548e9c1287eb42b4aacfe26dd0dd77f99dc0c8c74c9ca5253033ed4e382586ba747facd1678c8f4ae0a3ec46f6815953ef6dab1da", @generic="da8b8e139f6a7167a85bf25cf6e95705e61817acdf90029e1379f05bfd86a0a571ef7f95b004e704acd16c3a81c911a707624261e6811e82f56c435503f5bf44170bf2e6080aa795b4c5d8b6a3e9", @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @generic="cddad70ddf88166a5cd73e7ed31babebceb0891041", @generic="4759aaa04fec3271f7a4d7418631d6013acd6b2eec057aa71a0e6548e4a70918ad6a98120e75fce1146632562573c893d29574dc31b20ad7cd3137cb8bfdd48d13547242d3bfae2ea389cda9d81e971755d6013e107d2e8dbd8053ec3d9916a5024e1d9a71ffdd14d0368a40f99196f985fd6f243a9a3ba59e85644955b65dfc246f96461554f0c08670d569037e4600c2179ac7106f7c6855aa9c8ef626414a4abca553fb51f427a63c8ecb8d78a924cf10c4a2c6c4dac0d44042b5c1"]}, @generic="94c92c74e4fafe4a34cc3f6febd393a3d9a86e0d6eab7316eb073c9f046329c79f15e2c7ce9ca06d8bbc81c6082e660c67ceb3eff6030415e1fdad9c1f0dea32a2b2298763bd1a73ac4c95388a700b6efc0e82f7a41323c691c0e9ee83dfa3fe98a64dcafd70c7e605416e02657ff9f91abaa8b004078887f8624328628305dc946568a8a8bbb7059a4a0fb0ccbd3b96b69e06e402fbce6e49ba4cd3e7acac3c798b45ac0a3b4225be1d5a5c087c2a51a43ff6595395a6ad1a71184e637a83b568df2c608a3db8bf13c834e564805a142bc73bb45a8f3162d8e09d0ac3b6b669a8ce5036", @generic="073b6ae1692e7af4f7ad8036fcd6aed6dcc0af9ae9da268754780293f69f76993e810e0e3af7315d208b0898fe0b5a43e70c5d4af49a358091c9b7b6468c088880a260d107f15766679b82983a3376e39b3aa2354abbb738a4d0d736c88435fadec7bb4dcdeb"]}, 0x2740}, {&(0x7f0000002dc0)={0x908, 0x14, 0x20, 0x70bd26, 0x25dfdbff, "", [@nested={0x29c, 0x22, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @ipv4=@multicast1}, @generic="fb58026c798ef7c29c700f3d5c818fbc3d34181a21567889ed9fd781b106786522da9be9b587844958145c16671280a392390547d62cb462e53ae2ed4f43d2b18d0ac41bdcdfab0ad2897b9ae04b62107974e07557ccd4eaf831de42ce7d8c0ba1b2250876d2a96c0f513b71303d59249aeffdaaaaf0f772dd7f1789c47b64e13eee5bf97018262d7d3e33ed109827972abaa71e8102d8c27e9456416161b0cb4731af8c1791be743d8c7944e9cef7de9651fe06f4ef11d65533d1483ee5b472171f7ac7a0b7b81576e34099e68a76f62921b6c70edd2c4272b60295ed", @generic="0f1221c1d11362cc8ae90d300acd781b5e2e4becbebc6e38761179d16f17ccefa24c13ae10794a0a0ef033ca380f55c98b98770f57ac30aaec24d3cd58d02ddb5176be89268f53870be543eaa47897394e115e7b8cb4202a972211ccdd4e17c212949f8540cf466f0b963ee976d63b35f4b66c4720b87311737a323751e6e5ad1f2a409db1ee8273f1dd34da103dc64658759ad2b5b24b35b1bb5c76b355fb767ef6f779d4fc94376936d3ad307195d5fa8d52d57d26800659ddc970a6d0abefcb0f1e2878962ea0fd33efe673c439916951f5654280398cc5", @generic="abf00961bf007f79faeb9c910d52097f1e1ba5640c01f9a04ef52fbaa96c82b632250b84046319e7252f6835da70c15cd8d562ab2403ad574163dd1a82d07616b88a6fd8ec6520a2532658f1d1b144f0b50a516f24ec08cbe7b5492140d77568c516d71017588470a8d0f272c78712e0e765a0d0113fb42f124aab2f25907cfa77b89a2780d7a5524baf486ad6ccf1bb0d106f9dcd923f0c677d2b48abd3ca385d42b3378df723e6d5187b108183b88eb8e0a223e1374461f42a777013c85fe6e089a3e821f35e4f5a3afca3490dd1c38834f98db0843dcea689"]}, @nested={0x9b, 0x95, 0x0, 0x1, [@generic="b42831528fd477a9bc08e02564ab8576f44d8027d2dc75be63ffcfdb438e5a6b38ebed49dd00e5cf170415a451bc", @generic="f15e791125dbcefa83fce45368fa6ab97422acf9dc59934e59bd353eac829beafef1e7ca31b223be89a1aaddd38fc4e9ffd81aa6fc1560e4af680629eb6b149264fcad25a2f982d5697c698e9fb3a8829fcbbf0581705bf33b0d0132cd20934dd5126528ca1c003635"]}, @typed={0x4, 0x4e}, @generic="c4640fb9e8bf7b4f9d60d2da0012eae1414f86b1873938df9e0248b20c3fd005077a9206c368345550105fe6bcf49aa0c06af147b1835556b3045e78c3f1f97f6feb047a6593c65bdaaf12a0f60b224f097e9eedf86a10af359af82c3817d84d05c9e7283aa4cdc10bc890a2b6ff4fa549376477c0710506b686fc29462750de61101d84209f0439779925137a949a49357f27fe29c8b0e4d30b3f8f58f771a53d7791397a7b8ac24dff63fa4989455dd5fa31189eef1ab91726e7f81b0afbd238d245228c9d8e45d6c050", @generic="06a96566002ef609002f21189e7bce896a8840019db25a752c8838a381ffc012644bb545c3b60a", @nested={0x25c, 0x4d, 0x0, 0x1, [@generic="8b42e9208f99068f49781037c7c05e756e178a67aab970bf40526b244925fff2ac2905d0d3c810ad4863191fc324975475af4b85798af047363875ffb6ce334ecfd3b49d76d713d1512bbcf89f43c99fd2ba9b4de43b5fb717e7c0823ec49d625b71fcc935a43ddae892ddac64c60ffc33dbe16339bc278650c3a932c5973793073e61dce7d43a64ec97109f12671bae", @generic="19276aadd6fd00cd1ea02a19d818db0886789a13d306c40f62b239b51ad3f2a0c28c0a50016c0908431fae35cbd3c948b13f70cb90787a25b7d35f99553e71be326c699e7415eec46692", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private0}, @generic="c05f5351851b87fc3e35febfe6e69f44b59dd51f880de57f7743bf3543557442c13a35951bef2e28793ef0abca89007b8615cf5b6a4215bce88dd7c4b39b2fc9d090d84980093b9e2620f6f1b7e8c3855eeaa2550d486d6db4af9a0134d51248cbd38f0ad358191a8ff1f40f8d03e174830c608afd18", @generic="9529a5dfb1e22283036d83dbdc3045e9eb34cb1676c6e2a4cb6e127897b0aa65266037f8fef98512603d2aee684a0fd3910ce78b9a3236afadeec587850fa0c429c37a2257b6c900f0884a486efff047798b86bbe3bb1adb6759cc5bcafcabbf436f537e02384009234576811774a46bde233dfa665bf5ded271a2160d3b013ffa2dad1931fbcd812658ec02e73cabf492d1c72fdc8432f13be9169e857f8146c77b5c94e117b8e2a4b78f36aef5dd9a813f926e159a97ce5fc97b6cdc401d3a", @typed={0x1f, 0x34, 0x0, 0x0, @binary="0390545c12db8433295576588c69b07ea6477671a158d784bfa410"}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x154, 0x65, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @pid}, @typed={0x30, 0x91, 0x0, 0x0, @binary="f3c6f69e5e2e47eb9a217d46befb8cea82a88ec3a1f4fc462f5e2ac9f853704807b1d4acb1f91b95d0dfd3cd"}, @typed={0x4, 0x2d}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@multicast2}, @generic="4a0f4ba58000b9806d0dfaf50d8275e28fd3fc1af47e20145fee98e762e00d6b9be2ab47b781d18842ce96942507dd1b70ffff3b71044c2035fd84c9feb51ec15efb358f8419147e698bf447679634b533a426e8af9bb9b98c7b750bbdc6300727082da6d7b8b6d7836c280a3f6320349789da9ffe80796aeac2a90677cccad955d18e73015342757465084c12ad28fba4c3ba856d", @generic="230b0e07ceafb7a08366e4365d7cbe3a72cd65839bf2b73e17eab403cf553c58ad18c8e8b57f544d0611487b48679f33ec3dcaf15f7b563f8bd43715fb2bd5b29f74da144bcc5ce0a1de4b9d2769ae0a103165c2d93844140ec1749338d730", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}]}, @nested={0x8c, 0x7f, 0x0, 0x1, [@generic="ed156b437098dd9342b0fcf063f4ceff2f18b7b1423d54f641a7381d7edc6cf68a00cb1cbb6dd8c126c106424cece243a94893d0e71605830ea48d3de4d8f6099b405b41d53bedbc247fae8e6bac239788f44934b32a421b121b66c0cbd499a678f1b6857c2b0db080963fb5ea3e5fe874846637", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @generic="bacab0fdbddfa130985fe69e0c4da0716e9a957490ef3cf8e40829aec5a48214a238ac7cc7104ae72d0a878e0d1285a7a3ccaba1f2fb1fbc7a2a2725fe4bb4e4119361eaf3254b5e5888d0d6a34255ad0fb5b51def18c11510de56be2c5c8e31e9eb7809f8787517fb53cc3bef16321f71998fe89bc0de7419c173f4514d07cbdbedd467870c6566e9ae8a"]}, 0x908}, {&(0x7f0000003780)={0x2c, 0x27, 0xe13c40ea3084bb14, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x17, 0x0, 0x0, @fd=r0}]}, 0x2c}, {&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00850001000000000000000000"], 0x1380}, {&(0x7f0000000280)={0x250, 0x1d, 0x400, 0x70bd27, 0x25dfdbfd, "", [@typed={0xb, 0x6b, 0x0, 0x0, @str='!(]\\,-\x00'}, @nested={0x22a, 0x7f, 0x0, 0x1, [@typed={0x4, 0x40}, @generic="d99244ef345725d538c9fb0b156a449f27701af83cb9625e149a1a6882681403e1993c5948292737e5871c292ddba4601d4b1bcf12bf440c2e827b2af7900ddaa1068c133455bcc0c82cda2474c7f1ba63c5776ed4b364be1ff4ce01a5ff05b7b0d23e44b5109fdb4d40aba6650d222e178148d1b304f0ad4347119ff5dccfca4f941a0c30d28b8175ce2dc65bee4f1ecaa737", @generic="3497af2239a604799647bcfea3794005df69d3c3530299341dfe1cef30b5640ffc5365b95910df8f0be4b7be7ab55857b3c0ba97574b2b3f584310f86471", @generic="53e7a66c13c0c78ea8176d0bdde2c69bc8cf91ab2970a9eca4a02e3322102a5950dbf6674022bd56dc674c43cf0bba61a5ff7cb681bab4604a6a6e332baf5145f4ad20120bb02313b040be656f0cb66dbecac48206e2e48f23b5572bdb935e9e278bf98f2dd337000b575c", @typed={0x8, 0x17, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0x73}, @generic="ed928c4cb7ca2a031a106c70ad85246fb9fe5545b5314cc6e8b0eb964084f7cdd037408405a0217fb63556fac3962b1d9beab7c24a67c878d53e0b9b21864c6bda0bd3ce2c3cd03c1721925a422f708c310efd7c0a27955310f0a7987b57ebe560f40c4ac64448741f63f92c47bf17602f24c64f771b4588b6b38a5f61fc8eb13094978fdf205a0333c8efe6542567cedeadd0b0572a38086545702762ef2c854b46497f5c790d035ad790a53a43c5f59bed00298dcfa2f6cc0771449fe42028982e172b358010c446ec04324914c026c8e16d14abe36ad7982c"]}, @nested={0x8, 0x68, 0x0, 0x1, [@typed={0x4, 0x6f}]}]}, 0x250}], 0x7, &(0x7f000000a2c0)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r5, r0, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r9]}}], 0x138, 0x20000002}, 0x4004010) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:19:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 11:19:55 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x1}, 'port1\x00', 0xd3, 0x40000, 0x400, 0x9, 0x3, 0x46671caf, 0x9, 0x0, 0x8, 0x7}) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000180)={0x4040, 0x0, 'client0\x00', 0x0, "10565d0700", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x0, 0x6}) 11:19:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 11:19:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xe8030000}, 0x1c) [ 2393.538270] FAULT_INJECTION: forcing a failure. [ 2393.538270] name failslab, interval 1, probability 0, space 0, times 0 11:19:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000100)=0x7, 0xfe29) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080001, 0x4) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x2, 0x2000000, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000640)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="015900ff0099000000000000", @ANYRES32, @ANYBLOB="00efff7290a44b57da182effff007f0000000000"]) recvmmsg$unix(r2, &(0x7f00000002c0), 0x0, 0x40000042, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000240)={r3, r4+60000000}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x1d79, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) io_uring_enter(r5, 0x1cd3, 0xeb55, 0x3, &(0x7f0000000280)={[0x1]}, 0x8) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) readv(r0, &(0x7f0000000400), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2393.539705] CPU: 1 PID: 11265 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2393.541215] FAULT_INJECTION: forcing a failure. [ 2393.541215] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.544701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.544706] Call Trace: [ 2393.544725] dump_stack+0x107/0x167 [ 2393.544744] should_fail.cold+0x5/0xa [ 2393.548936] ? create_object.isra.0+0x3a/0xa20 [ 2393.549598] should_failslab+0x5/0x20 [ 2393.550194] kmem_cache_alloc+0x5b/0x310 [ 2393.550716] ? mark_held_locks+0x9e/0xe0 [ 2393.551271] create_object.isra.0+0x3a/0xa20 [ 2393.551904] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2393.552539] kmem_cache_alloc_bulk+0x168/0x320 [ 2393.553168] io_submit_sqes+0x6fe6/0x8610 [ 2393.553690] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.554354] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.554993] ? find_held_lock+0x2c/0x110 [ 2393.555508] ? io_submit_sqes+0x8610/0x8610 [ 2393.556123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2393.556740] ? wait_for_completion_io+0x270/0x270 [ 2393.557381] ? rcu_read_lock_any_held+0x75/0xa0 [ 2393.558005] ? vfs_write+0x354/0xb10 [ 2393.558460] ? fput_many+0x2f/0x1a0 [ 2393.558954] ? ksys_write+0x1a9/0x260 [ 2393.559417] ? __ia32_sys_read+0xb0/0xb0 [ 2393.559996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.560670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.561347] do_syscall_64+0x33/0x40 [ 2393.561862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.562484] RIP: 0033:0x7f2aef7e0b19 [ 2393.562988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.565351] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.566337] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2393.567253] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2393.568199] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.569128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.570056] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2393.572001] CPU: 0 PID: 11261 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2393.572937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.573982] Call Trace: [ 2393.574370] dump_stack+0x107/0x167 [ 2393.574814] should_fail.cold+0x5/0xa [ 2393.575335] should_failslab+0x5/0x20 [ 2393.575799] kmem_cache_alloc_bulk+0x4b/0x320 [ 2393.576463] io_submit_sqes+0x6fe6/0x8610 [ 2393.577030] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.577680] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.578341] ? find_held_lock+0x2c/0x110 [ 2393.578837] ? io_submit_sqes+0x8610/0x8610 [ 2393.579417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2393.580003] ? wait_for_completion_io+0x270/0x270 [ 2393.580709] ? rcu_read_lock_any_held+0x75/0xa0 [ 2393.581331] ? vfs_write+0x354/0xb10 [ 2393.581783] ? fput_many+0x2f/0x1a0 [ 2393.582277] ? ksys_write+0x1a9/0x260 [ 2393.582737] ? __ia32_sys_read+0xb0/0xb0 [ 2393.583292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.583924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.584675] do_syscall_64+0x33/0x40 [ 2393.585126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.585798] RIP: 0033:0x7f61c5901b19 [ 2393.586298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.588680] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.589659] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2393.590572] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2393.591490] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.592453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.593427] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 11:19:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xf4010000}, 0x1c) 11:19:55 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000040)={0xfffffffffffffffd, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x114, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xffff, 0x1c}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7d3b5cf83f1ac423adb831ac174b53dba4bc58dcea5093a6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22818972157baab0add756560f81a9a3d2094ce42096f55f"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6dd838139ad24714c87ee221efaecba2bd9fe20e31492"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c4d1d9044cfb3a086f60daad5dfedf7ee92dcb7d48b4759d"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e0ff34a29180f6e0f103300698bde870bad56f3106501b3"}]]}, 0x114}, 0x1, 0x0, 0x0, 0x8880}, 0x20000810) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:19:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x81, 0x5, 0x20, 0x0, 0x81, 0x8402, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x1, 0x7}, 0x80000, 0x5, 0x1, 0x8, 0x80000001, 0x8, 0x7ff, 0x0, 0x4, 0x0, 0xffffffffffffff80}, r0, 0x0, r0, 0xf) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x800) r3 = getpid() fcntl$setown(r2, 0x8, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000300)) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x32, 0x8, 0x70bd2a, 0x25dfdbfb, {0x15}, [@typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@private2}, @generic="2020096a7db2c83aebcfa678d62f96c07a2e"]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x14, 0x5, 0x0, 0x1, [@generic="fe83b21f23bfc4ca7f40bc03f497c3e3"]}]}, 0x30}}, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x4, 0x5, 0x3, r3}) 11:19:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x430b, 0x3c08, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:19:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 11:19:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xf5ffffff}, 0x1c) 11:19:55 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f00000000c0)={0x400040, 0x3, 'client1\x00', 0xffffffff80000007, "a5e49b299b28f2bc", "3130641fae2434f742addce7331800", 0x0, 0x200}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x16e4, 0xff, 0x8, {0x7}, 0x5, 0x80000000}) [ 2393.847701] FAULT_INJECTION: forcing a failure. [ 2393.847701] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.849252] CPU: 1 PID: 11293 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2393.850158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.851235] Call Trace: [ 2393.851589] dump_stack+0x107/0x167 [ 2393.852070] should_fail.cold+0x5/0xa [ 2393.852592] ? create_object.isra.0+0x3a/0xa20 [ 2393.853200] should_failslab+0x5/0x20 [ 2393.853706] kmem_cache_alloc+0x5b/0x310 [ 2393.854247] ? mark_held_locks+0x9e/0xe0 [ 2393.854787] create_object.isra.0+0x3a/0xa20 [ 2393.855369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2393.856043] kmem_cache_alloc_bulk+0x168/0x320 [ 2393.856675] io_submit_sqes+0x6fe6/0x8610 [ 2393.857248] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.857904] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.858543] ? find_held_lock+0x2c/0x110 [ 2393.859087] ? io_submit_sqes+0x8610/0x8610 [ 2393.859670] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2393.860313] ? wait_for_completion_io+0x270/0x270 [ 2393.860974] ? rcu_read_lock_any_held+0x75/0xa0 [ 2393.861588] ? vfs_write+0x354/0xb10 [ 2393.862085] ? fput_many+0x2f/0x1a0 [ 2393.862569] ? ksys_write+0x1a9/0x260 [ 2393.863076] ? __ia32_sys_read+0xb0/0xb0 [ 2393.863622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.864316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.864984] do_syscall_64+0x33/0x40 [ 2393.865438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.866062] RIP: 0033:0x7f2aef7e0b19 [ 2393.866513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.868788] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.869788] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2393.870723] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2393.871637] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.872592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.873528] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:20:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 11:20:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYRES64=r0]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800c00, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c771f0000003d", @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB=',access=', @ANYRESDEC=0xee01, @ANYBLOB=',dont_appraise,measure,fowner>', @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f74797065f110e1e43d6e65742f736e6d7036002c6f626a5f726f6c653d6e65742f736e6d7036002c736d61636b6673726f16a13d27232e2c7569643e", @ANYRESDEC, @ANYBLOB="2c657569643ddf698e97a03383401db9ad4ba7e00a666f1f3ffbd7cba0d8a33f9e6c011c14f789e58fbe90f11ff3c140868426c2f932123da211643bdd1a054cb919f4c38da91f2fa2190b4140ddda54d2e43a5be816eadb70749d5f87187079fa6f4cbacff0fbc62f660da62b8e6d5d2a7c489640d09d0964a15befa734a94c778ece899e710858bcc5077ddb", @ANYRESDEC=0x0, @ANYBLOB=',fscontext=staff_u,obi_user=net/snmp6\x00,\x00']) 11:20:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) write(r5, &(0x7f0000000240)="ec1a01ca9a561c9ef507dce23895e123c304cef8533fb4ec4e77e37ae2725540421c27e32490450ddd024a92deeb000b7d7de700e6e9c52e5495ecaa278d1e71414850956185fbbf55c3a26a126220fbdb45d891146d2bcd847a1d3df90fe5a1c51f8b8becb5fb939ca29d21704232e283790f41e455809f96b20bc8c1ed6e74ca9446ba2485b42ba6be1b2c1f067cfc8906c154734afa14acdde14c0f924b9831618d3cae8494010d13d925e4c6791bf225a268030a8707c7038c652c0fc9eb0bbda02906d71b1a819d67d58525489dbaa112e018ab3f1bf936523472f8bf53128f5ef1010cc03d927ccdcc85815483ec75368e223e8104d2", 0xf9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:09 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 11:20:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ftruncate(r2, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f662900000000"]) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x4c) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfc000000}, 0x1c) 11:20:09 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa29f35a14aeff010000331800"}) 11:20:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:20:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2407.141831] FAULT_INJECTION: forcing a failure. [ 2407.141831] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.143284] CPU: 1 PID: 11322 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2407.144129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.149164] Call Trace: [ 2407.149495] dump_stack+0x107/0x167 [ 2407.149939] should_fail.cold+0x5/0xa [ 2407.150408] ? create_object.isra.0+0x3a/0xa20 [ 2407.150965] should_failslab+0x5/0x20 [ 2407.151432] kmem_cache_alloc+0x5b/0x310 [ 2407.151929] ? mark_held_locks+0x9e/0xe0 [ 2407.152424] create_object.isra.0+0x3a/0xa20 [ 2407.152973] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.153594] kmem_cache_alloc_bulk+0x168/0x320 [ 2407.154161] io_submit_sqes+0x6fe6/0x8610 [ 2407.154672] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2407.155278] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2407.155882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2407.156470] ? find_held_lock+0x2c/0x110 [ 2407.156982] ? io_submit_sqes+0x8610/0x8610 [ 2407.157520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2407.158107] ? wait_for_completion_io+0x270/0x270 [ 2407.158696] ? rcu_read_lock_any_held+0x75/0xa0 [ 2407.159261] ? vfs_write+0x354/0xb10 [ 2407.159715] ? fput_many+0x2f/0x1a0 [ 2407.160158] ? ksys_write+0x1a9/0x260 [ 2407.160624] ? __ia32_sys_read+0xb0/0xb0 [ 2407.161147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.161783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.162414] do_syscall_64+0x33/0x40 [ 2407.162864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.163485] RIP: 0033:0x7f2aef7e0b19 [ 2407.163937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.166188] RSP: 002b:00007f2aecd35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2407.167113] RAX: ffffffffffffffda RBX: 00007f2aef8f4020 RCX: 00007f2aef7e0b19 [ 2407.167977] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2407.168842] RBP: 00007f2aecd351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.169721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.170588] R13: 00007ffe256d7d7f R14: 00007f2aecd35300 R15: 0000000000022000 11:20:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = clone3(&(0x7f00000003c0)={0x80200080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x19}, &(0x7f0000000240)=""/217, 0xd9, &(0x7f0000000340)=""/46, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x40, 0x2, 0x7, 0x0, 0x0, 0x80000001, 0x4844, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x1, 0x6}, 0x4400, 0x8001, 0x7, 0x4, 0x8ed3, 0x400, 0x7, 0x0, 0x200, 0x0, 0xffffffffffffffe1}, r1, 0x6, r0, 0x8) 11:20:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x58cd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=@fragment={0x2c, 0x0, 0x3, 0x0, 0x0, 0xd, 0x65}, 0x8) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x20, @mcast1, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0xa91f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x7, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0xfffffffffffffcfc}, {&(0x7f0000000040)=""/24, 0x18}], 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x3f9683, 0x0) fsmount(r3, 0x1, 0x4) io_uring_enter(0xffffffffffffffff, 0x18a0, 0x90a2, 0x0, &(0x7f0000000380)={[0x7fff]}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfe800000}, 0x1c) 11:20:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 11:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfec00000}, 0x1c) [ 2407.343973] FAULT_INJECTION: forcing a failure. [ 2407.343973] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.345720] FAULT_INJECTION: forcing a failure. [ 2407.345720] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.345751] CPU: 1 PID: 11344 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2407.345757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.345761] Call Trace: [ 2407.345781] dump_stack+0x107/0x167 [ 2407.345795] should_fail.cold+0x5/0xa [ 2407.345812] ? create_object.isra.0+0x3a/0xa20 [ 2407.345827] should_failslab+0x5/0x20 [ 2407.345840] kmem_cache_alloc+0x5b/0x310 [ 2407.345854] ? mark_held_locks+0x9e/0xe0 [ 2407.345872] create_object.isra.0+0x3a/0xa20 [ 2407.345891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.358594] kmem_cache_alloc_bulk+0x168/0x320 [ 2407.359161] io_submit_sqes+0x6fe6/0x8610 [ 2407.359686] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2407.360306] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2407.360900] ? find_held_lock+0x2c/0x110 [ 2407.361428] ? io_submit_sqes+0x8610/0x8610 [ 2407.361962] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2407.362551] ? wait_for_completion_io+0x270/0x270 [ 2407.363141] ? rcu_read_lock_any_held+0x75/0xa0 [ 2407.363704] ? vfs_write+0x354/0xb10 [ 2407.364158] ? fput_many+0x2f/0x1a0 [ 2407.364601] ? ksys_write+0x1a9/0x260 [ 2407.365080] ? __ia32_sys_read+0xb0/0xb0 [ 2407.365579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.366216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.366844] do_syscall_64+0x33/0x40 [ 2407.367297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.367918] RIP: 0033:0x7f2aef7e0b19 [ 2407.368372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.370629] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2407.371557] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2407.372425] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2407.373304] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.374171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.375037] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2407.375931] CPU: 0 PID: 11316 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2407.377571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.378745] Call Trace: [ 2407.379543] dump_stack+0x107/0x167 [ 2407.380104] should_fail.cold+0x5/0xa [ 2407.380602] ? create_object.isra.0+0x3a/0xa20 [ 2407.381266] should_failslab+0x5/0x20 [ 2407.381832] kmem_cache_alloc+0x5b/0x310 [ 2407.382376] create_object.isra.0+0x3a/0xa20 [ 2407.382996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.383651] kmem_cache_alloc+0x159/0x310 [ 2407.384253] xas_alloc+0x336/0x440 [ 2407.384714] xas_create+0x34a/0x10d0 [ 2407.385283] ? kernel_text_address+0xf2/0x120 [ 2407.385922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2407.386592] xas_store+0x8c/0x1c40 [ 2407.387152] __xa_store+0x164/0x2d0 [ 2407.387622] ? xa_delete_node+0x280/0x280 [ 2407.388219] ? trace_hardirqs_on+0x5b/0x180 [ 2407.388836] xa_store+0x31/0x50 [ 2407.389294] __io_uring_add_tctx_node+0x1cf/0x520 [ 2407.389968] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2407.390677] __do_sys_io_uring_enter+0x146f/0x1890 [ 2407.391368] ? find_held_lock+0x2c/0x110 [ 2407.391975] ? io_submit_sqes+0x8610/0x8610 [ 2407.392539] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2407.393239] ? wait_for_completion_io+0x270/0x270 [ 2407.393918] ? rcu_read_lock_any_held+0x75/0xa0 [ 2407.394511] ? vfs_write+0x354/0xb10 [ 2407.395050] ? fput_many+0x2f/0x1a0 [ 2407.395520] ? ksys_write+0x1a9/0x260 [ 2407.396068] ? __ia32_sys_read+0xb0/0xb0 [ 2407.396595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.397365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.398083] do_syscall_64+0x33/0x40 [ 2407.398561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.399271] RIP: 0033:0x7f61c5901b19 [ 2407.399750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.402307] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2407.403334] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2407.404298] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2407.405304] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.406263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.407227] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:20:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xff000000}, 0x1c) 11:20:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0xee5, &(0x7f0000000140)={0x0, 0x5fe7, 0x20, 0x2, 0x39f, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r6 = syz_io_uring_complete(r5) creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f00000002c0)) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:23 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x80c00) fallocate(r0, 0x4, 0x4, 0x401) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000100)={0x0, 0xffffffff, [0x9be2, 0x7d5, 0x9, 0xffffffffffffbedb, 0x1ff, 0x7]}) 11:20:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 11:20:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) io_uring_enter(r3, 0x4e2f, 0xa350, 0x0, &(0x7f0000000200)={[0x1]}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xff0f0000}, 0x1c) 11:20:23 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0xffffffff80000005, "00f2ff0000006de4", "e25101c48dc8cfa6cdaddce714b0c600bcb72da6000000001700"}) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000240)={0x9, 0x2, 0x1}) r3 = getegid() setresgid(r3, r3, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@cachetag={'cachetag', 0x3d, '/dev/snd/seq\x00'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@nodevmap}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 11:20:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 11:20:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0xea6d0d3c8ff2a942, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000001400)={{0x9023, 0x4}, {0x20, 0x3}, 0x80000000, 0x1}) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x4, 0x8, 0x200) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:20:23 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x4, &(0x7f0000000000)="52bb164b88ad186692fbe6b67aacded3b169e38501635ee4ee375d5056dd82ff82eb1fdba4ab2af63e278302d433334ffa49b6e778b977128a7be483ebab90e5f88f9644662f7f484b892becc2b94b896eafe202", 0x54, 0x3}, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000240)={0x40, 0x0, 'client1\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:20:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xffffff91}, 0x1c) [ 2421.192627] FAULT_INJECTION: forcing a failure. 11:20:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2421.192627] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.193559] FAULT_INJECTION: forcing a failure. [ 2421.193559] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.194201] CPU: 0 PID: 11367 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2421.196257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.197273] Call Trace: [ 2421.197628] dump_stack+0x107/0x167 [ 2421.198074] should_fail.cold+0x5/0xa [ 2421.198545] ? xas_alloc+0x336/0x440 [ 2421.199007] should_failslab+0x5/0x20 [ 2421.199476] kmem_cache_alloc+0x5b/0x310 [ 2421.199975] xas_alloc+0x336/0x440 [ 2421.200416] xas_create+0x34a/0x10d0 [ 2421.200882] ? kernel_text_address+0xf2/0x120 [ 2421.201457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2421.202097] xas_store+0x8c/0x1c40 [ 2421.202547] __xa_store+0x164/0x2d0 [ 2421.203000] ? xa_delete_node+0x280/0x280 [ 2421.203516] ? trace_hardirqs_on+0x5b/0x180 [ 2421.204049] xa_store+0x31/0x50 [ 2421.204459] __io_uring_add_tctx_node+0x1cf/0x520 [ 2421.205049] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2421.205725] __do_sys_io_uring_enter+0x146f/0x1890 [ 2421.206336] ? find_held_lock+0x2c/0x110 [ 2421.206839] ? io_submit_sqes+0x8610/0x8610 [ 2421.207378] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2421.207971] ? wait_for_completion_io+0x270/0x270 [ 2421.208565] ? rcu_read_lock_any_held+0x75/0xa0 [ 2421.209138] ? vfs_write+0x354/0xb10 [ 2421.209613] ? fput_many+0x2f/0x1a0 [ 2421.210060] ? ksys_write+0x1a9/0x260 [ 2421.210530] ? __ia32_sys_read+0xb0/0xb0 [ 2421.211030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2421.211671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2421.212306] do_syscall_64+0x33/0x40 [ 2421.212761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.213398] RIP: 0033:0x7f61c5901b19 [ 2421.213868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.216108] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2421.217040] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2421.217925] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2421.218795] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.219668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.220539] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2421.221444] CPU: 1 PID: 11382 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2421.222332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.223381] Call Trace: [ 2421.223718] dump_stack+0x107/0x167 [ 2421.224143] should_fail.cold+0x5/0xa [ 2421.224607] ? create_object.isra.0+0x3a/0xa20 [ 2421.225196] should_failslab+0x5/0x20 [ 2421.225708] kmem_cache_alloc+0x5b/0x310 [ 2421.226238] ? mark_held_locks+0x9e/0xe0 [ 2421.226768] create_object.isra.0+0x3a/0xa20 [ 2421.227340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2421.227997] kmem_cache_alloc_bulk+0x168/0x320 [ 2421.228594] io_submit_sqes+0x6fe6/0x8610 11:20:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2421.229155] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2421.230263] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2421.230901] ? find_held_lock+0x2c/0x110 [ 2421.231439] ? io_submit_sqes+0x8610/0x8610 [ 2421.232007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2421.232639] ? wait_for_completion_io+0x270/0x270 [ 2421.233268] ? rcu_read_lock_any_held+0x75/0xa0 [ 2421.233881] ? vfs_write+0x354/0xb10 [ 2421.234367] ? fput_many+0x2f/0x1a0 [ 2421.234839] ? ksys_write+0x1a9/0x260 [ 2421.235332] ? __ia32_sys_read+0xb0/0xb0 [ 2421.235861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2421.236543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2421.237215] do_syscall_64+0x33/0x40 [ 2421.237776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.238439] RIP: 0033:0x7f2aef7e0b19 [ 2421.238925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.241271] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2421.242272] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2421.243183] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2421.244095] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.245001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.245934] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2434.896563] FAULT_INJECTION: forcing a failure. [ 2434.896563] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.898000] CPU: 0 PID: 11401 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2434.902216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2434.903214] Call Trace: [ 2434.903541] dump_stack+0x107/0x167 [ 2434.903983] should_fail.cold+0x5/0xa [ 2434.904459] ? create_object.isra.0+0x3a/0xa20 [ 2434.905019] should_failslab+0x5/0x20 [ 2434.905485] kmem_cache_alloc+0x5b/0x310 [ 2434.906007] ? mark_held_locks+0x9e/0xe0 [ 2434.906503] create_object.isra.0+0x3a/0xa20 [ 2434.907039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2434.907662] kmem_cache_alloc_bulk+0x168/0x320 [ 2434.908229] io_submit_sqes+0x6fe6/0x8610 [ 2434.908751] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2434.909357] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2434.909953] ? find_held_lock+0x2c/0x110 [ 2434.910456] ? io_submit_sqes+0x8610/0x8610 [ 2434.910989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2434.911580] ? wait_for_completion_io+0x270/0x270 [ 2434.912168] ? rcu_read_lock_any_held+0x75/0xa0 [ 2434.912735] ? vfs_write+0x354/0xb10 [ 2434.913193] ? fput_many+0x2f/0x1a0 [ 2434.913635] ? ksys_write+0x1a9/0x260 [ 2434.914119] ? __ia32_sys_read+0xb0/0xb0 [ 2434.914616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2434.915255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2434.915886] do_syscall_64+0x33/0x40 [ 2434.916340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2434.916963] RIP: 0033:0x7f2aef7e0b19 [ 2434.917418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2434.923684] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2434.924610] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2434.925473] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2434.926381] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2434.927247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2434.928112] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:20:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 11:20:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01001b590169327739b80000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00']) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="ff0000002e2f66296c3c5900"]) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0xa, 0x4e22, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="75eba9dfb43bc44df5123adc2651bd8a87d788bdcb94a8797849f9", 0x1b}], 0x1, &(0x7f00000006c0)=[@dstopts={{0x1100, 0x29, 0x37, {0x2b, 0x21c, '\x00', [@generic={0x3f, 0x1000, "d9782e6553174a79f05f87338e607dbf16f0f11a92aea8d40c988efc74349581c2e455529d84d3bfd8608f06bac1a56fcf20d7d3aa609ca1da9517c8b39daee814989549a811879b4348b6423e94ea898a2e53c23166455b6a4e74ebc5605d92be1e41125e68282e6155fa74381d62d4c0b96d97593eaec6f29e7022c59d97307cd4a3a14c04b9448360a9ca8bfe0c13a70b1568eb498d22bd53a823a4863f0a0c21ec181a01db5890706099beaad7a93e87ae29a4ccbecd706c0e95bacb459bda99109fa07d8c4600b1485c97b3b28c4119e029b71e08cd1b645f23a12061ab82b67e29360d8460467fe1d787a326aa60e424f0d8619f9c5057a8cbd0589f6395b2901b4ca421a60d9dd70afbfec388100d14b0ad6f2be4e7a61c82952b546f263b2ca61a9c733744e0f988faefd7a090ddb8aca167730c87646ee98dfeab611126dac6fa7ae3b8bb7d77516cd75541cea25c26830f313d63e66b68a0f2ae614da1abd9894e730559e39f5e04844e15f8e5a836e764e91e6fd5ee30c87bd0dce79269a0510249da11b511c07af3d51db7f1d6f3877de95560bdb76b3d787a5380de36a82893884958fe5304367070c00603038214f3463de04d9bc8176052caaf1a81a15d4d089230c236701aec84615851113311a9c8fd68a3cdd74775e4a50de6d472637de216f854072ee56dc9886b8699ecea27f4ee7b7167c94e3f191774f0875a0041db0d6c03532a3a6136e8fcc9536ae5324bf45e66922f398ce01e03ad88ae1f103f5f7da0a24cbdf338df8a9b26d685ced837843af333652140942b18b440696dfb1b86ffae68779ed8aede59e1518e00bb2834cc299a1bba5c2fb9fc07af3dcd88219cea1afac81eb2c5513ebc3d8732237f9ee8df1392990511f94e3846babb23c17fffdca9f16deaa0fdbf661301eda4246f287dc45e28dbeab64c3a7f040e192d9e17fff50027010482d3a1670f6deef297cdea196493022edf481561ea3c21a892dac2d4e6793512831db1dbe00c13fb30a1e5fc0db21d0036fcf25d38cbed4c5e126e58d553898cb1234fc0bcf19fa069a077abb42478d6a9589eb4edc67f845edb0a257325e9579e231a2b26be0f4c797a980ef680fc11820d69f4e872794ca5a7c229e2ec192137e3d63fcd28de5ac3ddc3436c1e9ebb9609c55de40a2e1eb766127ad78ccca07850098da208094c732ecb7fc116016e616e742df5afa6c8c60bd62499de426c3cceadb51e69b16fc7b96daf251c8dd8017ee5d6dafb69685f9771da03693a96eeb1fadaae2ec8ab25eee86aa79dcffbc6d786608ee4a55fa1e779e99cb369a98c1273be8e354c7c130a7fa0e7ae894ea62eac2bb6827348d6372cee9db3a8fb14877ffdc5d35b917d810a8a4fb7561da5edbe03de29e624b042615fefe2cfd4f20def79db22204e0a157dacd050a70a6be8cb7754443bf89ebca4ae1b24e57fd9addbb3a734035fd2faa42286c5ef987120c478792f51400fafebb3fa7ae2546293417b9db16fe1f0727f099fc79126080c563abcaf3ed6afca0ca9b135a70a412ff5af84d8f8aa8f1e2f60b9f0a3419100aa0acf7e15764fc75906e0f8fffe37b5d95a6041a3052f583a0fb17afd4619c47cccc55ec82f106a052aa25efc177428556ba5b232eea252cbd6fb43fe66aea3f26347a94a4eaad3576008804bad55a72814614a0cda2bca8195a3f8e223a694c2b18c1757e9672e0448be9a74db8d626c345dd9021230b54abe88a3c4a2494cce3ab9e995da905a2afcf83a5753dc0b00bff0824d564d2e07c087cacc85212d8cf388f44fbe660a0b7dd3d1552add0c50dae54237d3c688d509411d53c4c7ef0fc5efc9dc963a94cf8a9cbcd873b623fba4848c2a81e1f4acf865187b185155f079468bfdcdf35eca545d2954434a57cd122b5c4fa7762776c0cd2a0b5162e0e4e276045d57869a44a385a3474164ac2cd1c8deca8ff1e8d54f86dc09810ba1a9c1ccd98d49adf1811dfbca9c342aef0349f5a3b98c0dd4ad71494119922039853975d3d1ea54b5cda262c7e476b6b830956c51f5be7d755318770aeeac1bcad41ec40812d3e502ef1b74e6651ef15349e11a3d871fa2d5dd2a654b7275597339462fc74161a9a28f4e27c339b25343267c688294bac979c4d299c7361d2b626c8fa496e1ef3ec718a373f074599894eb1b29d47163c9e5aaf32c5d20fb588a38065d598b0d0af27773bdea19674c47edd5994b5a5a18441f1e41f3d97e607426d9ce6bb1dbc343539bdb35ec6d2640cfcc9c66da08e3710a9aa50433bf2b15cf21566755ee641bd591e5b2a9e5fe3d938c167a6330512abdcb69753bb9612924a500191eda3fdc9bd0c968316c144c1c46723cbb7dbb2cfb21e58df1a4418029c0f833796957197d5fa7f04b5ac216e90a126e7e6009841587920608767761c2001382c74585d67b331077082661f524345f680d422b2011a095712d7fe26d200e3fe36d9789a7ff80886163e69dafdfdef962b5e4b475788b912629e85646a76e25b3d03e8e20dacd52e5748bc55377cdd9b0700db9bf5cbc9c55131aed5b46783281bed991cd2e698da038ad5ec4be95e05f6cbbc255b10016828c62b41a81a7be2f25ebb4424117599846b58a6034175b1cc1fe09ca03da66a8bb0d9bb23457c1ec254012eeefde6bfa2f11cc7bf0b5648d3a1c763a2517af387771d50d038355f3109dc420b4598742e8f2dd5dcea8322b9b00cfebd501e8458182c105c662d2700aafdc8681584a39d13bfc0f92551d48dbf090cdda4b89b341ad3aa6f85f0e6fc504fb4e279b2ada476d22a3328bdfde11b82d5b26020f1af813c70ab6f10eedb1bb33ad3e0d6b31a6576fe6b715b1f96f7a6b371949c1a2f3842023e854b2ca4c0a998217db53769ddfa086db13bf1b714eb4e13851d7419290569a723cd5ec84560fa8dad1a20274056e363c60b6b9a060ae6ff893b4ff159221970bee5c22c1155e52a3d9c35035e0a5da97e92953eaef657815dbde8fb67118f7efd8ad3d0bffc5216e76cbda0154a287cd5e2c3250ee26bde11c3b8bf6879c05824e0fef9a440feeade201c8a0c3b8c3e39dceb04d28e2e33ff54d60c0486704379d14e3075f432286b037d5b2a8c291d163c9ac78ee21e720265d7ef9fc51cc30e9bc73363f0b665fbffd329840ebce320fd9729f172eb81991106694a997464933a4feb95195c82bf06b41870d60e351282dc96a6de72ece239b5dd5e8d798a7b0492b62c794e996c03a0cfcb59a092dfac3302b558eaf09aae15ced14416386ef968760f7252f1549c8e067f3857acfd2a4e32eaf7621496f42d08156738e457c4423502a08aef080f518e6b341007604501207768ad7dd35ffec388b264c48bd9dfa92780f3f4567c0531b7cc590c5c9891e4ac5bf22dd0bccdff5efafe8ff00dfea0ce2bc54266ebc7439544c5a9a63ad7bab5d99c0eec4648d2b54de396aa1ccf49c016b24fb988e93164ba99b1b93bad6e1102a46fdec59f2e24e5af6e8924feeed8bdc10c58c208c8fc67842829577f68fad79307d0ff875a46e4eee518803e9106438e312a1d3f858710765ef7b5f40fe883c6aca1435edc3491326462499387847f36987195d6c99d2f76aeec5f8241bf2946e3420737bba375c93683c6a893426a3b64a348429c90fb773ee66cea83f8e524b322564c1f42ffe3c6cddbf569e615cb42eb5a1e827f03d2aa4f775b49ebc6121f8b122e89d06d6295528ce9c1ca1f8a2b230ab9cccd911026008d80e48475a47911da952e4711638cc9bb50d745a6e9af3800d40e46326ec49b5b97f4bbb52b4e7db6ed2065bec5749f7856e9109af3c99b114996ed02f752394f5b6e3027a80ffda2845052f429973c9d0c5d6a73298bcc9c75a4784d5285415c5a0dd1349be2c011816132ccbfa909284113b9f9b27137fd899395c31318b1f395012f34877d95f019341c0753e03035e669f41aac31b01e9e89585dae5890fd11126992e148fe4985768ea9f2853ab382f632759f42d32530cbca5058ea341ae0aa063dfbd475b9a19d2615600a7936487f9d5577d3b9d66ebcf5413506499a62ac486902bd8c91277d1fe89e5daed22d87b33a5f8e132bd1f9e370f03241859f9f2aa50024c948c98b00d3d98f1f68f39066d7670915afd114669ece50a717ee4bcea7bb70a35508f9657f26b698dd90aa954694235dcf45585475b635b99098de51ce08d71989e4d24941d7832c08e882ff241c0e8bf2d43c1cbbf0762fde71b8b95c910a488a8bc49f66dd4283400d2839a67702de975526b5f86665d3e0e2f6fd45f8aeb780d03ed17959cd35713d6517e17431067f318deea5b90d1bdd94076c987a8b074f4cc36f07cc278d9febe9d02aaf3a0b070281de02d22bdcaa1c8dcdd58d70326a7f77a0a935617a62bbf6ed846f15e1a53f38ad9c6457c06d4620f353f2192718a2934e37b5975fdd21f71b8f018453635ab49c86978aad3113ecb10a1da1855ae7857facb78408ea18d2096619b36d1bd56a868812bfebf9ecfc858b9a895f51cf14045a558c2cac71d46199fa96cab1e7880d4829662df4278c60b7661f357c5915c5b71b18b2a36262eddbe93be1d346a2636977d800bcfd7cf8a3ad3dd911211b5d8038ba2180a5b76f930bc90b1c88c2070e3b68ae1b44c8dd54f4f4b9bbb7bad58b7cf5de3ad9f391f11f93b00127bd31d8db830c90ef7d8ccff171d38adf9472183cf5aa283afe7a962447177cf3b510b18d1d83e7adcd1e6c1d6f5b8c78454e9dbbeb442dcdd6778056b56dcbfe053ac3c1f7650f63eb2b7501f5160ad94b3ff18ca49da6c73a3baf95b227c591faf0ec80568460ff8b89fcc7ffcdd8d9e96e9f1bc23e30275652405cf0c6b616a1d5c896fbaee9842f1ff53a8f6d1ea8fb7fe6828bf624698a41fd6f546fbe1eb4653960af269f48ca4d64578737f22ef770aba5d8385b7bdab6c035794b17764c86b5f95cae52328d17fdf0b274bb6e57763cf88740f45d54546facb2ddba3587ba1bd0efc21fcc746f1b13af2e1415fe412db4c4363ec5ea0f717842b40f141c309bb1269677092bc19ac8391d94d3710f195c079be513de9198ce7d64b7c6fc40728e5cc41be0e45b1b906cd19341932bee04106d810fd763856eec06a0b32e4db4f39fcc2724cb2c702f1e463dfadf8e8480f778a2748bdcafa608745788c7f0f90e987221be33d2a62a9cf17488f0f2cd140df6704acfb63936c306d06aa7fc40baf87c5abdf53befb08f5b362dc75b1b3a115e6ae071b37f1b1c34ac575697e44e52e93c556cde4406866d02515cec1ad0b08c488664494ee8aaea82a6cb8e082643095c482ce4c461bad4229ce5e94e49f246c7343be321a16dde4a15e4df98fce4813df0d2dfeef8fc149cde39d21fa80d9c43f42e1e69b1ee6105ac13466a83e2b85dbb26916580bdcf1d14d9d35ba473c9f8e9f6f7bac6ba1c644746da76f15cc489620c724ed6a79e85c3147c892cbfed79d3408756e4ab896a6548915746a23ba249dd3c587a28a7be6b88b9cabad1caa62ab6bc3c03ef1f6dfb3ca86a178d88581ff15bce11899343ec0ad02deeb8b0ad2028ca06fd3219e52999b28fea97f5943d693bc3a8825f7f25a935a82bff164a21357582a51e5b594b688b1d029f20c2560be6b57421271de787582488dbf9b076810c63f63e4bfefd42497c6155117bc41061014eb683b47c155a99da548330b2aa7d31b52870fac472ae8039e8ebdae644212db11e7c874595db6"}, @pad1, @enc_lim, @jumbo={0xc2, 0x4, 0x6b}, @ra={0x5, 0x2, 0x3ff}, @pad1, @ra={0x5, 0x2, 0x800}, @generic={0x6, 0xc4, "e243871f6c6eecbd53559ab9fccb842c60c85f1f4f87d4b657abbbd73d2fe325121ddb66c1ef1a451c41d8d304d78fedfa9ee325bab0602cfaf68b676462b7cd0f18c594eb49b3e27bbca9c146ae14158d3c1fc5184752183f2defa45f471a3729c26b19a1a4b86315a302c8d6e8aa2c491918b446a73ced55b784587b6904818f57b90feaabfaf3302ad635e3947f8263b054db59490eb5c4638d9ed1c047b31955e22bb9ccdf878bfd5d88066bd0b0da7e459372700e7a2d4fff01f5d8a57c56c4b8a4"}, @pad1]}}}, @hopopts_2292={{0x150, 0x29, 0x36, {0x1d, 0x26, '\x00', [@generic={0x7, 0x5e, "e8a2dc1106e9eb21f8de8919853cc4c99c34c49e5bac3dded8a19b50e2f6e579676d6c5905b0b804d4e43f34b17134957808b10cb7c875b8b14d53f5c2886511d366881b2ee621b42e9d9ceff09fa487923a6664b858b6f8b4660b78f704"}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x1ff}, @generic={0x9, 0xc0, "d9977186bb2af210a38d3da9c281dbedf626a4b4c95adf7c8debb4a32dac9a7283e8185cb39b9614751362cd4a8a8f060b1da0c047ebcb5ba2e682c97e228e229060d294aa409acce58dbea62d2a7f978c3575d9e9b572e190b029e50e1b189b973b0494782d14404a99cd35186a9e0cd16513c54bab6066f1f7da82dd0be5024691adcdc7ea28ff9f57ffbf2c5774de22a33c4bc97a2107204a880d0769b712f4c1c79ba074d2c8087b26aa9d8335f376d60f3a25b260202e5aecea5ef640a6"}, @pad1, @pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x4, 0x0, [@empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd6d7}}], 0x1290}, 0x20000800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:37 executing program 2: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4ba22d8506d093b) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x1, 0x1, 0x9}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="691e775fcc05000000a97be4f0e5bb9a716cf3b13b8873600db7658e3f58e8bb41635db491be2bc6ce3912615af2fa2a91f7d74ab7ab20489e63d38222"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b900da00", @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000007dd62a52be3c9d6fbc9c9acf8dc57b387003813f7c4582ccc31f7dc13fa33b148014bae0b1c4ad90342496884b5b064941a46f14b9c1c18e237f8c7dc1ac1c7362697f7fbfd605a2895b0dec61adf8a66a571db747a0a1b4af777ee065d6dca8a28b8cb0ac7431cf4c7f3e8fb4254050", @ANYRES16=r3, @ANYBLOB="020027bd7000ffdbdf25600000000600b1002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48080) 11:20:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000240)={0x0, "fb0b51728d472bbbd1c121b7e58d9eaf"}) 11:20:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x101c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r5 = syz_io_uring_setup(0xf3c, &(0x7f0000000140)={0x0, 0x4b24, 0x4, 0x0, 0x27e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r6 = syz_io_uring_complete(r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[r0, r5, r6]}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xfffffff5}, 0x1c) 11:20:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 2435.151394] FAULT_INJECTION: forcing a failure. [ 2435.151394] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.152870] CPU: 1 PID: 11412 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2435.153714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2435.154744] Call Trace: [ 2435.155073] dump_stack+0x107/0x167 [ 2435.155523] should_fail.cold+0x5/0xa [ 2435.155995] ? create_object.isra.0+0x3a/0xa20 [ 2435.156557] should_failslab+0x5/0x20 [ 2435.157023] kmem_cache_alloc+0x5b/0x310 [ 2435.157522] ? mark_held_locks+0x9e/0xe0 [ 2435.158047] create_object.isra.0+0x3a/0xa20 [ 2435.158588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2435.159207] kmem_cache_alloc+0x159/0x310 [ 2435.159715] xas_alloc+0x336/0x440 [ 2435.160155] xas_create+0x34a/0x10d0 [ 2435.160620] ? kernel_text_address+0xf2/0x120 [ 2435.161166] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2435.161802] xas_store+0x8c/0x1c40 [ 2435.162258] __xa_store+0x164/0x2d0 [ 2435.162703] ? xa_delete_node+0x280/0x280 [ 2435.163212] ? trace_hardirqs_on+0x5b/0x180 [ 2435.163742] xa_store+0x31/0x50 [ 2435.164147] __io_uring_add_tctx_node+0x1cf/0x520 [ 2435.164735] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2435.165381] __do_sys_io_uring_enter+0x146f/0x1890 [ 2435.165995] ? find_held_lock+0x2c/0x110 [ 2435.166491] ? io_submit_sqes+0x8610/0x8610 [ 2435.167022] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2435.167610] ? wait_for_completion_io+0x270/0x270 [ 2435.168197] ? rcu_read_lock_any_held+0x75/0xa0 [ 2435.168761] ? vfs_write+0x354/0xb10 [ 2435.169212] ? fput_many+0x2f/0x1a0 [ 2435.169654] ? ksys_write+0x1a9/0x260 [ 2435.170133] ? __ia32_sys_read+0xb0/0xb0 [ 2435.170635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2435.171272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2435.171899] do_syscall_64+0x33/0x40 [ 2435.172354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2435.172976] RIP: 0033:0x7f61c5901b19 [ 2435.173431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2435.175687] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2435.176619] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2435.177487] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2435.178370] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2435.179239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2435.180114] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:20:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:20:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x7c83, &(0x7f00000002c0)={0x0, 0x8000, 0x0, 0x0, 0x5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x17) 11:20:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x7, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) fstatfs(r1, &(0x7f00000000c0)=""/46) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:20:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xffffffffffffff6d, 0x9) r1 = syz_open_dev$rtc(&(0x7f0000000340), 0xaaf, 0x181b00) ftruncate(r1, 0x0) r2 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x5, {0x0, r0}, 0x8001, 0x4, 0x0, {0x0, r5, r6}}, 0x3) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd=r2, 0xffffffff, &(0x7f0000000240)="be753f4005baac97a7a11f5282c1215b960be33309e229d820f8e32d01efcecd1e4f66555cfb60eea5671678bb6daa392b123a0b548369c002df89eb140409ad54a607fa5e6a75b1c8b87e892e0515f8fd9b81", 0x53, 0x8, 0x1, {0x0, r8}}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r9, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x0, 0x5e1e9df12ecb804d, {0x0, r11}}, 0x4) 11:20:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff0000002e2f66296c653100"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0x10, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = getpid() fcntl$setown(r11, 0x8, r12) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x5, 0x0, 0x0, 0x14, 0x1, {0x1}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x2000001c) 11:20:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 11:20:50 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x6, 0x3}, {0x0, 0x7f}, 0x5, 0x6, 0x6a}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x1}, {0x2}, 0x5d, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)="ea17fd115f0760b4f70f06c32d0000008f0000", 0x13, 0x0, &(0x7f0000000280)={0x2, 0xed, {0x0, 0xc, 0x8a, "a2e703bf5edd462c9e139366c5de791232c480b41f0ed36c7e7ad996e1b875712745d4b417ea0841881a1ee2071632a1bc4c0acc1c01d3b4749fb771a1b717c52245bc07d5b9f1272dc0d1a439b1b84cc407d29f9194904a774a7b2352fc2badcff187e49b68e91e12e409957a487df15bce5f2e60dba6aba5c678550f76db6f7d4603253779a78f3bf8", 0x56, "11a8c5e7cebc182cecec0067f28f6add015247ccccec6e6bb912317f3debd2a1be19ddf325cc59c4999b06867c57a2f76075e578ab0dbc68b51681f8491685488e83b6ccf109fcd0b2ef5cb06cafe7d203a98538b2eb"}, 0xbd, "a3c99431b1f87563c11411990c3fa252c68a6a756908abdc6b536c6220425774d16affb3ecc8fb7ab1f7fad3601974716492e01cc76f11af7e86255ea9c03c357f33a1b883d3b3c274012ba9c2be7ed7f9cb195e86d51a3b6f12223e3bea5763a022d40d66f438b10ad62c7ee88cdfe755911aef2127b83a30a698c681e13ab769528027ef74fc5c1ae99518e568bc89f60bfd22a627c3e540c783b88edb3f407410097e0e934dea554aa1657f3b5b882a3428edf4c16d8931dcd6114a"}, 0x1b6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:20:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 11:20:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/bnep\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) 11:20:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x10010, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0xfffffffc, 0xb4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_complete(0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x2b, 0x0, &(0x7f0000000240)="2e94b72d6cebb6376c001c966fe82c39e45237e681e6a113e379d1d53e9d516071d157c90ff8b684ffabf4b09651f3aad3aa90ba47344003d02b308ddd884881ba5af60703d7d90246c65a60abf3c39bba0dff095c98d76023b4bcfc28cac0d0f55e891849d0acc3587b7e879ecab59121c6481668de76b26587bcc6863ccf62baecc26d52f2b659959d86a1b74e7bdc86463ba568539d922992774d76d72195f3b005358f94d1fd35bfe999f66508c9f070ba0ac3c316cbf533fe85ae3773c921d7332eb64da5eac764a195ab468c381b23481318599f38f804", 0xd4, 0x0, 0x0, {0x1, r11}}, 0x8) 11:20:50 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2448.317679] FAULT_INJECTION: forcing a failure. [ 2448.317679] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.327243] CPU: 1 PID: 11447 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2448.328084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.329096] Call Trace: [ 2448.329426] dump_stack+0x107/0x167 [ 2448.329894] should_fail.cold+0x5/0xa [ 2448.330398] ? create_object.isra.0+0x3a/0xa20 [ 2448.330960] should_failslab+0x5/0x20 [ 2448.331426] kmem_cache_alloc+0x5b/0x310 [ 2448.331923] ? mark_held_locks+0x9e/0xe0 [ 2448.332422] create_object.isra.0+0x3a/0xa20 [ 2448.332955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2448.333578] kmem_cache_alloc_bulk+0x168/0x320 [ 2448.334142] io_submit_sqes+0x6fe6/0x8610 [ 2448.334705] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.335308] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.335895] ? find_held_lock+0x2c/0x110 [ 2448.336390] ? io_submit_sqes+0x8610/0x8610 [ 2448.336919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.337504] ? wait_for_completion_io+0x270/0x270 [ 2448.338089] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.338668] ? vfs_write+0x354/0xb10 [ 2448.339121] ? fput_many+0x2f/0x1a0 [ 2448.339565] ? ksys_write+0x1a9/0x260 [ 2448.340026] ? __ia32_sys_read+0xb0/0xb0 [ 2448.340522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.341156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.341783] do_syscall_64+0x33/0x40 [ 2448.342235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.342880] RIP: 0033:0x7f61c5901b19 [ 2448.343332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.345570] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2448.346519] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2448.347383] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2448.348368] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.349232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:20:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000100)=""/192, 0xc0, 0x7fff) [ 2448.350092] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2448.362740] FAULT_INJECTION: forcing a failure. [ 2448.362740] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.364193] CPU: 0 PID: 11451 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2448.365034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.366042] Call Trace: [ 2448.366379] dump_stack+0x107/0x167 [ 2448.366825] should_fail.cold+0x5/0xa [ 2448.367290] ? create_object.isra.0+0x3a/0xa20 [ 2448.367847] should_failslab+0x5/0x20 [ 2448.368310] kmem_cache_alloc+0x5b/0x310 [ 2448.368805] ? mark_held_locks+0x9e/0xe0 [ 2448.369300] create_object.isra.0+0x3a/0xa20 [ 2448.369838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2448.370470] kmem_cache_alloc_bulk+0x168/0x320 [ 2448.371035] io_submit_sqes+0x6fe6/0x8610 [ 2448.371557] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.372162] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.372755] ? find_held_lock+0x2c/0x110 [ 2448.373253] ? io_submit_sqes+0x8610/0x8610 [ 2448.373784] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.378405] ? wait_for_completion_io+0x270/0x270 [ 2448.378991] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.379551] ? vfs_write+0x354/0xb10 [ 2448.380001] ? fput_many+0x2f/0x1a0 [ 2448.380442] ? ksys_write+0x1a9/0x260 [ 2448.380908] ? __ia32_sys_read+0xb0/0xb0 [ 2448.381402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.382035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.382679] do_syscall_64+0x33/0x40 [ 2448.383134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.383754] RIP: 0033:0x7f2aef7e0b19 [ 2448.384206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.386428] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2448.387348] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2448.388208] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2448.389067] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.389926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.390795] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:20:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1f}}, '.\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0xff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) fallocate(r0, 0x10, 0x7, 0x2) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7db0, &(0x7f0000000140)={0x0, 0x8000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x3, 0x7}, {0x1, 0x3}, 0x6, 0x2, 0x9}) r1 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x200, 0x3}, 0x84, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = getpid() fcntl$setown(r1, 0x8, r2) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3f, 0xff, 0x4, 0xfc, 0x0, 0x4, 0x20, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x8e8c, 0x65}, 0x12, 0x7, 0x5, 0x1, 0xfff, 0x8, 0xffff, 0x0, 0x5, 0x0, 0x7fff}, r2, 0xd, r0, 0xb) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) dup3(r3, r3, 0x80000) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff0000002e2f66296c653100"]) write$sndseq(r5, &(0x7f00000003c0)=[{0x20, 0x1f, 0x3f, 0x0, @time={0x4, 0x3}, {0x4, 0x1}, {0x1, 0x2}, @note={0x4, 0x3f, 0x2, 0x20, 0x9}}, {0x9a, 0x2, 0xfb, 0x4, @tick=0x9, {0x1, 0x10}, {0x7, 0x3f}, @addr={0x4, 0xe0}}, {0x2, 0x6, 0x4, 0x5, @time={0x5, 0x2}, {0x9, 0xe5}, {0x6, 0x80}, @raw8={"60975ef8274a223ca29e4c31"}}], 0x54) r6 = fcntl$dupfd(r0, 0x406, r3) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() fcntl$setown(r7, 0x8, r8) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x40, 0x3f, 0x5, 0x1, 0x0, 0x400, 0x14800, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xcb, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x80000001, 0x480, 0x4, 0x40, 0x9, 0xca96, 0x0, 0x4, 0x0, 0xfff}, r8, 0x2, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000002c0)={0x8, 0x8001, 0x0, {0x5, 0x800}, 0x6, 0x800}) 11:20:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 11:20:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffefd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1d, 0x9}, 0x0, 0x0, 0x100, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@empty, r3}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x202401, 0x80, 0xc}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x65a9) 11:20:50 executing program 2: unlink(&(0x7f0000000100)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0xb) fcntl$setstatus(r0, 0x4, 0x2000) [ 2448.521771] FAULT_INJECTION: forcing a failure. [ 2448.521771] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.523218] CPU: 1 PID: 11481 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2448.524052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.525055] Call Trace: [ 2448.525383] dump_stack+0x107/0x167 [ 2448.525826] should_fail.cold+0x5/0xa [ 2448.526313] should_failslab+0x5/0x20 [ 2448.526779] kmem_cache_alloc_bulk+0x4b/0x320 [ 2448.527333] io_submit_sqes+0x6fe6/0x8610 [ 2448.527858] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.528466] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.529058] ? find_held_lock+0x2c/0x110 [ 2448.529558] ? io_submit_sqes+0x8610/0x8610 [ 2448.530091] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.534710] ? wait_for_completion_io+0x270/0x270 [ 2448.535301] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.535866] ? vfs_write+0x354/0xb10 [ 2448.536319] ? fput_many+0x2f/0x1a0 [ 2448.536763] ? ksys_write+0x1a9/0x260 [ 2448.537225] ? __ia32_sys_read+0xb0/0xb0 [ 2448.537722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.538379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.539007] do_syscall_64+0x33/0x40 [ 2448.539459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.540081] RIP: 0033:0x7f61c5901b19 [ 2448.540534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.542794] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2448.543718] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2448.544582] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2448.545446] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.546326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.547190] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:20:50 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:20:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xfffffff9, 0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:20:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) [ 2448.695618] FAULT_INJECTION: forcing a failure. [ 2448.695618] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.696993] CPU: 0 PID: 11495 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2448.697852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.698899] Call Trace: [ 2448.699231] dump_stack+0x107/0x167 [ 2448.699699] should_fail.cold+0x5/0xa [ 2448.700191] should_failslab+0x5/0x20 [ 2448.700673] kmem_cache_alloc_bulk+0x4b/0x320 [ 2448.701243] io_submit_sqes+0x6fe6/0x8610 [ 2448.701789] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.702429] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2448.703039] ? find_held_lock+0x2c/0x110 [ 2448.703560] ? io_submit_sqes+0x8610/0x8610 [ 2448.704110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.704700] ? wait_for_completion_io+0x270/0x270 [ 2448.705289] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.705858] ? vfs_write+0x354/0xb10 [ 2448.706326] ? fput_many+0x2f/0x1a0 [ 2448.706783] ? ksys_write+0x1a9/0x260 [ 2448.707246] ? __ia32_sys_read+0xb0/0xb0 [ 2448.707743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.708381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.709009] do_syscall_64+0x33/0x40 [ 2448.709463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.710085] RIP: 0033:0x7f2aef7e0b19 [ 2448.710560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.712798] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2448.713721] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2448.714603] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2448.715468] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.716335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.717208] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:03 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x800, 0x0, 'client0\x00', 0xffffffff80000007, "000200", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x8, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x9, 0x3, {0x0, 0x3, 0x3, 0x0, 0x3}, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000240)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "5ba62686e29fc0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, 0x0, "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", "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"}) [ 2461.806754] FAULT_INJECTION: forcing a failure. [ 2461.806754] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.808385] CPU: 0 PID: 11508 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2461.809365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2461.810544] Call Trace: [ 2461.810955] dump_stack+0x107/0x167 [ 2461.811458] should_fail.cold+0x5/0xa [ 2461.811991] ? create_object.isra.0+0x3a/0xa20 [ 2461.812626] should_failslab+0x5/0x20 [ 2461.813152] kmem_cache_alloc+0x5b/0x310 [ 2461.813713] ? mark_held_locks+0x9e/0xe0 [ 2461.814279] create_object.isra.0+0x3a/0xa20 [ 2461.818928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2461.819651] kmem_cache_alloc_bulk+0x168/0x320 [ 2461.820314] io_submit_sqes+0x6fe6/0x8610 [ 2461.820925] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2461.821637] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2461.822325] ? find_held_lock+0x2c/0x110 [ 2461.822925] ? io_submit_sqes+0x8610/0x8610 [ 2461.823535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2461.824205] ? wait_for_completion_io+0x270/0x270 [ 2461.824877] ? rcu_read_lock_any_held+0x75/0xa0 [ 2461.825519] ? vfs_write+0x354/0xb10 [ 2461.826035] ? fput_many+0x2f/0x1a0 [ 2461.826538] ? ksys_write+0x1a9/0x260 [ 2461.827100] ? __ia32_sys_read+0xb0/0xb0 [ 2461.827667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2461.828395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2461.829112] do_syscall_64+0x33/0x40 [ 2461.829639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2461.830347] RIP: 0033:0x7f2aef7e0b19 [ 2461.830873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.833437] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2461.834478] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2461.835463] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2461.836438] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.837433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2461.838446] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 11:21:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 11:21:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="4ca51aa010f24bb9a94f11b7202dc8987502733a954a10ddc85df33de45cbcc9003cc9b5812a3330211ee5d0e6444aa3b98bfcccdaac0096bfb43476ad7f62bf530eb3ccfc4b1ab8dd0241564ca04a847f0fc06e44b370dd48a260d2e5613d8ca09526375a90fb21ff45621454e7b92cf11731b9391ef67324728cfe142811b6ba8cc61bbe31fd6927b229324289b0b271bb3654647156ccb1aec2a431b06c4a967ed7141919d24383ca3fadf0617c0a76338254ddc228cd6d457a3aab2ecd4ac5aa15ea7af643a44f6f39e4e1356348308ab1284efad36fb4908f390eb348", 0xdf, 0x6, &(0x7f0000000300)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="d3ba07000000ff02000000180c0000", @ANYRES32=r3, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000340)="58b57d547fb626d44943cf02a9a9cd36b375a0305b41cda350b8c83f5ac4a4c818a17be71e7ed141171c817fc0603a40043c0fa8402dcec82ce08dfb6ccf0528ad230f30d3fc4583925892990859284f1165268aa27d79789fe81095657bcf7044c218bae5244dd8385d6cc03beefda9a9a014a06173a867d6c484d1134dab3c7a8a6f36eaa279798abfb4105b393965ea87d3349b9e22ac36903e8f", 0x9c, 0x2002}, 0x3ff) 11:21:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x6ae5, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000240)="188c5dcc49d89f3a2fa655a557a1eabbc60c41641c081f2901a6af3c4679a7a6886c8e7db5e5154528d046f7ddb08e92e3e6a6a4406c96d8ddb83bd54bc110484f9e83b53f9ad0b449323691c690823b111299cbf70d2dbc5eac8676bf838312a5bd77577b5419ad0dee2754dc0aae9483d18ac92acbad768ab4a7f404eadc2c81ede9b000bab99573fa4927ad19656cdd962cd27b8abdddb26e08e0eb657b9c203367d694", 0xa5}, {&(0x7f0000000300)="034914b27801366889b8ef74b6df84052a1e7bcb0d9c94b128d3c4b86972385df54c16e6e568ab5b0ae44f7fab08cc2349e6a15601826f04802aaf9bb4ebc99b6700ac3972dc9aaa812f8d72ae3e3aa8013173b93031818162c22a1fd10b5a9395cc451b1786a6956988df8779ed797abadd318399caa27d8483e7b5a8cfef4fe781c24ba238a10499b6b12b2c995cb1579b0c96b41b22b7d342280981a32138f6e70b1ad518696f4b2db529487df4836c5c7c9c795fbfe25f26de717e14df9a59842d3a5e0aff2cf0bf6fa5f6e93f75a1535fd72b62ee035085f8c0e614ad4739c6808946248c3a4f3dca29d781e6d75b810ba743eb1c66ff40", 0xfa}, {&(0x7f00000001c0)="77e1016b7c39acced9ca42cb8b4c39637422afecb16df03aa075c1336bb2493a697a12ab2b54673174d561c985", 0x2d}, {&(0x7f0000000400)="aaa2ee20dcbb12b9a218", 0xa}, {&(0x7f0000000480)="75fdf752f1957e220d0d0d01f6dfbadbbcfb2d4f67af1216496a74d514d370d3cf01d42de10e034bb3d33cd0a638f407ef393ad503fdb3f6f45af326286fe9e513b2223301f02e7f20519ebe78ed4cb17cfa77678a6de8c0b6bb062d9d", 0x5d}], 0x5, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x16, 0x4, 0x2, 0x5, 0x0, [@rand_addr=' \x01\x00', @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x1, 0xf, '\x00', [@generic={0x8, 0x6d, "dcd8d3f30ac3a7362f099112d238c6272d78980c2db75a3440aef1f2f83052ec700043e3c78e7c222f9d14054afae935f992be35dc15e7e005c6521f59520ea0564eb2353fa8c33f16e96903682c1f0ff59fc82ff188b52fa3048702f872889d161222b150ce374a6bf826c8c1"}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x62}, @enc_lim={0x4, 0x1, 0xb4}]}}}], 0x180}, 0x4004005) 11:21:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x8, 0x0, 0x0, 0x4, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001100)={{r8, 0x7, 0xffffffffffffffe0, 0x7fff, 0xfff, 0x4, 0x1000, 0x0, 0x10001, 0x9, 0x2, 0x3f, 0x3, 0x9, 0x400000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000100)={r11, 0x3f}) 11:21:04 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaa402) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x1f, 0x100, 0x101, 0x7fff, 0x3, 0x7ff}) dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x0, 0x80000000}) 11:21:04 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:04 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = syz_open_procfs(r1, &(0x7f0000000100)='sched\x00') pread64(r2, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:21:04 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client1\x00', 0x0, "a5e49b299b28f2bc", "e291faf6f25a5086fe747944237101c48dc8b6510eee32f8befba1ff00"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x6, 0x7, 0x0, 'queue0\x00', 0x2}) [ 2462.003849] FAULT_INJECTION: forcing a failure. [ 2462.003849] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.005552] CPU: 0 PID: 11504 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2462.006528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.007588] Call Trace: [ 2462.007930] dump_stack+0x107/0x167 [ 2462.008391] should_fail.cold+0x5/0xa [ 2462.008876] ? create_object.isra.0+0x3a/0xa20 [ 2462.009450] should_failslab+0x5/0x20 [ 2462.009931] kmem_cache_alloc+0x5b/0x310 [ 2462.010457] ? mark_held_locks+0x9e/0xe0 [ 2462.010972] create_object.isra.0+0x3a/0xa20 [ 2462.011505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.012135] kmem_cache_alloc_bulk+0x168/0x320 [ 2462.012698] io_submit_sqes+0x6fe6/0x8610 [ 2462.013221] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.013833] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.014424] ? find_held_lock+0x2c/0x110 [ 2462.014959] ? io_submit_sqes+0x8610/0x8610 [ 2462.015573] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.016244] ? wait_for_completion_io+0x270/0x270 [ 2462.016909] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.017570] ? vfs_write+0x354/0xb10 [ 2462.018105] ? fput_many+0x2f/0x1a0 [ 2462.018626] ? ksys_write+0x1a9/0x260 [ 2462.019123] ? __ia32_sys_read+0xb0/0xb0 [ 2462.019621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.020258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.020886] do_syscall_64+0x33/0x40 [ 2462.021341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.021964] RIP: 0033:0x7f61c5901b19 [ 2462.022419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.024664] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2462.025587] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2462.026451] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2462.027331] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.028195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.029060] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:21:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 11:21:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() fcntl$setown(r5, 0x8, r6) fcntl$getown(r5, 0x9) pwrite64(r5, &(0x7f0000000140)="5a1f0c8e304fda8e7ca223889d358f710f1d5913e7b5416858ea504123406a128af864f316c3bc71567cc5690c68d2346817055969a209f1a5c63c43c863a61fc17595e8799aa9fab14afa", 0x4b, 0x1f) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:17 executing program 2: syncfs(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) signalfd4(r1, &(0x7f00000001c0)={[0x48]}, 0x8, 0x400) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7f, 0x40000) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 11:21:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff0007965854c2c8e77ad94d5a05af296c653900"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x8000, @loopback, 0x6a5}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) listen(r0, 0xbe7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e, 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000001c0)=0x7) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8) [ 2475.207944] FAULT_INJECTION: forcing a failure. [ 2475.207944] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.209449] CPU: 1 PID: 11533 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2475.210293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.211312] Call Trace: [ 2475.211638] dump_stack+0x107/0x167 [ 2475.212080] should_fail.cold+0x5/0xa [ 2475.212545] ? create_object.isra.0+0x3a/0xa20 [ 2475.213102] should_failslab+0x5/0x20 [ 2475.213566] kmem_cache_alloc+0x5b/0x310 [ 2475.214063] ? mark_held_locks+0x9e/0xe0 [ 2475.214561] create_object.isra.0+0x3a/0xa20 [ 2475.215095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2475.215730] kmem_cache_alloc_bulk+0x168/0x320 [ 2475.216292] io_submit_sqes+0x6fe6/0x8610 [ 2475.216816] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.217424] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.218012] ? find_held_lock+0x2c/0x110 [ 2475.218511] ? io_submit_sqes+0x8610/0x8610 [ 2475.219044] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2475.219647] ? wait_for_completion_io+0x270/0x270 [ 2475.220237] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.220804] ? vfs_write+0x354/0xb10 [ 2475.221259] ? fput_many+0x2f/0x1a0 [ 2475.221703] ? ksys_write+0x1a9/0x260 [ 2475.222168] ? __ia32_sys_read+0xb0/0xb0 11:21:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) setsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000680)=0x28080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x7db0, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_setup(0x5932, &(0x7f00000006c0)={0x0, 0x1a07a, 0x0, 0x1, 0x41}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x1, 0xd6f, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffc, 0x5e, 0x3, @buffer={0x0, 0xac, &(0x7f0000000280)=""/172}, &(0x7f0000000140)="bf65beddee9e1c8c2b9478bc25e397b943e2cffecd6ac4d46f3c4f86bf3edf35f635b6c370a20524f746a7c201df75100a4f2e8ef0eb49d5c46599a987a3ae8b3dba9ccc621f3e4744511f78142ff6132fb1104ab3696e4ae82a4ca3c7d3", &(0x7f0000000340)=""/118, 0x0, 0x10033, 0x2, &(0x7f00000003c0)}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:17 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x501000, 0x1b9, 0x10}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:21:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) [ 2475.222667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.227340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.227968] do_syscall_64+0x33/0x40 [ 2475.228420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2475.229045] RIP: 0033:0x7f61c5901b19 [ 2475.229497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.236260] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2475.237182] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2475.238045] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2475.238909] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.239788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.240654] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2475.266549] FAULT_INJECTION: forcing a failure. [ 2475.266549] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.267991] CPU: 1 PID: 11543 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2475.268856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.269884] Call Trace: [ 2475.270232] dump_stack+0x107/0x167 [ 2475.270697] should_fail.cold+0x5/0xa [ 2475.271180] ? create_object.isra.0+0x3a/0xa20 [ 2475.271742] should_failslab+0x5/0x20 [ 2475.272205] kmem_cache_alloc+0x5b/0x310 [ 2475.272700] ? mark_held_locks+0x9e/0xe0 [ 2475.273201] create_object.isra.0+0x3a/0xa20 [ 2475.273734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2475.274354] kmem_cache_alloc_bulk+0x168/0x320 [ 2475.274914] io_submit_sqes+0x6fe6/0x8610 [ 2475.275461] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.276067] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.276655] ? find_held_lock+0x2c/0x110 [ 2475.277154] ? io_submit_sqes+0x8610/0x8610 [ 2475.277684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2475.278276] ? wait_for_completion_io+0x270/0x270 [ 2475.278863] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.279959] ? vfs_write+0x354/0xb10 [ 2475.281118] ? fput_many+0x2f/0x1a0 [ 2475.282262] ? ksys_write+0x1a9/0x260 [ 2475.283470] ? __ia32_sys_read+0xb0/0xb0 [ 2475.284581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.286023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.287298] do_syscall_64+0x33/0x40 [ 2475.287752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2475.288375] RIP: 0033:0x7f2aef7e0b19 [ 2475.288829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.291063] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2475.292066] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2475.292935] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2475.293803] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.294672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.295592] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:17 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x9, 0x0, {0x0, 0x1, 0x4180, 0xab825ef431e388d2}}) 11:21:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 11:21:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) r3 = getpid() fcntl$setown(0xffffffffffffffff, 0x8, r3) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) r8 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000000300)) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000000e9ff0018000000243fe99ccd88043b2e8526d38f70ebf767c58fb6e4d162c3595c55838b00b211b304bc95fd457cd191b796829addc6a97d23f6bdbe5e2cf6fad95860e920dcf8e352ec4e71d021ae0432a6af222821bd4269dfae8d9b3d1e103e883ba7934dc9be74d4b64d45d3", @ANYRES32=r8, @ANYBLOB="ff0000002e2f66296c653100"]) clone3(&(0x7f0000000380)={0x200800400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x37}, &(0x7f00000002c0)=""/122, 0x7a, 0xfffffffffffffffd, &(0x7f0000000340)=[0x0, 0x0, r2, r2, 0x0, r3, r2, r5, r7], 0x9, {r9}}, 0x58) fcntl$getown(r1, 0x9) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") 11:21:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) ppoll(&(0x7f0000000240)=[{r1, 0x2}, {r3, 0x8004}], 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0xa7]}, 0x8) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2475.478880] FAULT_INJECTION: forcing a failure. [ 2475.478880] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.480421] CPU: 0 PID: 11564 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2475.481261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.482264] Call Trace: [ 2475.482593] dump_stack+0x107/0x167 [ 2475.483037] should_fail.cold+0x5/0xa [ 2475.483523] ? create_object.isra.0+0x3a/0xa20 [ 2475.484086] should_failslab+0x5/0x20 [ 2475.484562] kmem_cache_alloc+0x5b/0x310 [ 2475.485069] ? mark_held_locks+0x9e/0xe0 [ 2475.485575] create_object.isra.0+0x3a/0xa20 [ 2475.486113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2475.486741] kmem_cache_alloc_bulk+0x168/0x320 [ 2475.487315] io_submit_sqes+0x6fe6/0x8610 [ 2475.487841] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.488449] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.489038] ? find_held_lock+0x2c/0x110 [ 2475.489544] ? io_submit_sqes+0x8610/0x8610 [ 2475.490078] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2475.490668] ? wait_for_completion_io+0x270/0x270 [ 2475.491282] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.491849] ? vfs_write+0x354/0xb10 [ 2475.492307] ? fput_many+0x2f/0x1a0 [ 2475.492756] ? ksys_write+0x1a9/0x260 [ 2475.493231] ? __ia32_sys_read+0xb0/0xb0 [ 2475.493732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.494373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.495003] do_syscall_64+0x33/0x40 [ 2475.495476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2475.496103] RIP: 0033:0x7f61c5901b19 [ 2475.496565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.498831] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2475.499810] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2475.500701] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2475.501597] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 11:21:17 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000580)={0x80, 0x9, 0x0, 'queue0\x00', 0x8000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x53, 0x20, 0xd0, 0x0, 0x7, 0x51044, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x248, 0x9, 0x3, 0x4, 0x9, 0x401, 0x3ff, 0x0, 0x8000, 0x0, 0x6}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0x2, 0xae, 0x2, 0x3ff, 0x7, [{0x6, 0x52bb, 0x10001, '\x00', 0x801}, {0x4, 0xfffffffffffffffe, 0xcfad, '\x00', 0x902}, {0x8, 0x7ffffffe, 0x22}, {0x3ff, 0x3, 0x3, '\x00', 0x604}, {0xfffffffffffffff7, 0xf, 0x633d, '\x00', 0x704}, {0x78a, 0xee9, 0xfffffffffffffff9, '\x00', 0x400}, {0x87, 0x2, 0xffffffffffffffff, '\x00', 0x2884}]}) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x941, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x101342, 0x14b) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff0000002e2f66296c653100"]) r6 = eventfd(0xfa5) copy_file_range(r6, &(0x7f0000000540)=0x1c, r1, 0x0, 0x9, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000640)=ANY=[@ANYBLOB="010000008184fe791800000085459c085ee03b8decd71d067e939f0352aeefa21fbdf8768b2017d21024735e01b03884ac041c15a87b7523b475f3e9d3350ae41ffede4a5af44e745c45d00a2c49b95c63bfd30a7e4d964e95aea8f8a60d9528d9502eda47dc740d70326041c632be58bc2f8054b042d0b58aaae9a770ce8a5e508809e7570310321a97dec5e64e9ab0e794ffb456117eddbde2233ecac2bd3f51a7415d62d0d11818a4c88d5da7e9db57fd71a90784e1b383695a", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) fdatasync(r1) signalfd4(r1, &(0x7f0000000040)={[0x2]}, 0x8, 0x40800) [ 2475.502482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.503387] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:21:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 11:21:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00005a1000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2475.569555] FAULT_INJECTION: forcing a failure. [ 2475.569555] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.570918] CPU: 1 PID: 11574 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2475.579764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.580718] Call Trace: [ 2475.581029] dump_stack+0x107/0x167 [ 2475.581451] should_fail.cold+0x5/0xa [ 2475.581894] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2475.582507] should_failslab+0x5/0x20 [ 2475.582950] __kmalloc_node+0x76/0x420 [ 2475.583425] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2475.584017] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2475.584604] kmem_cache_alloc_bulk+0x182/0x320 [ 2475.585141] io_submit_sqes+0x6fe6/0x8610 [ 2475.585641] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.586221] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2475.586783] ? find_held_lock+0x2c/0x110 [ 2475.587268] ? io_submit_sqes+0x8610/0x8610 [ 2475.587777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2475.588340] ? wait_for_completion_io+0x270/0x270 [ 2475.588901] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.589440] ? vfs_write+0x354/0xb10 [ 2475.589873] ? fput_many+0x2f/0x1a0 [ 2475.590298] ? ksys_write+0x1a9/0x260 [ 2475.590740] ? __ia32_sys_read+0xb0/0xb0 [ 2475.595263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.595874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.596473] do_syscall_64+0x33/0x40 [ 2475.596905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2475.597501] RIP: 0033:0x7f2aef7e0b19 [ 2475.597934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.604110] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2475.604991] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2475.605812] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2475.606635] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.607470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.608253] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x7, 0xff, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 11:21:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="803e9177051ca65d4286e3b99aab811d697b31173f5c32f87fc21b6a94416d97901d3ae4ad6b27fa467637d1ec3faeaede65e94d0a681abc3f3ef0a6b5557f0a68ab94642ff685e8aee0e33924a68479054f09e9", 0x54}, {&(0x7f0000000280)="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", 0xfb}, {&(0x7f0000000380)="9d4dd8ae09edbf71b6106096b7f1e754d594bf1cfd6a6f2a", 0x18}, {&(0x7f0000000500)="7477e81be8ec6279b3a1e89ce4fadb6bf0f373b1cf16f19bd764a6715ed637096e9dc2db05e1f8340b215456eee65c0278db0c2f5ea941e04fab62d2a2bd5b1762850bd10b08f83a0e93aadfc3cc9505a10b7319b40311851d9a048f88dc86fbc23c5feccdc20c57b6fbdeb0ce07152cae4c0228f2a7652addf906be4ad4292c7824f758f58ef77e79762973412860e4e21437e76f9c3308f798f2f19df258fe559695193daa0207a748c9e5adf49ad909aa1ad9adc35ecd76", 0xb9}], 0x4, &(0x7f00000008c0)=[@hopopts_2292={{0x10a0, 0x29, 0x36, {0x73, 0x210, '\x00', [@generic={0xfd, 0x1000, "e23c8025cdd23232740aef1a14777073ea10627534f845446ec765dbf4b3aae9c620b4702331bae80666befa905e92c3876bf3d379dbc8cf304386ce14813767ffb1987b31d7af5b958710e7a8f0eb72d5db93a8b9d1da417e1ae9d231d9c80b5bc7dde0a0b40202f1d18ac9a614ef5a79fd725f625181c4e4e05a5913f5c9f7ae10d6989b920e50691aa783d5127364ef6b3bfe8abf81684c83fcce899cdc45ff86b321af12dc052d3d6e3f7c818b844df94c332e9bedd78cc0a5bb3db016c8971d6b94276c28687006140b35be87fbba3c2cbd0c349835ca29a5bc0136e3a0378dea635f19594154892774ccf3e160a3592798b29efbe258af059c76393847d46a892566191da61496a58f5c255e5c26b463163ddf06ba260908c160fd3252edcffce9219251619287a9945c343225c991dd9d3c571229b2f4c5182e569bdd378dd22f5e74cb01d8d813e42af1ef7978d062d8a1b6d8f5698e9c48ef71e44dffa0f241c5d767a81100d23134758dae5c786ad00a11b54c1a8e1f6278b002afcc2f0ed2f61a436819ba7519751160392292b1900d127a2a39557c203776fb0f49e947a7ef7e333337637497a5ed434ea3d6bebc904dd4b80a0e35a24b9dd6e17234564eab09a81c353602850ae913e96a557882f6ac77fa7478fe4f19c86866bf87d1315f17a7b2e9cd3b2bd99b3b73281413e5259c78460f16967f2ac7d2922fab6f5346fea023d5ff152f796f3ff791a893b59d8b11769ca38d2309d24ed29e4e1548f95216ed29c33d11b8f8f023efe027fa3eb7276b9f3c8ab03ca4fd17d3bd2bb7a7e771ecd67652938fc4f7690c86e10602b2c9232acf01a5645652d2b6f9f530abd4e84d0058a8b0bf60e5ce5e6215273a0a1cd57076dbc6e4df5f54ce10e98d01c4f9bcb3d989afc10a748a1abf0388aebee974ac9f89899bad795feaba0de367bc6e10b1493c251122e9d0ebdc920178c9c0b24d2136a5716ef99f1681b75f71934fc68a94d8dcb73af84fdfe494b8a02cce8dfd8f8f157bd4e0c1fa41ed131504fde0141bfcd4618c2d57d2fa855cf1e180f435e59cc4c7b5e03afadc36c3f802a1a6847e551201b64c208b7bde9eef34d52de37aba53e09037d714fd3cba22c5f4817cb0afc3e190ce080eca0c217c9187e117cf7f3e479c9827b0d943861398f97bf5c7b157a41e05a071fa56dd55a2cac99cdc13c9ccc70bcbd495ab48201f59ddbacf5e5ecac3b3788619103310b18f0f56081908aef2b2d29d5b4c36b98c6cae5d190b37fa160429e5acae26e414eeacb179f1b7065de7ac17ecef62fd7ac0c14cc083b37a8b26f12f4d93af993fb1d79e4e922c96f570e970dd1e57d8df72d1b21f526a1bfe1c55178051c17027e06a54a9f7508dbaeac47fedb78ad3e495e74772a90527db0d0353acd1fa26902f3636913c334a5c9c76411aa175db2414b757a97d41b20b038311b999c611cdbaabb5b921a1b0d898be54e2ca89a798500b63e500c53df37aa22c8d80336799bf68fa7bffc88c4af78d90e0fc6c38234371af52fa58da820fc13cc4bf69228cdf09928b46dc1f77b0344be14e9cdcf6c59fc8b10b8c390bbf9d74674b48d43195f58148f36831199551c69b610985279fb9d29419d2019f15a2b2c5568beee0f80cebe8ca48dcf82ed7e61163550d5500c523040c807bfdc7f432f8f3f115c69deb914e66e80acd5dddeb257e3e83828cb13046fe528d7bc4cf4c86055862f4b4e3488ee637497a53ea66010d528669e39343dd58b85b0144048482756649bd584287d0fb44b2a03bf7be618f39b794a0e18073b74d56342c8752d31b193e9bd761d88e4feeb0abaa1904c8180a5a6093443f8d96d9dca82877a3e89b6bb676254e9af2fb7b991db574e419a19637647ad484f64f6055b9a2ca87163ced4db91879574b16c20ebabd099d7288b86cc4336387e89e48926b973caf2a7f3dd1b223a9198305ec1c71e2d49bb0226e0ec9b312a5300bd5f9ff22a31cd3bcde9b0d08b68852d3616e9ac6c67cf64b6a23e75cedd39c3f6f66e198a0d23defb8f7d81f9ca136ced94887c99b89dd4113106ea458baf0ac30abbd45e4f6fb588eef1391e3ba4a4fad44404e622a98bcbee5cfa312fc53c6e04e4ea338961427f1667416950d34955f1543ad5bf173e472e00a7ea4030b8476cfd9926a4551102978686c3e2f12a04d43c61e9d65702bf4f9b16c89812bf86aeccc01c19a568988313acae8ee37de2393c66da7645b726e4f4c5e6cc043f82256a6210820b614c727679bb166c1299abcf22fe3e4298b181261717023d48cc9cd113ecec236389985276fe91da9894f202a29eb1e7ab327d621bd868f194842e097140e611be38907ce32ad8da4f99720f08cb284183ff501df7fb70983abade37e5c028a3b606ef602f0ee7919785ee61715e48120dacbafbd77e74eadc307e407243d02d5261544a56325a0ae58dd49410e0c805805ddb58fcc6477d41c504c59e201278023ab9fdddb8ffac79ca2d87c268a4af96935476739399919b4105ddc37e054e464f9397ef50ff269f38e432db67d90c38f94ab051a9d852e642dc907966a246ac98ee9ae94b418676242e43fb768c2a7a80ff215ce0ec647ef3925d7caf12adac1bc2ba88ee53dbc88abc3929edf69b0efcb5cc7481b241d0f80cfe97a82b70043cab3e9c34afe72c33d75772b4396db4192fa186caf77b38265f848a1cdd3bae5699dfb6f58798a95e160950bf92803b21bed82a3b6a3dd054f51c2bb14c8c1068daf1a58d6022045b968a187fa7413f3cc332a6578d618620bc97d53c50e005eab7ed266916b5499e079c7dbbfee244334def7b80956ac8451dc6ce42bdf3d36a0ebbd4555b74a358beb131f5ef872ea4692fbcbaf2b39360383711cf8c739b2610d6604da7067f2fd972677c1bd96f77568ddd6b0009f9a9f4b8911ad79e8517fa73de8d5e8d4dba96d186ac102e129ae5d8dc09108de48b09088784d7dea990f8309abdb425ba6057cd333bb640e4ca2c6aa4c91f0c233588455fce3307ad96834c906772dc46b5247ed87dff3e2f53c7b1f734575f6dcaf097739c599206373cdc5005ae655d7152b65ef0628462834b5fb68309c71adec88819d2cb03dcad98288340977cd78c24180a6a03d54d919ef208a7bab8fe913cba7704a31adad79f3a21383215f678235f368723fc22734cc3c58f6abb39779778ed63ddbd2ad4b0310a445ae4f44a442691e69441f33387f6a744fd862f819094716aa9a58e1e14983e945c9a4971c1a98569e19a105611e844e5287336fd704bc647a97e4ab3c1bcb03775e587ce4e05a9591067ec6070e73a260a90525280250199141258cc88c391cba58a480212db612c247e61fe177bc4345f5f76b03e2b3b3889fc9088620bbba3ffbe45077853bd28da6c00e856e4f678ba592f2355add57ab4abd70dfea0fd48bacd839c1efc0dffc6d422f56899bd4c6a1d68ffdedf55719e0e90253dc44e1a6ed241c707e266107dda00927a1caa35827864d47acbb035da0811e8c02b26a88ee6ecc5e8af6ea07257240a89260528b37a4c55fcad6c03b2c242bc4303c94d2804095f70e8387fe408ded9bcea6c74823b39e9566fd7de72a4aace253d740776f1d1b60bb91418bbe8e25140caffcc05d2baf61996e5e649e774c83348516b9a72113e99ee07b529eda198a33d3d55923e3aa5950c58575ce3c1eb1c454c959abde90103b22ae11042c6c1fc358e847f38fa804924aaedafcfa482c477b97b3ace8f403295a75711e963e7063f76cbade95849c0097e94c75f83fb6c357244f60803b5f4dc49e5a8c746bce6caaa1dc6af589c94a680e5ce60652b35f3476162247dc0bd021b1bc282d8bc9fd29d6d268207da1c57b0a9282b7083df1a741d11d93d99435339bf64096bd99ac76f8df7fcb1ed5d6c3bc842789e60d6e93ba38e00ebaf0c5badce8815559e1c0986d31432e2c1d79acb0373c0b67702302b03f169b75df150d9ebb3b03649b02dd53ec065930e6072bdc72396b0719b720321e20c4ade45401e09d26c5ac19bf8d7bc16d3e9a8a77741e56244c261c9ad81983a96787ecc26e2eca9501759d1b39a3a1bba3f89a5752cd496ae50eb5a2ad9db2ec8babc29ce9e8c87b015c66b196ce1ee61cbff9bf8dd40c55c9d35a3c676ecb125a7a65f69628efca3cff4d2965b7cd5485a93eaf6655e07f193cf8088865fa81eb16b77f5d2b564306e7c96fa3796c0e8e4bbebf83a9508531b3ac84b868d1b7b89802dd9808b052903d778d5833e7640fc834728ddfe6b3b175a7a98002a5b8b98d0e96b5bf29c756e06fa8425a5c0f6f0ba8e61cd4bdd284a83625a23e5a56609faa44dbb48dd74533083ac75bd7c663e3229b196b3f3c5990664e6c66425ad2b8bbddf23202e479139a7909ab69c2e52478bb153d0dc2528add56545ffc010235a90dff735ee412e7f4c362213c3647fceeea4055581441e4c8755cb012bfd704b32c99dd8bd78ffa1a649f6efadd9ced4530fb4d8640c88590ecc7507540fa055eda3be073e76f53062d11c092aebcb4ca2b7c0bf72ce8edc4a1f2bf63ace496e4615e785a0dec380050f1d0598929efa9012e3727518c322f44065626540391741835f4c7e7c4a217a3f17247673b549899c6e47da8914600ceb1a79467a06f15f911e76c5a1f80e1524b5d6c9a4182d776a412a630190940a41f597ca3eb7bdcc998d8fdea5e4da65ffb74a77bd30164264e6d3645e08324b07c99786b9ff81856360facd5faf33cdd474ce60d79a78e7f9a77598ccb87822d33428b787dd6e93398febf621b334b75c385a32a2d1faf56bd37af6a4b820bf673a137d7ac2712fb88fc915c78dde6a6c948b66cf0bd0cde090b16f7dfa8b23b97bd8ebf8b8142471198744cece1451d6788bdb3db847dd3f89204bf0d8beedf46956afa35a977395946a0f9a18609fe44947b07a47fed362fa7e23f1ba1dbaeeea3bde435ec8c92eaf6b329adf2e4c613253d4314fc5102ed414a91bb1edf7e12bc85a1e1a04b2ec2b5aebaa8df7066867ffc1911df1e7c4ff1678596188869b745de58b1f80234a2fb56ac18e379e31e8b670aeeaa3b5f72e95e2e9e0bd25ec8cd2b5f14d6defd2efebfc68257107de463fd8833d46aa5351cc35d4aa29dbddfec049f9a873e443ec43eb06c3a2fc4878f51fb8425bd060855d0430b5259edb41edc03c9d8648a0a4b0ff59d53bdd2524a679bbacec22b67c739eaecdf2c520c0ba38924ab9bff100bf08f0b7921bbe6018073e4043c57841f5ac7d7ca37997d638ac0e984927c47567617a6024e500182cbb1f62394b88fb25be2dd6afc65ae5753520c58ac8614bb7f713a36067a1ce98059d27a1d87e071377bae3ddeac168865374873d68ce36028b9e5c14cf13fa46a4256accbc73abae197a76c806326ea2ce0aff6407df4a9ff53bd97697a3a10ce08475af9316bc94ce2df4728803945e06b9b63c270533ad022d1b5aec3d10f3467b4ac70a5e2aca7510d8326c22478cb9ef749cd7c8ca277e3dd2bf5e81a4c87452272fee256e5f458baacdf4f1d03333d7760ee55de05402f91b2b255625c9aaf052efeb2f84090ef78c1043a6ccab60694d224f93b139d33de28bd749ff3191d30b22a35766a97bb168da655fe7279fd4ace37d555448176fa223ffb1f208eb8e099db50b3f7c0c299b2f8c2f1385a78d8091f1db4200fd4c0c410c6ae65c3430f1836b5922ab25f1aec719e38aaa80cda14c22f1f55bd"}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x50, {0x0, 0x12, 0xb8, 0x6, [0x1, 0x1, 0x7, 0x5, 0x80000001, 0x5, 0x5, 0xf2d, 0xea8]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x526, [0x3]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x3d}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x7b, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}], 0x10f0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:31 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 11:21:31 executing program 2: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x1}, 0x3}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9) 11:21:31 executing program 4: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r3, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x3}}, './file1\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/102, 0x66}], 0x2, &(0x7f0000000600)=""/190, 0xbe}, 0x0, 0x2001, 0x0, {0x2, r6}}, 0x80000001) syz_io_uring_setup(0x2b39, &(0x7f00000006c0)={0x0, 0xedad, 0x0, 0x0, 0x150, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000740)=0x0) r8 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000000300)) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_submit(r1, r7, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r9, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@phonet={0x23, 0x1, 0x81, 0x2}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)="0be109ec55d941aee196ce186422f2d6ce1d89c9dec273b9e5afc6c2f2e7ced00ec110a98d61ddd9a7002c2f230d110e4223334e0c03d21b20d5b688b2b10ab3ea1b81864790e5c40a9d9028d6117c66ec2971dd03d44210a50879e080be6ace8930786f2797607aea0c6f4e19e8b7bb7874a5c0f67a130a311bde795e0bfcae44cc8b94bb70be4cf99056b0cca2", 0x8e}, {&(0x7f00000008c0)="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", 0xfb}], 0x2, &(0x7f0000000a00)=[{0x108, 0x10f, 0x100, "5a18e7b10cddd8fe4be7b8452e0127768d77566a96321be0a81b1c340b104eebf4505c77e990a5d146c76b568d15b80b9ae1cd88e5800222e0ae8b2b6a575fd9a1843c28c6214ece75b4bdb7ee94cac168db88d990da858e4d0323911dc11b8c62a168967479891d896e7bcd3a3bb73da2583cc237dfd74829f33e7d3e68236a31bdf018264c664c192ec599fe34fec4a93c7cdba69eeac027916036d467546b9be7be22e1c2485e74f96c2e17e14b0f91580962801f0442830aa18e8da82a629858d3861f8bbd848c9829ec04060af70d31cf5d1593ec25cff90e9bd87f7ec8f073b62a781f0646f7e4e2a22cef7ae14e85d307"}, {0x28, 0x1, 0x7, "c5c9ebf5998df801f3cd74a2fdbf93949e90cb6b"}], 0x130}, 0x0, 0x1d3156e0cb78716b, 0x1, {0x0, r6}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:21:31 executing program 0: r0 = getegid() setresgid(r0, r0, r0) r1 = getegid() setresgid(r1, r1, r1) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02030000", @ANYRES32=0xee00, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000200", @ANYRES32, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="10000200000000002000000000000000"], 0x9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100010018000000", @ANYRES32=r3, @ANYBLOB="ff0000002e2f66296c653100"]) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x88000000, @mcast1, 0x1}, 0x1c) 11:21:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 2489.730006] FAULT_INJECTION: forcing a failure. [ 2489.730006] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.731504] CPU: 0 PID: 11599 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2489.732371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2489.733380] Call Trace: [ 2489.733705] dump_stack+0x107/0x167 [ 2489.734037] FAULT_INJECTION: forcing a failure. [ 2489.734037] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.734147] should_fail.cold+0x5/0xa [ 2489.734165] should_failslab+0x5/0x20 [ 2489.734184] kmem_cache_alloc_bulk+0x4b/0x320 [ 2489.737041] io_submit_sqes+0x6fe6/0x8610 [ 2489.737562] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2489.738171] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2489.738758] ? find_held_lock+0x2c/0x110 [ 2489.739254] ? io_submit_sqes+0x8610/0x8610 [ 2489.739811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2489.740400] ? wait_for_completion_io+0x270/0x270 [ 2489.740992] ? rcu_read_lock_any_held+0x75/0xa0 [ 2489.741555] ? vfs_write+0x354/0xb10 [ 2489.742007] ? fput_many+0x2f/0x1a0 [ 2489.742450] ? ksys_write+0x1a9/0x260 [ 2489.742918] ? __ia32_sys_read+0xb0/0xb0 [ 2489.743415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2489.744067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2489.744693] do_syscall_64+0x33/0x40 [ 2489.745146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2489.745767] RIP: 0033:0x7f61c5901b19 [ 2489.746219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2489.748523] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2489.749448] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2489.750312] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2489.751175] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2489.752088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2489.752955] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 [ 2489.753845] CPU: 1 PID: 11589 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2489.754718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2489.759755] Call Trace: [ 2489.760082] dump_stack+0x107/0x167 [ 2489.760524] should_fail.cold+0x5/0xa [ 2489.760987] ? create_object.isra.0+0x3a/0xa20 [ 2489.761543] should_failslab+0x5/0x20 [ 2489.762005] kmem_cache_alloc+0x5b/0x310 [ 2489.762500] create_object.isra.0+0x3a/0xa20 [ 2489.763029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2489.763657] kmem_cache_alloc_bulk+0x168/0x320 [ 2489.764218] io_submit_sqes+0x6fe6/0x8610 [ 2489.764744] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2489.765347] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2489.765934] ? find_held_lock+0x2c/0x110 [ 2489.766430] ? io_submit_sqes+0x8610/0x8610 [ 2489.766959] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2489.767547] ? wait_for_completion_io+0x270/0x270 [ 2489.768164] ? rcu_read_lock_any_held+0x75/0xa0 [ 2489.768724] ? vfs_write+0x354/0xb10 [ 2489.769174] ? fput_many+0x2f/0x1a0 [ 2489.769613] ? ksys_write+0x1a9/0x260 [ 2489.770073] ? __ia32_sys_read+0xb0/0xb0 [ 2489.770565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2489.771196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2489.771850] do_syscall_64+0x33/0x40 [ 2489.772322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2489.772966] RIP: 0033:0x7f2aef7e0b19 [ 2489.773439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2489.775775] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2489.776694] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2489.777552] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2489.778410] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2489.779267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2489.780140] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:31 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc0030, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x10001, 0x816e}, 0x400}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505331, &(0x7f0000000180)={0x44, 0x0, 'client0\x00', 0xffffffff80000004, '\x00', "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r8 = socket$inet(0x2, 0x0, 0x7) pread64(r8, &(0x7f0000000040)=""/232, 0xe8, 0x3) 11:21:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x6, 0x0, 0x80, 0x5, 0x0, 0x2, 0x180110, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x1}, 0x1d, 0xc4, 0x786, 0x0, 0x8, 0xdf, 0x7ff, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = dup3(r0, r0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001100)=[{{&(0x7f0000000300)={0xa, 0x4e22, 0x800, @rand_addr=' \x01\x00', 0x8d7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="9fb1b07d4cb34f34ef54e7a267861b7fbe8448aaabfc469bc13e786c762a210f4f2db1959f208689d807e30833d751dce69a11b5aa767536d131c84cf51bf6ac454cf16b3cc508340508ac2b72b94e771fce9ee35f76cf51c09abf801f018908250a19a13e98ea25a74b8a5b759d7219d64aa137ab577295f40a1228f3476c5d8b9eaa162f3d53ddeb00dc2b58c55fd379e3885463d49e57f09a2ebc2d5237b2e518a42b0ad6099e0a573e7a3df47f95a5e99c2ecfaf2aee8ef2ccc0a4f9f63064018a49742f00e97b6bf7e5ff", 0xcd}, {&(0x7f0000000480)="42e75d98bb4a8c354db1461f048264d9096368156dd17057bdcd5dd3cbb19397a47f4817413f6dd704b78384dc0a31dfcca14a7bcf9963d6da538c2d3c378c531a87958212dbc3905506aaece6b2ed2ab642d4f11048faa2b891e11d35d006578d9b0beb4f5d2de7c2d04baa60825e5d066e0064aa3004dd308b393b77156656be722bb78c120e903a4b8d73a509fa79f9272114e7c8cabb7aaacd2c7232cbeb6d1a6d25bd4c604d9304191d06e55e577b11ccc571fabf", 0xb7}], 0x2, &(0x7f00000006c0)=[@hopopts={{0x1e0, 0x29, 0x36, {0x2f, 0x38, '\x00', [@generic={0x3, 0xef, "6fe2ed4cd507329eab2714542cc02f874e981c0feb452cb7b1be5ffbc5bbc31ebdaf49726548c0f0e7aed5b978808c07a4ce5b0770dc049749bed491e1a1daa34423978e4b7d012180133eb98c444254c642649d81d6158c132b55cd458d544fa5101eef8323001052c05fc7909d72545ae4bfd192fdb9cd87947b57747cd5ffe0a5c12c36b0cac4d3d8e0d0bea5757e1c73f90e96fe0c4e033a55cd3e019dc56535932b068da9be4b3a35d94077882a5feae98ed8f97ac053f2d213e4621af0d78f61961550e206086ef0786adc47fde422eef5f9c088b8fe42d1cd112e648bf9f216435794421b191faf0c4543d5"}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0xa1e, [0x80000000, 0x2f, 0x0, 0x401, 0x5]}}, @pad1, @ra={0x5, 0x2, 0x1f}, @hao={0xc9, 0x10, @mcast1}, @generic={0x3, 0x5f, "9d94afe06a69480bbf0fd862973a88e58011ea158112b6f64e4edc3a9035f3d403cf357ec5a3204fef53aa507a050967a28e2b9c33eef5ff91f0b988faa5b7565fa34f2c5ea6e48a5be403b8a5f9eeef2f77ba8c004726a464cb892e1ecf11"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x8000, [0x1f, 0x4]}}, @pad1, @ra={0x5, 0x2, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x3, 0x0, [@empty]}}}, @hopopts={{0x30, 0x29, 0x36, {0x73, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts={{0x50, 0x29, 0x37, {0xafd57538c1950002, 0x6, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xd2, 0xfa84, [0x4, 0x8]}}, @generic={0x6, 0x14, "5deccfb6250afe69732b980aa0216dcf53b5c8b2"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x984}}, @dstopts={{0xd8, 0x29, 0x37, {0x2f, 0x17, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xffff}, @generic={0x4, 0x95, "b78d9bef3b8b6edc60bb6c2ff11deaf5fd746f836611a56e2fdda8074d577bd02fcd8a14220a8cb7f3ef38189eaf0cca25eda7916d24f78649fba2195d9463bdb3ebcb0a04ead61c703ab804b31b1b676dea0df056efa4a5f39f54cfa867af03c130cfa22d1440d02078dca3a3bf906119a9740265d53d3172e920ebe9fde15d9fa104940015d3a787ea4007399550f2fefe6bb0b3"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}], 0x3c8}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x5, @loopback, 0xb4b}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="afa7c8ac8910fd9ea5d3b435ee7a50a072e4b3d13651b00617dabe1c370aebff4a75f29d8b82f32ffa66491309bb8405d5d3c1319bf07d47d01deff368161108c87e787b599a3a7b8874f2b89bbb4c5c6f21a021b180b133921fb0f77ada1b3b3760bf2f53eb7bd05b6967b2216a", 0x6e}], 0x1, &(0x7f0000000b00)=[@flowinfo={{0x14, 0x29, 0xb, 0xeb}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x0, 0x3f, 0x0, [@remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}], 0x88}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x4, @remote}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000c00)="d4e6c6f07cf17a60556cb1a673f40f27bccac4f2b9808dac78f2878d77297d908e970325f0ce5ba12da19667dde47c50a5e2f60c988f3a83a465fecbd29da08c49d015057f89f270a771b9cc7c5883d4b3f024c4c145b7a612a7460989fa828adceca3fa30a0abc9e85bca133e213d0e63fa5a10e3b1000d59cb5c6118f8c57e806ef1ba", 0x84}, {&(0x7f0000000cc0)="9175a72826b31e0cb675ffad1c1572c2eb810607135bf7eb157fe9aa0f226f5f31b36fee2f727bf2bd3e8c90fe47f00b7fad9fe41aa4aa8c5839f40de89f", 0x3e}, {&(0x7f0000000d00)="65145be125ca030c7d5608ac1896732086e7f4ee688d07c217a398685b72e6ed5246a2a1cabe470349c4346fb5f1be", 0x2f}, {&(0x7f0000000d40)="f7358c3dc8704159982a54d4f7e4e5357591cb8a81920fe809d07d33e469996e0a61b33e19fdcf4d37e9e93fca884f92501bf035dc685c999beefc0d3f965a3154b2824452665e9539e6b03d82dad7730e667bd65fd05cecfe29454fa96a4c4a1578", 0x62}, {&(0x7f0000000dc0)="2d49b556f902f2b8a1c6fe9144eae79a248f71edb8cdd728950af094606331203c7914ade692c05c771cf6263f76a4fb6fef2122f17e19dd9e6c519c0b44356525507990a16bafd839c1ee75b6bb24a375257c884fe3d7a54dac040f6113254d290eef92a8d8050c438a999e2f90964817", 0x71}, {&(0x7f0000000e40)="074fe9c327eae91a31b5e7fb9ffcfb9ed9ca0789db3698efbc6de108615d511e20dc4d", 0x23}, {&(0x7f0000000e80)="9fa211c36bdff983fbf7c68e65e838baf79d2e964c6c1c5cbd2af494bb87194f54b3ffd076ec27e0eff4b1e3f4993c00e6a419f4fe093606843faa315f1881cdfd2079ab66e3b26140e0b14c217c729c72d49c7d7f1729997744a0aeb679b00211c3c7b8405b33b722dc7a1ac0b0ffd6fef1886c6c062ef80da80f7a8f9f30934d8b096e677829bc9396de8629795537a0577144e082c51e70204576cd4400dd1bc2f9dd1630443f", 0xa8}], 0x7, &(0x7f0000000fc0)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x84, 0x1b, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo, @pad1, @generic={0x80, 0xc8, "76b8f08ea08da976174e825134b02369ff7659d812660ee7fab6285515c885cce8ea0c8d7a38cf1310cd4fc29e709fa918b44b8cf30ae23dab4bb358f6884a0761418f3b7fdff197ce148db5281e8514f93fb79ae596d89e1142d822a4a61069a6c9a4b3ebec2dab36d9c9d4826a7ee89c0d4756142024f4d50da6fcc020da9eed9a1d184c6bc7709eeb37f3692d7696af95a20b0158d493a860da46ef588332a29974a69b5ee577a38e513ad36a1bc0f259aeff2a496de05fa4c78669d57c30f6914f4418eec3e4"}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}], 0x110}}], 0x3, 0x4001) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_io_uring_submit(r2, 0x0, &(0x7f00000011c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x5, {0x0, r0}, 0xb9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x700000) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x1c7001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x6, 0x3, 0x3, 0x40, 0x0, 0x78, 0x4, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x401, 0xf1}, 0x40220, 0x3acc, 0xb31a, 0x5, 0x4, 0x8000, 0x8, 0x0, 0x1200, 0x0, 0x1}, 0x0, 0x2, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x40010, r6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 11:21:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:21:32 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/15, &(0x7f0000000040)=0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 11:21:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000180)}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/175, 0xaf}], 0x4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0xff800000}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)="85e6589878315516db6fca349fe29e3a96e73d7e55fee0c57fe18e03165fc2b66bdd036310c49a4b0ce9aa2bdb40417b221383f99593faa5f9ff4d6a97ae0d99322f109b85ef20281d048984d5a9f9d5f0a0be46bf2677d9b0883f62dfff2db892ae883c7deabcfdc7b300f6c0801c7e315d24643462a05b40ccaf5897ed5ad4b1669aa1b6c8aaa6393c6efd703628e39f3fa83a927f1b8d84f2468561f9c5e8f8249bddb5a97792f98e1f26d9cd4430fbdffc4a0a41d471f43f3b75971e729af0794a907c50f5cc000c62310db2bca7d42c3ffaee5f022e5b69ad3b6760c6ab700b6af8640a0ec159a39f148e9183db44cd5d34189cae76f63817da702f8718e7125db96bc722aaa81c8f08b9e2863cb872446feffd7c626fb08411cfd5698328a1e2f16b6c1cb2176ec97eae2ea78339269bdc9fb81c3a042b76ba42478790f53ea8718e226ba3648e2513bad93c333031f6482faa92357a789a4c055b1ed13eae31ac61d6409524a486686f0341585cdbd2da39914cfc9c177a7f091b4e71decdff5c19a5876467ef9d179711376aae0817e82f583c1090d24431d1384b151fc74e64ec738fb1fc86341943f4b48a563f0940419579358ffb7ab25e30dfae5b8a5051afbf0a182ce5e9c11fb9310da9507fde79a3328023f57dbc2797c09600dd41d5683ac3639863b4e0e3e264c338525a7dc3c90af8a94258c6b7e0dfd1ca52a30e0bae0ce08f831d75ebcce3cb843d2b9d33143a735e54461598affeab696bd7658980ef9225cf186c7d644604054a8a0762cd222c9d878e649790bd59dd78f7e65c305ee753bb94d20130081261e655609f1fcf64dbdb03e3b45acfc21a89ca6f7985c06ea544ac3a2fa395b4b97c2c86ab419bbf76b3a79cc831baad36603fe29ed3dc59e6464256bf4a97708561c694ef134a8163b45a34c6a5ab699abea49cd84f815a15195619daca0d3cb5de0e0d8b634d403a3be8131971ac4739de7c872bfd9340e88ff13a337aae110b7fef85b34f1a4be4dc3d80af798de37444f135a724496bbc91f3eef3507b5fd6a817d35583c74755dfe915daa8cb5de7d3300f263b5b0386c9693293fc10dab1c79dae4fdf1f011fcaf8b5945e67d345cecea7ed28e13a80c08553c85557d2d8a965c6c48caf4afbd20a80cc430fb70f6f42ef11718e7bd03d9b1df61a6b02273aad10820aa755206a9604028848f025be9fc028c1ca78816be4bdc53b9688345ff8b96df5e8301f2a567c0f9926be569c6d98f2c7f4b32e403156cb6fb5f4d3d13ddf9abb0de1845d00859d47db8caf2ed255b75bb7af1089c8140e03d8db9a9107d3466b85fbd2b0665c75f89c4cebe78a70e3ccf971e4c0a458165bca09220bb9b61977fa2f57630ffa5681ec8ddf0adb082b3bb3823a82f3d492e6e43ceb8b2d218ee435da3d00c2c4263e659a27240d0447e535c4ce89f92c098f33219df11472a4a070eafe017bc76273aa6b6502184c6e5af84be6098c186fc56b1124c4ad474b20a80430fd7dadeb88eb57af197ecd0087f048aeafb3ee623107480a69ed06b91b6938be280453fdd6ec3655cb48b8be8eea36d83edf81d1e554cc2d515bd3d5623529ccc7817c6cc4e6fff40bc4823a5c880eff3797d3e0569d2c08e1a3d06515f3923abca5c9e688c9926ccbb79a10f9a2619d192f02b5a5593c73058e727586c0938a136c7c6edec5f3646500815907da2b407fea95000aad55c8176e35b27f8c70258c5d6d8ad108006a62ed5889f5d1e0769ab9ce45edf172eea59fcb1c75bc173695b7ba793e4f7ffb8f280671103e4bf4941a9d8e337b1b783631996794266fffb79d139eb6d66c001a793f6f38e0597af03cae421185b6eb5588cc9c88a5dc28238a3b92fda9e05516fa556c958c659623eb70fd66e8c100c7ecd450c8cf452897c48d962e8eee1c3a781441151ff001275a984f0eb19dfdf2799898de8f0a01d1f373e039b8999bfbf949fcb69cb5e9521b49d1c396bfa859d1890ee9a783e10ab86417f00eac9c4bd1b441f490c4d0d6d99ce4518bf0cd1adb39a4b74ec2cb331e318bfe967ffb12c6b73340ff41fe6fd032b70467f9525c1e6e774237f95697fbfa2e26c804f136b061fda632bab056e228dd3fc6dbd1a741881397d7553d77205716207aa1a1c1fa5626d324cca0ffa9c6bd5219ea1002636f71f70c11fb5af18f952a80660303a6156661060a2fa40fb46e68c0f978b9d092b76a6838bc89eb92302f9e64c1c75eb3074f0ae05f1bf81d217639946b83378839a16fc96659e712af630010e60dcb34ba858c9dcf21c4ce1cca4f2ce030ac1db4b2ff1df17defbd0bfa7a17a0163fe8f2902a76148de962394c4adc5e48434469a4bbcdb367ff06d2bd1a46d82726d210fe31563294f81a951e39181689518acfab2c4fecd42ad772d088e0bb16d29ac88fed2700abb5ef16e0cac3d057e59c196869cb097feb3df69e045b0517df59caff503730ed6adc51cb53d1e594061576f0386d775620c9b1a6d233a788415181b5f9756e6d79d6fd705deda6303370dde766afe00c7c17a482467e4f1084bc764b234c90e6eff19a4380487e71395994f2d12b978c11998576682a5b65115a88884bded37558318021a28d0a60927a29c467417516d6715b71f535239489a89977ec635e80f676462b7f794618a733c8e0f58c556c356285f2364f4659701c55940b7a0e2d2c32ce91b0656c28e2db70986d52999ec97b5fe22ca0f3589dafd9f50a52f09fd7fd6dba7f1a0ec5fc779ae04459eef7228f48240d55538e9d929fee9b2e76476c7ae5246e86d335ae6a78589aeff8f31e9529cf7a65bfc9a0e152b51e531e25c9bc018d5eacb5d7a0ed4272823242e85181cd5f78ef1cb748480a07b5084451f2041b3c979f4d82c2e609d078c4a88d9e04d493ef58006ce767b0dc29651fb13f341c0c7c99db6e7efbfeae4479e48ce11e186348717e2ed336ffc7ad82827ab5eed94c5239d19cee24f260de8955f3cd6f52fac3434f04b7b94d4e9007411fdc93c4745b06388603fba0a588e8bd50108ca1c691837ded2d0d94cfeb25306420a4cb45ecaf0916ec2787becdc704f9c05c616df5722dcadce92b7b79cc6e92bbebf2997798242ae1d65148bf70acd8b187616dca6528dafab6fd267d147bb2c53f599850ed86ffac52449f0c8dab65057875603b0e9c121da0fba2cfae7ce25658e274acd8ae020d09860e83d1ba1d2c9b7a1bd437d4dca9b1ec74c8b5c73a03e7a006788e796d4218f43656a2dd6f2964d5a31c52b51f1d8b76f6f7786f5e7cb4e49e56c0afe60800d019a832e40aef36d2206882b0bac749fa4fe675664e6832e96b342d0585444927383525d8a2436695ac7ff9c213ee6fdaebd54df6cfc9cadfafe86973827494a1b4fe7114bd3681160af2aa16bc437a46c3f219cfad41abd0210f10f4b746c20066fa82b142fea61a337047151a7074b0d29ca03d5d2a407e04faffd2c04405ad92bdeee34404165ce8ce9a2cadd37a4e3eac1ef1a34ff7b2e1e7117dd00dc296f2b2d381b0154b3290e89747f61c01e7501a1bbbd798d30925c5a8377eee8e3968f5684d465eb63b0e149f304bb2e7ff91617370921b9956f936e2fcd053449131ceb6ace9ca4c0cad5bcb1c1700e1078f65cdea49e90f894329ef88648a95e410e5f06c8ef4a6845e0415894fc85bb6ee6cc658aec7f0c431cd1d5951a80abb7d81285eb8d03592625b51e54ece4e51dc417976caa75ea22c4bcc7c84f9f74052af7eda94d49e5dce07e8d65aea2471ca191d2253f1538e92a3ce1895b742288b3cd6a5b0cb590e18928e3ec7ee4689ade87dfd6731d8f26d6d42e4033f62d48e5cf2930bcc7d3b414749048a7a92533e99fe0ec0d7c88bb7ee062130a8731fd7276a6e0230f0bd446465ffabdea2928117e337a255e0901e3ff1ad331ea3c0b4181f147b33fa40ff97f3721368190ab23563fb09315150b2a738c912220330bf010d4c21197d07215e5fbcf686516b0f454969722923e55d9be2cbc9694481141d1033efc15e6fc452c602a6048638b3bf62d2c3e6d61a3037b21897594f6a39c026e48549410c9868a1f90303947e8432486362a0713c0af0d5be2767c285a77f1ee99f2f7c02bf7f01ec99106fee37cb1edc5749b93db48fb6cfdf5bba3e19fdfd27128ac473f6145488dfdfb2920f00a3240ee2b5c5434698138311157ebfd3c02040cdc68471672f55d273194da9db52c15dd5ab2c23abbbcc791e1b4652afaebb4441eed37e6105c265aaef3712f0f617afad0012cc54591c466dde088d04c92536486f140166540b1ea7ce765c54557c3fbcb2fe3bff6ab3b71916acc8a118a7ff208d391e4dd3e69d8c7142dcddf3b09b18cb5eef32dc2fcab91d431ee2c6fa7fbd5bb4cdf4e3d8e7ca51949c2fd8e8cbc3ca84356c8a45f0343eef2d1c0ca8317922e52ecf68feca7f59e0cbad31b8ff1e9f3a427a65714d4794c64d3bdf322eaeac1e97d60decbe086e52ea756967d2aeb8c02caf0865762ff480d42738add0fdcd1841c91906973a11a9aadf55acef024ef541136ea630ea9b3013385e5cf544751721942be7e1d162f2c039498bc89f70f3d03ee3b44ecab36cfd27b6e795fb327a330c8116b69e90e55f6fd202ad98d080774c7a9b7aa7d37a73e895a6e309bc19a55a93210a8cf78cf10a0130560f3bdd81434a584a807c5cd24fe86049bcf8f3468403f52d4a6d5446c7afd97fc7ab4528256f048f10ac4869464bf5e08cd60fc35432870d6d4c9e5b011a694f604e7af4bea216f68a8a05adbb44541cc503c91c28df9ead0a3ff024901716da82c9d58c67997a21ceaf18e2d8f952d27d26c199a2375bf79eb3a40c97a4525b529309ba79a1d656038a826ffba85829311e7d13f2b1ae6afd67a83f37fafb93a717fd4ff4e2b060e6a54a6ad1c4daf5300ee65de20d71a9c5681f625c9bc0fc66807f07f653524ea4570a72de22e9ba45a13072d12a7dc4beb8ea381c040d314f39e609eadb607171dcaae25d96e48c710cc695cbd45a7a2d39e27a170da48998cf00603e6e1633200bb65fb22b42fe1d93ad44b0981dcb64ce263824114636f5e91c9e01507d144890bf04f483f41a6d9a2aa62ee8d4ae7e47bf385f5efba3e19fa3641c7178f4ec76d9a3252751b1bf7450e049c9c0bec401e75a02388311cec33ec987db97b7c3b707913d38163667bce822604e360792118bf5d589956b9ddb15f475d1021515e2d186d3922310b70660fe9d5289a1a79826b248e3731bf4b553ea9e37a2e2a8ec94c44ce02b75b68d46cdb7f3ad30b9c770f89b8ac3f9956b5061c2535ab93e8bb65a428ec96fa985185615e2125bbdf6427fdb46f4987305cedf7a37a1acb83f8d1270c9d50afe677ab022f1739b821b8789380985e7da674dda03710544155d4d1ad97302e8feb0f0958b2550e89513cbefa83df3e16e1064eb2864e7e77fd1cc4dee0ca74268701c281f17071ba42df02ed7f6308ceaee127721c9627c82f9bba7ce05410560fb44fef73e7b05ec7867e4a4557d60ed9df6932aa114413a21d3374263824009c209c3cc7c09e22417fdce4016b8dee2ace50d9164dd47b4da7ad241cb6a2242ad9f6a26fcdf6f62b33dd2a13ce2845e31fa1fa0b349142cac45e1f69d00381fbed27bca3ce5ad22981025dc62baae3f8b19ae6731147bdfd2a949f1ee5c41205604f3991e4bf86ce2984dff94ea1b03b23f91f7eb3916e640663d27337026b6f119c09128", 0x1000}, {&(0x7f0000000240)="617ec40d6c5d7c22fcb66f92d3515a40cd8558", 0x13}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="68ca6e633f030b21b1c5", 0xa}, {&(0x7f00000003c0)="0c952146228783422e585663900238800918", 0x12}, {&(0x7f0000000500)="cdc8fb3a32ea821f60f1072a6c3e517efd6db652e2e52d7c7ab127063c5df6009cf8781c0b937fd848584ba35d09e68b864f51bf59ed03804d46b75a8d8ac4f6e6a8bcf607b0dc92805703c8c3ab58860b0c122fec4adbae4804efcb02e7464e80231b66347f6312f3e882c01c148b8474dc58e295554b1ae1e07242cf4705e309fa56a3dd444e1ffbb87752db3fef423de5fda1ad2fe84b4aac9cbab890062154d6604418c061f86a6516d07bce50363fdedae5ed81073e094a3da99ca7bca07175a40b961418100aa7c1a703d31d8351902d95", 0xd4}, {&(0x7f00000006c0)="eee84b21d36e22ae85a6f3dde12ee39bcd012e5ee7229f231731a077bbe3ddcafab70e3e532dec2539bca6cf3a9b3beeb08f96229c0dcb2e12ccb80212207351bf4794612de05d581110260f55664364f18ae70ea42838146593704ad25cd919d7265c5701981fcd1673fb6a1c6c8eadad36e8b621c30b42aadfc51cb136a73586a4124f3c4b622e8e9cb135b8cf5653c4014442e54652614e5301ac945e8390b2d8af6b2459ce9868d0f020e998faca1ecf536f4d1730a28850176cf3b4801b672fe20c12477621966d845377b10e89e093d34613e4ddf111369e66b2b7fcdc534a9e973c4a8821642ca6f236756094e16f47b889", 0xf5}], 0x7, &(0x7f00000018c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xff}}, @dstopts={{0x20, 0x29, 0x37, {0x4, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hopopts={{0x38, 0x29, 0x36, {0x11, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0x8, "e78645570dea2bf4"}]}}}], 0x70}, 0x4008044) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 11:21:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) syz_io_uring_setup(0x1244, &(0x7f0000000340)={0x0, 0x30a3, 0x8, 0x1, 0x1c8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0xfd, 0x0, 0x80, 0x0, 0x0, 0x3220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r6 = getpid() fcntl$setown(r5, 0x8, r6) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000040)=0x80, &(0x7f0000000240)=@ieee802154={0x24, @long}, 0x0, 0x80000}, 0xffffff01) fcntl$getown(r5, 0x9) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r5, 0x81, {0x0, r7}, 0xfffffffa, 0xb, 0x0, {0x0, 0x0, r1}}, 0x3) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2007, @fd=r5, 0xffffffffffff7fff, 0xfffffffffffff3ef, 0x2, 0x0, 0x1, {0x2}}, 0x8000) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2490.014192] FAULT_INJECTION: forcing a failure. [ 2490.014192] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.016881] CPU: 1 PID: 11632 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2490.018691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.020993] Call Trace: [ 2490.021671] dump_stack+0x107/0x167 [ 2490.022606] should_fail.cold+0x5/0xa [ 2490.023590] ? create_object.isra.0+0x3a/0xa20 [ 2490.024789] should_failslab+0x5/0x20 [ 2490.025773] kmem_cache_alloc+0x5b/0x310 [ 2490.026826] ? mark_held_locks+0x9e/0xe0 [ 2490.027889] create_object.isra.0+0x3a/0xa20 [ 2490.029030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2490.030349] kmem_cache_alloc_bulk+0x168/0x320 [ 2490.031541] io_submit_sqes+0x6fe6/0x8610 [ 2490.032648] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.033941] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.035189] ? find_held_lock+0x2c/0x110 [ 2490.036418] ? io_submit_sqes+0x8610/0x8610 [ 2490.037772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.039275] ? wait_for_completion_io+0x270/0x270 [ 2490.040819] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.042160] ? vfs_write+0x354/0xb10 [ 2490.043236] ? fput_many+0x2f/0x1a0 [ 2490.044310] ? ksys_write+0x1a9/0x260 [ 2490.045413] ? __ia32_sys_read+0xb0/0xb0 [ 2490.046586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.048128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.049623] do_syscall_64+0x33/0x40 [ 2490.050697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.052208] RIP: 0033:0x7f2aef7e0b19 [ 2490.053284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.058704] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2490.064960] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2490.067035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2490.069159] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.071248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.073364] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 11:21:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 11:21:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x5c79, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000240)={r1, r2/1000+10000}, 0x10) syz_io_uring_setup(0x6b6, &(0x7f0000000140)={0x0, 0xe4ca, 0x0, 0x2, 0xfffffffe}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x400000) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) copy_file_range(r3, 0x0, r4, &(0x7f0000000300)=0x4, 0x400, 0x0) clock_gettime(0x3, &(0x7f00000002c0)) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6ba401) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) write$sndseq(r0, &(0x7f0000000040)=[{0x1b, 0x8, 0xff, 0x9, @tick=0x9, {0x17, 0x6}, {0x9, 0x8}, @connect={{0x7f, 0xff}, {0x5, 0x9}}}, {0x1, 0x2, 0x40, 0xff, @tick=0x4, {0x6, 0x7f}, {0x7f, 0x1f}, @result={0x3, 0x3}}, {0x7e, 0x7, 0x3a, 0x47, @tick=0x61, {0xfc, 0x2}, {0xfd, 0x2}, @control={0x4, 0x10001, 0x3}}, {0x80, 0x72, 0x7, 0x1, @time={0x1}, {0xff, 0x80}, {0x8, 0x1f}, @addr={0x1f}}, {0x8, 0x9, 0x8, 0x45, @tick=0xfffffffd, {0x3, 0x2}, {0x80, 0x2}, @result={0x3, 0x6}}], 0x8c) 11:21:45 executing program 2: ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = inotify_init() syz_io_uring_setup(0xdc0, &(0x7f0000000100)={0x0, 0xf8ef, 0x20, 0x0, 0x208, 0x0, r0}, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4007, @fd_index=0x7, 0x5, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xfffffff7) flock(r1, 0x1) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:21:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) perf_event_open(&(0x7f0000006740)={0x0, 0x80, 0xfc, 0x84, 0x2, 0x40, 0x0, 0x1, 0x2000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000067c0), 0x4}, 0x400, 0xc1, 0x80000001, 0x8, 0x800, 0x9, 0xf709, 0x0, 0x6, 0x0, 0x3}, r2, 0xe, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000006480)=[{{&(0x7f0000000200), 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000002c0)=""/225, 0xe1}], 0x2, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/201, 0xc9}, 0x3}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000740)=""/57, 0x39}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f00000028c0)=""/222, 0xde}, {&(0x7f00000029c0)=""/154, 0x9a}, {&(0x7f0000002a80)=""/195, 0xc3}], 0x5, &(0x7f0000002c00)=""/176, 0xb0}, 0x2}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/150, 0x96}, {&(0x7f0000000800)=""/61, 0x3d}, {&(0x7f0000003e00)=""/156, 0x9c}, {&(0x7f0000003ec0)=""/252, 0xfc}, {&(0x7f0000003fc0)=""/23, 0x17}, {&(0x7f0000004000)=""/211, 0xd3}, {&(0x7f0000004100)=""/40, 0x28}, {&(0x7f0000004140)=""/67, 0x43}, {&(0x7f00000041c0)=""/253, 0xfd}], 0xa, &(0x7f0000004380)=""/184, 0xb8}, 0x3}, {{&(0x7f0000004440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/184, 0xb8}], 0x1, &(0x7f00000045c0)=""/214, 0xd6}, 0x800}, {{&(0x7f00000046c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004740)=""/115, 0x73}, {&(0x7f00000047c0)=""/19, 0x13}, {&(0x7f0000004800)=""/51, 0x33}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/45, 0x2d}, {&(0x7f0000005880)=""/180, 0xb4}], 0x6}, 0x1ff}, {{&(0x7f00000059c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a40)=""/155, 0x9b}, {&(0x7f0000005b00)=""/14, 0xe}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=""/213, 0xd5}, 0x80000000}, {{&(0x7f0000005d80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005e00)=""/101, 0x65}, {&(0x7f0000005e80)=""/210, 0xd2}, {&(0x7f0000005f80)=""/180, 0xb4}, {&(0x7f0000006040)=""/103, 0x67}, {&(0x7f00000060c0)=""/79, 0x4f}], 0x5, &(0x7f00000061c0)=""/244, 0xf4}}, {{&(0x7f00000062c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006340), 0x0, &(0x7f0000006380)=""/253, 0xfd}, 0x8001}], 0x9, 0x2, &(0x7f00000066c0)={0x0, 0x989680}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006700)='/proc/partitions\x00', 0x0, 0x0) dup3(r3, r4, 0x80000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0xffffffff}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:45 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x4}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r7 = creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r8 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r12, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_io_uring_submit(r5, r10, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x67fc4f71b9ee21e4, 0x0, r13, &(0x7f0000000180)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x0) 11:21:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2503.387956] FAULT_INJECTION: forcing a failure. [ 2503.387956] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.401564] CPU: 1 PID: 11651 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2503.402409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2503.403415] Call Trace: [ 2503.403746] dump_stack+0x107/0x167 [ 2503.404230] should_fail.cold+0x5/0xa [ 2503.404701] ? create_object.isra.0+0x3a/0xa20 [ 2503.405262] should_failslab+0x5/0x20 [ 2503.405726] kmem_cache_alloc+0x5b/0x310 [ 2503.406231] create_object.isra.0+0x3a/0xa20 [ 2503.406769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2503.407390] kmem_cache_alloc_bulk+0x168/0x320 [ 2503.407952] io_submit_sqes+0x6fe6/0x8610 [ 2503.408501] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2503.409106] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2503.409697] ? find_held_lock+0x2c/0x110 [ 2503.410196] ? io_submit_sqes+0x8610/0x8610 [ 2503.410728] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2503.411316] ? wait_for_completion_io+0x270/0x270 [ 2503.411910] ? rcu_read_lock_any_held+0x75/0xa0 [ 2503.412496] ? vfs_write+0x354/0xb10 [ 2503.412951] ? fput_many+0x2f/0x1a0 [ 2503.413396] ? ksys_write+0x1a9/0x260 [ 2503.413864] ? __ia32_sys_read+0xb0/0xb0 [ 2503.414362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.414999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.415626] do_syscall_64+0x33/0x40 [ 2503.416114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2503.416775] RIP: 0033:0x7f61c5901b19 [ 2503.417261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.418264] FAULT_INJECTION: forcing a failure. [ 2503.418264] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.419555] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2503.419577] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2503.422694] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2503.423563] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.424459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.425328] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 [ 2503.426225] CPU: 0 PID: 11654 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2503.427095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2503.428183] Call Trace: [ 2503.428568] dump_stack+0x107/0x167 [ 2503.429053] should_fail.cold+0x5/0xa [ 2503.429557] ? create_object.isra.0+0x3a/0xa20 [ 2503.430159] should_failslab+0x5/0x20 [ 2503.430650] kmem_cache_alloc+0x5b/0x310 [ 2503.431182] ? mark_held_locks+0x9e/0xe0 [ 2503.431712] create_object.isra.0+0x3a/0xa20 [ 2503.432315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2503.432984] kmem_cache_alloc_bulk+0x168/0x320 [ 2503.433591] io_submit_sqes+0x6fe6/0x8610 [ 2503.434161] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2503.434822] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2503.435456] ? find_held_lock+0x2c/0x110 [ 2503.436005] ? io_submit_sqes+0x8610/0x8610 [ 2503.436620] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2503.437265] ? wait_for_completion_io+0x270/0x270 [ 2503.437901] ? rcu_read_lock_any_held+0x75/0xa0 [ 2503.438533] ? vfs_write+0x354/0xb10 [ 2503.439030] ? fput_many+0x2f/0x1a0 [ 2503.439507] ? ksys_write+0x1a9/0x260 [ 2503.440011] ? __ia32_sys_read+0xb0/0xb0 [ 2503.444593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.445280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.445965] do_syscall_64+0x33/0x40 [ 2503.446451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2503.447112] RIP: 0033:0x7f2aef7e0b19 [ 2503.447597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.449988] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2503.450987] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2503.451910] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2503.452864] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.453799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.454724] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000000)={0xfff, 0xc, 0x2, {0x7cdd, 0x4}, 0x6fd362be, 0x1}) 11:21:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e22, 0x47f, @private0, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000008c0)="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", 0x1000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="b00000000000000029000000040000002f13000000000000050200080401408f8f980c5e0968805a380a2565622522cd0852f48606ed4834aa2fa1a0b728eac45b13bb74ccab8423eede0b5cb31af1c023f518e010ffc7030332273093e5d01195ebfb116493d008896786ca3d5fcd183c6d6c14a816fdc1fdb5c6c95a10c15311e200730b5e01670f10066e5f05aef053553db407dc7c73c256128daeb3c36fb06a2e67f8ffe26bb93357450a29d079"], 0xb0}, 0x80) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/14, 0xe}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000200)=""/196, 0xc4, 0xcbc) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 11:21:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x3, 0x2, {0x3, 0x3, 0x3, 0x0, 0x20}, 0x2fe7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e2915e237101c48dc8b6a6cdaddce714aeb9510e5d331800000000000300"}) 11:21:58 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x40) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x110, r0, 0x0) syz_io_uring_complete(r1) fsmount(r0, 0x0, 0x71) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:21:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 2516.719175] FAULT_INJECTION: forcing a failure. [ 2516.719175] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.722558] CPU: 1 PID: 11688 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2516.724578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.726985] Call Trace: [ 2516.727743] dump_stack+0x107/0x167 [ 2516.728870] should_fail.cold+0x5/0xa [ 2516.730106] ? create_object.isra.0+0x3a/0xa20 [ 2516.731582] should_failslab+0x5/0x20 [ 2516.732826] kmem_cache_alloc+0x5b/0x310 [ 2516.734140] ? mark_held_locks+0x9e/0xe0 [ 2516.735453] create_object.isra.0+0x3a/0xa20 [ 2516.736889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2516.738534] kmem_cache_alloc_bulk+0x168/0x320 [ 2516.740017] io_submit_sqes+0x6fe6/0x8610 [ 2516.741388] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2516.742990] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2516.744570] ? find_held_lock+0x2c/0x110 [ 2516.745877] ? io_submit_sqes+0x8610/0x8610 [ 2516.747277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2516.748855] ? wait_for_completion_io+0x270/0x270 [ 2516.750417] ? rcu_read_lock_any_held+0x75/0xa0 [ 2516.751910] ? vfs_write+0x354/0xb10 [ 2516.753117] ? fput_many+0x2f/0x1a0 [ 2516.754292] ? ksys_write+0x1a9/0x260 11:21:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000240)=""/172, 0xac}], 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:21:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037, r2}) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa, 0x4e24, 0x4, @local, 0xfffff000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000780)="d768c3bebb3c6bdfe416fbfa29214337419a86a654d61411523ae29182c2ed29ee84cbed7ce9e49158257c4bce93e92ffd748cc1729542aef541fd44bf1f61855a02425adf7187225372025f1d39a9df1f80abef9e5f21642c6bc9814c55ced4b8c87d33e9fe2194b930abb3e214809c4bf6e546bf1cdd97c3a02b9b69d2e7c0b5ec56e543d5ab4a40d33c5106c2aef80ca37bff25b8ae72536d80511e20ec895efc71f0065a50316690d80675e83e132e0d4e778d55702be009", 0xba}, {&(0x7f0000000280)="79a278e6471ecad3cf000daac5ada1e7c9768c64485b66ee5aa6d5a497f78e0a93e17b4822d702a10d8d66d130ebc424f9e612a5e6a89d33913800b5d31db4a0073aab26af9aca8f6d565dd56b528ccbe2596c37822363f25911f3bef57149504eabc6d06e3f90b5219a", 0x6a}], 0x2, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}], 0x28}, 0x48001) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) mq_open(&(0x7f00000003c0)='\x00', 0x40, 0xd1, &(0x7f0000000400)={0x3, 0xff, 0x5, 0x2e}) syz_mount_image$ext4(&(0x7f0000000480)='ext2\x00', &(0x7f00000004c0)='./file0\x00', 0x1f, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000500)="483cdd7bdca537c9ab20cbdcee52af8647d5e3d776e31862ed58cbab76129c6875b71cb5411ccbe227d77c2cc774bd12", 0x30, 0x5ae}, {&(0x7f0000000540)="eb1d3d97f5a28823ab6b9fa434023cd5272d223fe7666228476a36f4ff61727bba95a0bf158dc960a6", 0x29, 0x5}, {&(0x7f0000000580)="0a03ad57d11b5ec3a6a602f2e6e4a701d9900452b514529c72", 0x19, 0x3}], 0x40000, &(0x7f00000006c0)={[{@discard}, {@max_batch_time}, {@discard}], [{@smackfsdef={'smackfsdef', 0x3d, '$'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x1c}}, {@fowner_lt={'fowner<', 0xee01}}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() readv(0xffffffffffffffff, 0x0, 0xffffffffffffffd3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0x0, 0x1f, 0x3, 0x44, @dev={0xfe, 0x80, '\x00', 0x1f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x1ff, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', r3, 0x2f, 0xf1, 0x1, 0x3, 0x78, @loopback, @local, 0x7800, 0x10, 0x7, 0x101}}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 11:21:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) flistxattr(r1, &(0x7f0000000000)=""/83, 0x53) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000140)={0x4, 0x70000000}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000240)) 11:21:58 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc0030, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x10001, 0x816e}, 0x400}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505331, &(0x7f0000000180)={0x44, 0x0, 'client0\x00', 0xffffffff80000004, '\x00', "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r8 = socket$inet(0x2, 0x0, 0x7) pread64(r8, &(0x7f0000000040)=""/232, 0xe8, 0x3) [ 2516.755522] ? __ia32_sys_read+0xb0/0xb0 [ 2516.760767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.762473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.764149] do_syscall_64+0x33/0x40 [ 2516.765364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2516.767040] RIP: 0033:0x7f2aef7e0b19 [ 2516.768240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.774279] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2516.776741] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2516.779052] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2516.781380] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.783692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2516.786089] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:21:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, r4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) 11:21:58 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x9) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r1, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:21:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:21:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0x8, &(0x7f0000003cc0)=[{&(0x7f0000000300)="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", 0x1000, 0x775}, {&(0x7f0000001300)="260d525acb7fb00a54859b18964601698c3e359b824203f84934c19099ba90c4c749a91a3d4184c29c4a6bb9fef37d2e782cabf5330d3abd59239692004564d3fe88217e8626e6fad9c9edcf69e6eb9eb3be673e816b5025381674bd38b05854e36f16bb9d1b2946302c4258129e002485928abeb281c7bce47bfbea2eb83846ff6e9869abbe0f38d4d749f86822ebd4b97ad2cc60b0d155b1a7243a50b48b2e7238f806cd8c39030eab7b3cecc26cce911819924e86a5f5bd8d3ecb7d", 0xbd, 0x7}, {&(0x7f00000013c0)="f6f4de46e43903976b098c9ffecbf802879c435c31b74c02cd3b780a9085c822eb942b2c34fab23cfba8b0bb704e97c03113ec9c4bbcda4f9569d3c4230c09eb7120c48578e7983130d482e1c5b63e0f3c9d6587f820d9381c7db542a0a89b443f007b44d496bb1ccf5033ca6f154a6025455f3ea93da1277e62fc7bf47606c832d1f6e5d3eadf", 0x87, 0x3ff}, {&(0x7f0000001480)="6db845c29262cdabbc231d394978ca7cd9279b344977b01603883f4822c8854ca29015ea11a74ebee62dd52baf8c93fd408c4215f17bdad56b8f87320910505b7f93c70d8117a565b9a5a949e34d171cc0ff58f8fea839c69183aeb74407eff53235934122abb0742548cfa63228b6d5ab46c8379e83cf0811158d70c5975af18cc95a94618a9523d25fac25b5106774309bddd0b5a4b576a113a74dfac9e3247ee2e5269547247722c02faf15ed3bdd9ecaace9ffc76ace2ad4281a6e7c7395a503a45e98aa4bf9b6532e93842e7ceb85bd8d74d92bcdd1d440a347dd5d36c20c033e411a5bec5d04a3fc", 0xeb, 0x9}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="dd7cf0bc964944b0f34ffbb993a40ef417562286d37b715147ab24a14b1a14e978b5c265ba20c69687ae56e01825129d18f96ca99616b614f5ac0f53cfa596f573d9aad4ed48e9ceff28738ae7b51d4bb1db5d6c95907f63b9cc4dcb405faf048db8110f0f6bbf758906a8cd632adb3c447ad361c7757368dbd941d85805f582f8245890e09ee5771519d5662038f6b0208001591c8c59e1560d94cec2899d179357a79caa16678f1631267cf2832b54fb7f", 0xb2, 0x100000000}, {&(0x7f0000003bc0)="ab64a5943dc11b739d7ae392357f33ec2c5e421553c79475498e5728ea8133f9820e330adc33511a5232004f975385f184fb11b1280ddef7a7483e091f127fa393bef7c3240342b2d6f08b25113fb56cd947c2929813f27ca07ccb7aa7da2afcdfd1d4da4919d893f92d1dadabdee9764cca8aec67c762c8beaa9ad1faf429d093ae0ee0e9bf644ca66ca1fd42e4a063f4ef3544c5f169b9321653bb3c494d884df4a769cbfbb2ed439253a08aac77a0289e073d15d45ad192e6a708edeb2abec6f694bb89e4064ab44ac16062b648d06f0ee8fc647050e14fd37e360d184d822dfa4cbbe035149f8ff3d7", 0xeb, 0x9}, {&(0x7f0000001640)="d352673c5f08020b1875116a17de68accc05603d469c1ed43ae8f160075f7273d4b02d134fed994fd1667355cc94f52313d854926c903d0786a0af5078b1d7121aff2c37a065b44c3169302647fb03fa5618b25c063fa7f8863c0685642dc5448ba3", 0x62, 0x1000}], 0x2000000, &(0x7f0000003d80)={[{@usrquota}, {@dax}], [{@obj_user={'obj_user', 0x3d, '&'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x30, 0x39, 0x65, 0x244681972915c6c5, 0x61, 0x62], 0x2d, [0x65, 0x66, 0x65, 0x31], 0x2d, [0x62, 0x62, 0x32, 0x31], 0x2d, [0x33, 0x30, 0x34, 0x62], 0x2d, [0x33, 0x61, 0x62, 0x64, 0xd7e06e3dead92f18, 0x0, 0xeb715e35232c47c9, 0x33]}}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}]}) syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000140)={r5, r6+60000000}, 0x1, 0x1, 0x1}, 0x0) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000001600)={&(0x7f0000000240), 0xc, &(0x7f00000015c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x1328}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x48000) 11:21:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2516.881560] FAULT_INJECTION: forcing a failure. [ 2516.881560] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.885119] CPU: 0 PID: 11682 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2516.887551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.890475] Call Trace: [ 2516.891386] dump_stack+0x107/0x167 [ 2516.892671] should_fail.cold+0x5/0xa [ 2516.893993] ? create_object.isra.0+0x3a/0xa20 [ 2516.895596] should_failslab+0x5/0x20 [ 2516.896932] kmem_cache_alloc+0x5b/0x310 [ 2516.898351] ? mark_held_locks+0x9e/0xe0 [ 2516.899775] create_object.isra.0+0x3a/0xa20 [ 2516.901317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2516.903089] kmem_cache_alloc+0x159/0x310 [ 2516.904540] xas_alloc+0x336/0x440 [ 2516.905785] xas_create+0x34a/0x10d0 [ 2516.907079] ? kernel_text_address+0xf2/0x120 [ 2516.908644] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2516.910484] xas_store+0x8c/0x1c40 [ 2516.911730] __xa_store+0x164/0x2d0 [ 2516.913017] ? xa_delete_node+0x280/0x280 [ 2516.914464] ? trace_hardirqs_on+0x5b/0x180 [ 2516.915991] xa_store+0x31/0x50 [ 2516.921190] __io_uring_add_tctx_node+0x1cf/0x520 [ 2516.922880] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2516.924735] __do_sys_io_uring_enter+0x146f/0x1890 [ 2516.926443] ? find_held_lock+0x2c/0x110 [ 2516.927857] ? io_submit_sqes+0x8610/0x8610 [ 2516.929380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2516.931066] ? wait_for_completion_io+0x270/0x270 [ 2516.932750] ? rcu_read_lock_any_held+0x75/0xa0 [ 2516.934369] ? vfs_write+0x354/0xb10 [ 2516.935655] ? fput_many+0x2f/0x1a0 [ 2516.936927] ? ksys_write+0x1a9/0x260 [ 2516.938242] ? __ia32_sys_read+0xb0/0xb0 [ 2516.939646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.941495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.943296] do_syscall_64+0x33/0x40 11:21:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x341881, 0x0) recvmmsg$unix(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/102, 0x66}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/142, 0x8e}], 0x1}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/86, 0x56}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/143, 0x8f}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/254, 0xfe}, {&(0x7f0000000a40)=""/183, 0xb7}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/52, 0x34}, {&(0x7f0000000bc0)=""/11, 0xb}], 0x5, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/95, 0x5f}, {&(0x7f0000000e80)=""/147, 0x93}], 0x2, &(0x7f0000000f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x6, 0x0, &(0x7f0000002400)={0x0, 0x989680}) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2516.944608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2516.946386] RIP: 0033:0x7f61c5901b19 [ 2516.947686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.954213] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2516.956883] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2516.959364] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2516.961858] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.964359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2516.966872] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:21:59 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @remote}}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80000001) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:21:59 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/softnet_stat\x00') pread64(r2, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:21:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000200)=@random={'security.', '\x00'}, &(0x7f0000000240)=""/188, 0xbc) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000300), 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) dup2(0xffffffffffffffff, r3) 11:22:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xff, 0x0, 0x2, 0x3, 0x0, 0x94, 0x4, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000100), 0x7}, 0x42000, 0x8, 0xdc, 0x2, 0x9, 0x8000, 0x200, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x90000000}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000000)={0x36a, 0x0, {0x0, 0x2, 0xdf, 0x1, 0x7}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:22:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 11:22:12 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c063100"]) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) 11:22:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 11:22:12 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc0030, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x10001, 0x816e}, 0x400}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505331, &(0x7f0000000180)={0x44, 0x0, 'client0\x00', 0xffffffff80000004, '\x00', "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r8 = socket$inet(0x2, 0x0, 0x7) pread64(r8, &(0x7f0000000040)=""/232, 0xe8, 0x3) 11:22:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x101, @empty, 0x10000}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x9, 0x7, 0x0, 0x2, 0x1, 0x0, {0x0, r7}}, 0x7fffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2530.537123] FAULT_INJECTION: forcing a failure. [ 2530.537123] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.538527] CPU: 0 PID: 11752 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2530.539364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.540363] Call Trace: [ 2530.540688] dump_stack+0x107/0x167 [ 2530.541149] should_fail.cold+0x5/0xa [ 2530.541615] ? create_object.isra.0+0x3a/0xa20 [ 2530.542175] should_failslab+0x5/0x20 [ 2530.542641] kmem_cache_alloc+0x5b/0x310 [ 2530.543137] ? mark_held_locks+0x9e/0xe0 [ 2530.543635] create_object.isra.0+0x3a/0xa20 [ 2530.544167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.544788] kmem_cache_alloc_bulk+0x168/0x320 [ 2530.545369] io_submit_sqes+0x6fe6/0x8610 [ 2530.545892] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.546497] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.547087] ? find_held_lock+0x2c/0x110 [ 2530.547584] ? io_submit_sqes+0x8610/0x8610 [ 2530.548116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.548706] ? wait_for_completion_io+0x270/0x270 [ 2530.549311] ? rcu_read_lock_any_held+0x75/0xa0 [ 2530.549883] ? vfs_write+0x354/0xb10 [ 2530.550336] ? fput_many+0x2f/0x1a0 [ 2530.550780] ? ksys_write+0x1a9/0x260 [ 2530.551245] ? __ia32_sys_read+0xb0/0xb0 [ 2530.551741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.552377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.569176] do_syscall_64+0x33/0x40 [ 2530.569190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.569198] RIP: 0033:0x7f61c5901b19 [ 2530.569210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:22:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x2) [ 2530.569217] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2530.569232] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2530.569239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2530.569246] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.569253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2530.569260] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 [ 2530.607057] FAULT_INJECTION: forcing a failure. 11:22:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2e33, &(0x7f0000000240)={0x0, 0x6bd9, 0x4, 0x3, 0x142, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r4 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3ff, 0x8, &(0x7f0000000980)=[{&(0x7f0000000340)="58176bae76cf48cb35f27926fd92eca6ee4a6c54bca48654831a8c77f7448542c521cdbdf23f7f236930c837e81b9c94d9ce58f5f9573dda5599158b9ac44dc398c7e8875add44cfdc9e445a8555f6e9447293d8ff6ecf0b9cb0563d5cb0d0fe07bdc92167f5ec7cbc3924b56065dd48c0f757bf055c4b8d4b8f2917f1acdda1c13cda88f70a9323cdab05d2257129ae3496665fcf9558fe0464e08b0aee9077e193585f81cd58c91425bc7df6c3615a0174bc3d6198520ef993f6f354a0e4b7a5f7e2217eb6d943bb161abf7cb12a28d269c5b752cfda104d0c9b82ff5e4d6f13026e3e491b4d80e2a14eec20212d6d51d5c1d3511514", 0xf7, 0x401}, {&(0x7f0000000480)="02448108d9f9f84420b41fda0452153fd664c1e01703ad2ae403ff5a2a68c5958e01f3f7aaead266964a32f1775287a74a30fd570bc5e59d6d569aede6fd7c019d9ca2a18fa76bc50f7eb8390cc9a3b38d6283502525e34a59dde7485863f06488b83eebcc1eb78f928942708200eb77a3bda6adbbf76c4b52215c9bb0cee107a5ec20f2c1df55bf441a5ade995da13c1021a7db8899692858efeea71892b0930be3771ad5ede9e6b1e9c9a905c44e", 0xaf, 0x40}, {&(0x7f0000000540)="10b8a6be46866305a55dd7e8996ae9dbf1c3063ad6258490b04085362586b58ca46653f0fcf811799cc9c394956f527443705735c36849f7ac30bb1e1c02178ff2f650d9eb1c8e4094ca0f026d647e8521aaede96816c9a0f738c6c9ee6d133e9ae3f19c7fb8ddc57895d33fe73fcee6d2323ae3477d1f0740a9697178b60ea114ca8dae3e45a1eb139c3d40fc30c2a3a91cd4f23449ce47fc6c1fd2a669f69515f8d3e3091cc0fccbf910fa206df0183cd203e4da4409dfaff50dfb9053723aaa1f003ab40743b098707b98ed3a1ad67b1b5945b74c62bbd5fee11a4affb9ab595aa5f4a2e621", 0xe7}, {&(0x7f00000006c0)="6946c69c4974fd0e7cf4059ebb7788a5f886960726255ad6c256fc27ca89506cec4121356e062423cf24fdfd1cdd44e4f8356b1adbf7e7b4c646cc8ac87c41b8a98338a938786126a6461003289229ed6e56d823fc622454df2b8a048f3dec75cb2bb5ae74469c4d7790b45107709bbf737818179d418a4ccd6e98d95a4480c7b0ce55b5a26e4eaae1b02e3d4c260ec24f1bf36eb53a4194ed3309aee7b28dc537f14363b7aecf6cb2f3c1d46f8f5610dede4a3dae3163d5f9d08b7e75f9cb9fae164935d3d7351f5b97608cda", 0xcd, 0x1000}, {&(0x7f00000007c0)="4da0da98e0a2edb8e562ba0885dd10788c3bae8de196c7865ed3d8872c16093f42334e0057779f71c1b5c5c929", 0x2d, 0xfffffffffffffe01}, {&(0x7f0000000800)="ce269c17c223aee5a1d7ee7304ad448a889540348b0fd977a826454d6614a2d58680bcb73e637ed11fd4062b74111df0debc9aa43d4fc5f9745488f0d66774665016abe101722651", 0x48, 0x8}, {&(0x7f0000000880)="1dfd7f13d31f3fa1cd012773923dd4ac6010ad715ddce45b6dbacd00531dee8c39a1db859b643c1e5274670edc7dae1d107fcb35545434a8a59e6660237d79f2d2e1966037928c4ba478a28b8b9963c5cd03b4a45529e7933ca3ca5eac47bdd0d7ddf4d5960088372716472c76f00952476366dedd49f93ad2529013e5d42d34ccc267ccb46a06", 0x87, 0x6}, {&(0x7f0000000940)="414913656ef404cfd3128b4fbd2e27c1291fd7c4b7207682a401", 0x1a, 0xff}], 0x401, &(0x7f0000000a40)={[{@shortname_mixed}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}) syz_io_uring_submit(r2, r3, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x3, 0x0, r4, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x10, 0x400, 0x1}, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2530.607057] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.607079] CPU: 0 PID: 11735 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2530.607088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.607094] Call Trace: [ 2530.607113] dump_stack+0x107/0x167 [ 2530.607131] should_fail.cold+0x5/0xa 11:22:12 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xdc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r3, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2530.607149] ? create_object.isra.0+0x3a/0xa20 [ 2530.607169] should_failslab+0x5/0x20 [ 2530.607185] kmem_cache_alloc+0x5b/0x310 [ 2530.607201] ? mark_held_locks+0x9e/0xe0 11:22:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) fallocate(r1, 0x20, 0x81, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2530.607219] create_object.isra.0+0x3a/0xa20 [ 2530.607232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 11:22:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x6000, @fd=r3, 0xffffffff, &(0x7f0000000240)=""/146, 0x92, 0x4, 0x0, {0x0, r7}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r8, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2530.607252] kmem_cache_alloc_bulk+0x168/0x320 [ 2530.607273] io_submit_sqes+0x6fe6/0x8610 [ 2530.607313] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.607326] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.607344] ? find_held_lock+0x2c/0x110 [ 2530.607364] ? io_submit_sqes+0x8610/0x8610 [ 2530.607388] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.607408] ? wait_for_completion_io+0x270/0x270 [ 2530.607426] ? rcu_read_lock_any_held+0x75/0xa0 [ 2530.607439] ? vfs_write+0x354/0xb10 [ 2530.607455] ? fput_many+0x2f/0x1a0 [ 2530.607471] ? ksys_write+0x1a9/0x260 [ 2530.607486] ? __ia32_sys_read+0xb0/0xb0 [ 2530.607505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.607519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.607537] do_syscall_64+0x33/0x40 [ 2530.607552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.607562] RIP: 0033:0x7f2aef7e0b19 [ 2530.607576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.607584] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2530.607602] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2530.607610] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2530.607619] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 11:22:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 11:22:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, r4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) [ 2530.607628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2530.607637] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2530.858021] FAULT_INJECTION: forcing a failure. [ 2530.858021] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.859552] CPU: 0 PID: 11782 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2530.860390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.861387] Call Trace: [ 2530.861715] dump_stack+0x107/0x167 [ 2530.862154] should_fail.cold+0x5/0xa [ 2530.862642] ? create_object.isra.0+0x3a/0xa20 [ 2530.863236] should_failslab+0x5/0x20 [ 2530.863726] kmem_cache_alloc+0x5b/0x310 [ 2530.864260] ? mark_held_locks+0x9e/0xe0 [ 2530.864797] create_object.isra.0+0x3a/0xa20 [ 2530.865387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.866056] kmem_cache_alloc_bulk+0x168/0x320 [ 2530.866662] io_submit_sqes+0x6fe6/0x8610 [ 2530.867231] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.867883] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.868520] ? find_held_lock+0x2c/0x110 [ 2530.869072] ? io_submit_sqes+0x8610/0x8610 [ 2530.869644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.870279] ? wait_for_completion_io+0x270/0x270 [ 2530.870912] ? rcu_read_lock_any_held+0x75/0xa0 [ 2530.871525] ? vfs_write+0x354/0xb10 [ 2530.872016] ? fput_many+0x2f/0x1a0 [ 2530.872491] ? ksys_write+0x1a9/0x260 [ 2530.873002] ? __ia32_sys_read+0xb0/0xb0 [ 2530.873544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.874227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.874912] do_syscall_64+0x33/0x40 [ 2530.875403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.876073] RIP: 0033:0x7f2aef7e0b19 [ 2530.876566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.878959] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2530.879951] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2530.880876] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2530.881811] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.882741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2530.883669] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:22:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 11:22:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0d000000000000002e2f66696ca2baf002c541729c684dae172679b163159a0fca6396c72b17c314117a5ada84b7e7a774935acb8af79cabc8"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00f3ffffff00400000e27016e589cf93"]) io_uring_enter(r3, 0x3, 0xe7fc, 0x1, 0x0, 0x2c) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:13 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x7f, 0x1, {0x3, 0x3, 0x8, 0x1, 0x80000000}, 0x1}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000240)={{0x2, 0x5}, 0x1, 0x7f, 0x4, {0x7, 0xaa}, 0x1, 0x6}) 11:22:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) write(r5, &(0x7f0000000240)="ec1a01ca9a561c9ef507dce23895e123c304cef8533fb4ec4e77e37ae2725540421c27e32490450ddd024a92deeb000b7d7de700e6e9c52e5495ecaa278d1e71414850956185fbbf55c3a26a126220fbdb45d891146d2bcd847a1d3df90fe5a1c51f8b8becb5fb939ca29d21704232e283790f41e455809f96b20bc8c1ed6e74ca9446ba2485b42ba6be1b2c1f067cfc8906c154734afa14acdde14c0f924b9831618d3cae8494010d13d925e4c6791bf225a268030a8707c7038c652c0fc9eb0bbda02906d71b1a819d67d58525489dbaa112e018ab3f1bf936523472f8bf53128f5ef1010cc03d927ccdcc85815483ec75368e223e8104d2", 0xf9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2530.942034] FAULT_INJECTION: forcing a failure. [ 2530.942034] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.943540] CPU: 0 PID: 11789 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2530.944422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.945506] Call Trace: [ 2530.945861] dump_stack+0x107/0x167 [ 2530.946333] should_fail.cold+0x5/0xa [ 2530.946834] ? create_object.isra.0+0x3a/0xa20 [ 2530.947435] should_failslab+0x5/0x20 [ 2530.947938] kmem_cache_alloc+0x5b/0x310 [ 2530.948468] ? mark_held_locks+0x9e/0xe0 [ 2530.948975] create_object.isra.0+0x3a/0xa20 [ 2530.949552] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.950225] kmem_cache_alloc_bulk+0x168/0x320 [ 2530.950836] io_submit_sqes+0x6fe6/0x8610 [ 2530.951413] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.952052] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2530.952666] ? find_held_lock+0x2c/0x110 [ 2530.953239] ? io_submit_sqes+0x8610/0x8610 [ 2530.953809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2530.954441] ? wait_for_completion_io+0x270/0x270 [ 2530.955072] ? rcu_read_lock_any_held+0x75/0xa0 [ 2530.955672] ? vfs_write+0x354/0xb10 [ 2530.956144] ? fput_many+0x2f/0x1a0 [ 2530.956617] ? ksys_write+0x1a9/0x260 [ 2530.957154] ? __ia32_sys_read+0xb0/0xb0 [ 2530.957692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.958376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.959054] do_syscall_64+0x33/0x40 [ 2530.959542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.960214] RIP: 0033:0x7f61c5901b19 [ 2530.960708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.963110] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2530.964110] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2530.965062] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2530.965993] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2530.966907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2530.967846] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2544.330254] FAULT_INJECTION: forcing a failure. [ 2544.330254] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.331752] CPU: 0 PID: 11801 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2544.332639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.333717] Call Trace: [ 2544.334066] dump_stack+0x107/0x167 [ 2544.334544] should_fail.cold+0x5/0xa [ 2544.335048] ? create_object.isra.0+0x3a/0xa20 [ 2544.335647] should_failslab+0x5/0x20 [ 2544.336148] kmem_cache_alloc+0x5b/0x310 [ 2544.336679] ? mark_held_locks+0x9e/0xe0 [ 2544.337214] create_object.isra.0+0x3a/0xa20 [ 2544.337850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.338521] kmem_cache_alloc_bulk+0x168/0x320 [ 2544.339121] io_submit_sqes+0x6fe6/0x8610 [ 2544.339686] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.340336] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.340964] ? find_held_lock+0x2c/0x110 [ 2544.341514] ? io_submit_sqes+0x8610/0x8610 [ 2544.342689] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.343448] ? wait_for_completion_io+0x270/0x270 [ 2544.344705] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.346181] ? vfs_write+0x354/0xb10 [ 2544.347362] ? fput_many+0x2f/0x1a0 [ 2544.348509] ? ksys_write+0x1a9/0x260 [ 2544.349728] ? __ia32_sys_read+0xb0/0xb0 [ 2544.351022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.352655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.354152] do_syscall_64+0x33/0x40 [ 2544.355233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.356711] RIP: 0033:0x7f2aef7e0b19 [ 2544.357791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.363228] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2544.365421] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2544.367481] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2544.369553] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.371611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.373710] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:22:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x209c, &(0x7f0000000140)={0x0, 0x80d5, 0x4, 0x3, 0x29f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:26 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 11:22:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000005c0)={0x1, 0x2, 0x1000, 0xde, &(0x7f00000003c0)="703b415bd0c3a900f74b29b3eac6e10e24c4ef07f67b0ce34d716af48749b87fa9d67b7e68dee7aafa5f94ecacfd594249945a1e5c4232019ceafe7bbb89b898b8b1b05965f9e522f521f9d5f007bedf92522779e627d99509e86ea8e82176227628a69bda22e5b7b7bee9d588c3355aa52eb522ca7a66eced8139efdec84b2aa6aac50bb285286fbec817ec6e29b9dc15c2c397058a1d78fb27ef36fb8587b7dda3d22518556d81a8f2e23d0599bcf8b0edc76b3d267b67e8d2b30c2a46595e7f59d86510975b93efe48fdf20c5ce913a697307333c51a6418d9abf0e2e", 0xd1, 0x0, &(0x7f00000004c0)="a76a1bec1e97d9774be80ff110ac195cb03bcd471820dbd0a83516da1e08e092353680153b5016e6701f3800340ffa55fa689cd6bbe348a0638c8b40f199af12be79fd43353633b5f4498a1149d23ea80ab609fe5d68b2721ebd3d15393dbfa1212adc24e355e18fa114cbd419fd330cfcfd6618b550a89b277abcf5021be9871dd1f07f2b23b01f5dd5e3af4a789fbc7225146c94eb4445e32d9253e408250e7a0478c0fe0e03265b363e4035236a17d667904a63abb2e2e522e862b9c2725ead4cc977b9a9efd065ce9e3a9c1d9917ca"}) r2 = dup3(r0, r1, 0x80000) r3 = fork() clone3(&(0x7f0000000340)={0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x31}, &(0x7f0000000200)=""/125, 0x7d, &(0x7f0000000280)=""/112, &(0x7f0000000300)=[0x0, r3, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r2}}, 0x58) 11:22:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xfffff0fd, @loopback, 0x9}, 0x1c) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup3(r0, r0, 0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x1f, 0x1f, 0x3f, 0x5, @time={0x8, 0xa800}, {0x3f, 0x40}, {0x46, 0x32}, @time=@time={0x10001, 0x5}}, {0xaf, 0x7b, 0x66, 0x0, @tick=0x1f, {0x1, 0xe1}, {0x8}, @ext={0xf3, &(0x7f0000000180)="1041734dbd1eabe8d202b07eb4ad5e5cb689f71828136b59643e9582706e2d077a4439700aa17e7dec64a85ea7723bdbaca85e4026c40eda561fa37f836a68d41b7c07ff20ca89eb33b7c873201a7930190a1c7e9bcf02d6495d0f603ed575d4d372236a58888e50f8091ed7594ddbbb9bd569316be1fdb3f9b0fe7f82804c5f2a2252809ce8bf70edc2a0c3da705f886dcd2f61bcfbee6df4293eb9999710c3900e43a41ff4623f522cdda8792077d34edce3599411d976dfcf0c3d24b155f83541092347340f4df5b11be75ac93d89be94897cb44ca8d33579cc8af0006c789db50b6260dfa5286e920c12f7cc604f5036b4"}}, {0xfd, 0x1, 0x2, 0x4, @tick=0x8001, {0x0, 0x48}, {0x20, 0x2}, @addr={0xfd, 0x6}}, {0xf7, 0x7, 0x0, 0x2, @tick=0x20, {0x3, 0x1f}, {0x7f, 0xfa}, @note={0x4b, 0x3, 0x7, 0x5, 0x1000}}, {0x81, 0x81, 0x7, 0x0, @time={0x3, 0x4}, {0x78, 0x3f}, {0x1, 0x7}, @ext={0x38, &(0x7f0000000000)="715656a5313bbe10733d90af20d54af4a5ccacc264855ac8ad3ef39f698f2fbd9a1145897c51fbca3f0a1a1ef94a42d3f3f03c66e02dd123"}}, {0x7, 0x9, 0xda, 0x6, @tick=0x11, {0x4, 0x80}, {0x2, 0xfa}, @ext={0x1a, &(0x7f0000000040)="05fe72655ea68a518c0cc0780c1d17c5777223edda01b23893ac"}}, {0x4, 0x1, 0x57, 0x6, @time={0x3, 0x3}, {0x4}, {0xf7, 0x1}, @queue={0x7c, {0x3, 0x4}}}], 0xc4) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) fstatfs(r2, &(0x7f00000000c0)=""/75) 11:22:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 11:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000280)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x20010, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0xfffff001) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r4 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000300)) syz_io_uring_setup(0x4264, &(0x7f0000000340)={0x0, 0xf4ca, 0x4, 0x3, 0x3d0, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ff0000002e2f66296c653100"]) io_uring_enter(r5, 0x1304, 0x3742, 0x3, &(0x7f00000001c0)={[0x5]}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2544.470881] FAULT_INJECTION: forcing a failure. [ 2544.470881] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.474783] CPU: 0 PID: 11817 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2544.477277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.480316] Call Trace: [ 2544.481291] dump_stack+0x107/0x167 [ 2544.482647] should_fail.cold+0x5/0xa [ 2544.484027] ? create_object.isra.0+0x3a/0xa20 [ 2544.485691] should_failslab+0x5/0x20 [ 2544.487085] kmem_cache_alloc+0x5b/0x310 [ 2544.488554] ? mark_held_locks+0x9e/0xe0 [ 2544.490064] create_object.isra.0+0x3a/0xa20 [ 2544.491649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.493522] kmem_cache_alloc_bulk+0x168/0x320 [ 2544.495182] io_submit_sqes+0x6fe6/0x8610 [ 2544.496683] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.498519] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.500273] ? find_held_lock+0x2c/0x110 [ 2544.501732] ? io_submit_sqes+0x8610/0x8610 [ 2544.503275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.505014] ? wait_for_completion_io+0x270/0x270 [ 2544.506730] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.508401] ? vfs_write+0x354/0xb10 [ 2544.509715] ? fput_many+0x2f/0x1a0 [ 2544.510989] ? ksys_write+0x1a9/0x260 [ 2544.512367] ? __ia32_sys_read+0xb0/0xb0 [ 2544.513811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.515672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.517525] do_syscall_64+0x33/0x40 [ 2544.518821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.520653] RIP: 0033:0x7f61c5901b19 [ 2544.522023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.528674] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2544.531355] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2544.533927] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2544.536513] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.539169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.541767] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:22:26 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9bb344f654d23466}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x68, r0, 0x100, 0x70bd2b, 0x7, {{}, {@void, @val={0xc, 0x99, {0x2fdc, 0x30}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x26}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x86d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0x7, 0x1a, 0x56, 0x2, 0x2, 0x9}) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) write$sndseq(r3, &(0x7f00000000c0)=[{0x81, 0x20, 0xd, 0x1, @time={0x5, 0xffffff2e}, {0xe8}, {0x7, 0x6}, @queue={0x20, {0xfffffffa, 0x3}}}, {0x20, 0x90, 0x4, 0x0, @tick=0x40, {0x8, 0x2}, {0x3, 0x1}, @result={0x9, 0x200}}, {0x3f, 0x5, 0x1, 0x4, @tick=0xfffff251, {0x0, 0x3}, {0x40, 0x2}, @time=@time={0x3}}, {0x35, 0x9, 0xe1, 0x3, @tick=0x58, {0x6}, {0x9, 0x6}, @raw8={"25307dcdc83813139ff174e5"}}, {0x3d, 0x8, 0x4, 0x98, @tick=0xfff, {0x6, 0x1f}, {0x3, 0x5}, @note={0x3, 0x9, 0x6e, 0xfe, 0xffffffc0}}, {0x8, 0x87, 0x53, 0x53, @time={0x1, 0x8}, {0xa6, 0xff}, {0x1f, 0x8}, @queue={0xa2, {0x86a1, 0xfffff801}}}], 0xa8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:22:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2fd6296c65b100"]) io_uring_enter(r2, 0x4962, 0x4b34, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) 11:22:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x1}, 0x100) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:26 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 11:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) clock_gettime(0x2, &(0x7f0000000a00)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(r1, 0x0, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000340)="f56d44f928b442fa16cd8b8d4f5e4ca99d73bab883be46a9ca1a79346716fb9f18c853dec9eb1bea3615f6c989e3f9c494a959860739c46f68fb4dc3d1d20babe8acf8faefd5c4c016c68bbdd11d3c1be291ed05ce13b1db3df16a00fe62cc5ebb8796d08851e9e6e9ad401e0f1406edb2028d5be2e4a09cc5236a6a", 0x7c}, {&(0x7f00000003c0)="4dd9c8f155eeadc05dc16b264e24c1964f7aafb81b3691816b", 0x19}, {&(0x7f0000000480)="3f959016c6549b79938a1f0377aba13a9cf288728ea63b15bce8cb59f281fa98ad70b4248e8aae75220b48a58a066337df17060a9db344aab533ca6322ae0038eacead7cf6988f08d89b25ff6595713fbe240fd3e6ab33687d7bd56dd2327dabad3e13c67b5d89d0f121fc6bb670599e85b9c2122d38ec1cee518fd23fb8249843687df9dd253af33ef2f91c11de72baa7c8142de12b7686793d49c1bed54a191cdb5a0c4ceb2a5830bc3ffe0cb871d4165e29b826037b8ee468f89e474ac126483f58ca15722f8a0a542b9408d86a762e138ad4812bb33f9f2dec1ec040a84ac3aeab2582f345a1d0211febef02bd19f0c4", 0xf2}, {&(0x7f00000006c0)="da558c9856b1c1354264a2774796baacda073d72a94ae87e0191642afc999e3800dfaf403bc16d140a49df8e585c233349ade004aea816bdd85372ee1f66c598ee6662653135bb9ce84309b7b49b49e9fa00b1830f87a30b9d6494372517f283c7fb36eee9146375340aaaa7dc5c78afd59c62aacd02cc42a8f325cd604a1aa8075b9390c85bbf13aa2868d7a8fd3a2615d923452de22a9e2de376afabca42434045967dedd106fc9fcb1c531a2c194c5195d2490f1d6a0cb410d2b8e76d507436fe5f", 0xc3}, {&(0x7f0000000400)="d14513ffa6417515a6ad944774b799abf3b515d54f75a78b0268882de70ec99bd45e23529fdd440f", 0x28}, {&(0x7f0000000580)="7e91098b49d655d63772d4a7a870ba2c4ccba80ae68e54eb5080ebc2d0db156fd3507b6e1b72d8fbce21739583b19c3ec70c0b855b26266f6b91628cc8f85ac096b0379125a757c14a", 0x49}, {&(0x7f00000007c0)="5f4ad536d709c2e94f45dbe143bd4fbd39b49e60e0bb5113f2937c080e922e784bebc498b31be81590f2e2198fa42ac83cdd471e408ec10eed8b0f166ea79d304eea1feaea594b7527f54d3d40a1958284d9a5577d7d9ed86ee6c677e1077fddb29bed6bbf8f57109004d99e65cd455d28c1dad3481d32a3ed379c6ede894063ee12c480ba134e1f7def9c8a60bd11cbade9aefd07ef809263de429eb1845f048842de", 0xa3}, {&(0x7f0000000600)="c6466beaacdaad18b8f3a06927a27b6bda08e6acb3d1ddf967f272f05563d0f8cf524d07ac9fef534e2fb3f45ce4857d87e808f246", 0x35}], 0x8, &(0x7f0000000900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x30}}], 0x1, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x20, 0x6000, 0x1}, 0x1c) readv(r0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000980), &(0x7f00000009c0)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:26 executing program 2: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2544.707312] FAULT_INJECTION: forcing a failure. [ 2544.707312] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.711174] CPU: 0 PID: 11837 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2544.713569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.716395] Call Trace: [ 2544.717258] dump_stack+0x107/0x167 [ 2544.718480] should_fail.cold+0x5/0xa [ 2544.719802] ? create_object.isra.0+0x3a/0xa20 [ 2544.721328] should_failslab+0x5/0x20 [ 2544.722604] kmem_cache_alloc+0x5b/0x310 [ 2544.723970] ? mark_held_locks+0x9e/0xe0 [ 2544.725320] create_object.isra.0+0x3a/0xa20 [ 2544.726824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.728552] kmem_cache_alloc_bulk+0x168/0x320 [ 2544.730113] io_submit_sqes+0x6fe6/0x8610 [ 2544.731525] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.733241] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2544.734871] ? find_held_lock+0x2c/0x110 [ 2544.736287] ? io_submit_sqes+0x8610/0x8610 [ 2544.737773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.739395] ? wait_for_completion_io+0x270/0x270 [ 2544.741005] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.742626] ? vfs_write+0x354/0xb10 [ 2544.743864] ? fput_many+0x2f/0x1a0 [ 2544.745078] ? ksys_write+0x1a9/0x260 [ 2544.746348] ? __ia32_sys_read+0xb0/0xb0 [ 2544.747691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.749423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.751036] do_syscall_64+0x33/0x40 [ 2544.752188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.753791] RIP: 0033:0x7f2aef7e0b19 [ 2544.754949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.760718] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2544.763116] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2544.765338] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2544.767561] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.769790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.772009] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:22:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) pipe2(&(0x7f0000000100), 0x84800) 11:22:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x2, {{0xa, 0x4e23, 0x3, @loopback, 0x1}}}, 0x88) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) listen(r2, 0x400) 11:22:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:40 executing program 1: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:22:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 11:22:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) 11:22:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = accept(r0, &(0x7f00000005c0)=@caif=@dgm, &(0x7f0000001800)=0x80) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001840), &(0x7f0000001880)=0x8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0xa, 0x4e23, 0x1, @local, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000240)="83965325d7b3fb08011baf864a94adbee8d8c9812a5f0a77630327f8a241bf16ac840f36a31f72117569844c9f54035da831edcd5d210f0d19ae80922c71d938118c11c447b02312e3", 0x49}, {&(0x7f00000002c0)="07c10e39086e197594a845e8d1fb56781a3693917d795c6b6ce381a7ad216d13e197fa47beb87eace12615319445bda7873a31608603de638f1808488ad594a238eab9ffddd6edc2d93455637bb4f5c81e627e745c1ca37ebc42ce1be457f0d8d6c7215d51898e8cf33dce68831d883bc834311edce8b5c8bf39dd1aef20859cce2243958f0b4538f4269ef0270abb5c26af7e0abf2111d1e548c99f49cd1ab4527081b3e44527c20f16d7ed200b228ad60794a388113bcae2737ece7850f382198660873a4e3f0baf97cfd97360", 0xce}, {&(0x7f00000003c0)="e041a7c26662278f6981ca9a6f7f5ff2177ba45707aeb19aceb9eb2eb474184090518b64b9f55ed3c6156815712cad5e018dc94403dd07f8003ac3997a18fb28d1e1d378be", 0x45}, {&(0x7f0000000480)="1f26c31c4d4ee59f5b57e0abec33967e15a449cb82149dd57cca1c305d8f7fc07a2993ccb251ae422c815533f0d802fbc8008fedae38a21201c660079c2b5de574b95dfd1cafda5421", 0x49}, {&(0x7f00000006c0)="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", 0x1000}], 0x5, &(0x7f00000016c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x8, 0x1a, '\x00', [@generic={0xff, 0xd0, "1ad91e7eda0473adccd2fc66881ad2fab1a100cfc22cc506bd960dc9a867e527def48738aad67066cbe5b8f80f02bd3f151a7a2b92f7b36e630b88b301d30b18a3d09b7a91bc562de464ae1885b4ba283b71066808ab4439dd0df0d830d2fb979b01399e0862b2dead3dd71d916e18e4b1973af1cf56b1288be776e5ac5e762e0017bc7a10a2733d320eeabad7b09ace30909bbef7b20c938e8947b1c9e258cb07b74be21c71b41d98cd44b1c621550402908b7ee81edfe28bf84d10397c1235ad4dd6d9efef831c10fd362e922b3645"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}], 0x138}, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/99, 0x63}], 0x4, 0x5c, 0x8) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:22:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:40 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() fcntl$setown(r5, 0x8, r6) fcntl$getown(r5, 0x9) syz_io_uring_submit(r4, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xca, 0x1a, 0x5, 0xbd, 0x0, 0x80000000, 0x1024c, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff9923, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x40, 0xfffffffffffffffd, 0x5, 0x2, 0x5, 0x8, 0x3, 0x0, 0x1, 0x0, 0xffffffffffff8000}, 0x0, 0xc, r0, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 11:22:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 11:22:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x38) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ftruncate(r2, 0x100000001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0xffff0f2d, 0x8, 0x0, 'queue0\x00', 0xff}) [ 2557.932593] FAULT_INJECTION: forcing a failure. [ 2557.932593] name failslab, interval 1, probability 0, space 0, times 0 [ 2557.934135] CPU: 1 PID: 11865 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2557.935031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2557.936111] Call Trace: [ 2557.936466] dump_stack+0x107/0x167 [ 2557.936942] should_fail.cold+0x5/0xa [ 2557.937456] should_failslab+0x5/0x20 [ 2557.937974] kmem_cache_alloc_bulk+0x4b/0x320 [ 2557.938566] io_submit_sqes+0x6fe6/0x8610 [ 2557.939137] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2557.939785] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2557.940424] ? find_held_lock+0x2c/0x110 [ 2557.940964] ? io_submit_sqes+0x8610/0x8610 [ 2557.941535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2557.942189] ? wait_for_completion_io+0x270/0x270 [ 2557.942816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2557.943387] ? vfs_write+0x354/0xb10 [ 2557.943840] ? fput_many+0x2f/0x1a0 [ 2557.944282] ? ksys_write+0x1a9/0x260 [ 2557.944743] ? __ia32_sys_read+0xb0/0xb0 [ 2557.945239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2557.945888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2557.946519] do_syscall_64+0x33/0x40 [ 2557.946969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2557.947590] RIP: 0033:0x7f2aef7e0b19 [ 2557.948041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2557.950291] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2557.951216] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2557.952082] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2557.952946] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2557.953811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2557.954692] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:22:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) [ 2558.003743] FAULT_INJECTION: forcing a failure. [ 2558.003743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2558.005306] CPU: 1 PID: 11882 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2558.006177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2558.007177] Call Trace: [ 2558.007501] dump_stack+0x107/0x167 [ 2558.007944] should_fail.cold+0x5/0xa [ 2558.008411] __alloc_pages_nodemask+0x182/0x600 [ 2558.008977] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2558.009718] alloc_pages_current+0x187/0x280 [ 2558.010327] allocate_slab+0x26f/0x380 [ 2558.010847] ___slab_alloc+0x470/0x700 [ 2558.011367] ? io_submit_sqes+0x6fe6/0x8610 [ 2558.011932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2558.012614] ? trace_hardirqs_on+0x5b/0x180 [ 2558.013181] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2558.013803] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2558.014424] io_submit_sqes+0x6fe6/0x8610 [ 2558.014988] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2558.015634] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2558.016265] ? find_held_lock+0x2c/0x110 [ 2558.016804] ? io_submit_sqes+0x8610/0x8610 [ 2558.017381] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2558.018035] ? wait_for_completion_io+0x270/0x270 [ 2558.018664] ? rcu_read_lock_any_held+0x75/0xa0 [ 2558.019275] ? vfs_write+0x354/0xb10 [ 2558.019761] ? fput_many+0x2f/0x1a0 [ 2558.020238] ? ksys_write+0x1a9/0x260 [ 2558.020740] ? __ia32_sys_read+0xb0/0xb0 [ 2558.021279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2558.021985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2558.022663] do_syscall_64+0x33/0x40 [ 2558.023151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2558.023792] RIP: 0033:0x7f2aef7e0b19 [ 2558.024266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2558.026636] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2558.027628] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2558.028550] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2558.029470] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2558.030416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2558.031336] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:22:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xfc, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="db637d80f964a34b9a96bb61917a7c261c4a74349cadc6"}, {0x1e, 0x0, @random="583c75f43e28daedd5f95859f94d711ec56bbb1cbd95679bfbf4"}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x36, 0x7b, "267d831b24abfb3a5c3a59c74aa6be91f33c356f590e1d4627ab4e3cc9732ad26bd8d8cfd35b94734715efbf7e05d2edbd21aab00e9008f54af8ef2a7fc392c7b964733ae5cf203bd30ab64381df6569653b6663b59555a2b8011d67ccdbe7641866e71972505b992a0dd8ae61cd36a1bb787370dada0fee20b618"}, @challenge={0x10, 0x1, 0x25}, @chsw_timing={0x68, 0x4, {0x401, 0x8000}}, @mesh_chsw={0x76, 0x6, {0x0, 0x19, 0x36, 0xe52}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:40 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') fallocate(r1, 0x1, 0xffff, 0x7f) pread64(r1, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:22:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:22:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5000001, 0x100010, r1, 0xfa450000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x8, 0x3c9f, 0x4}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) [ 2558.128698] FAULT_INJECTION: forcing a failure. [ 2558.128698] name failslab, interval 1, probability 0, space 0, times 0 [ 2558.130270] CPU: 1 PID: 11879 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2558.131163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2558.132222] Call Trace: [ 2558.132575] dump_stack+0x107/0x167 [ 2558.133055] should_fail.cold+0x5/0xa [ 2558.133559] ? create_object.isra.0+0x3a/0xa20 [ 2558.134180] should_failslab+0x5/0x20 [ 2558.134683] kmem_cache_alloc+0x5b/0x310 [ 2558.135221] create_object.isra.0+0x3a/0xa20 [ 2558.135798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2558.136468] kmem_cache_alloc_bulk+0x168/0x320 [ 2558.137075] io_submit_sqes+0x6fe6/0x8610 [ 2558.137632] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2558.138303] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2558.138939] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2558.139579] ? find_held_lock+0x2c/0x110 [ 2558.140113] ? io_submit_sqes+0x8610/0x8610 [ 2558.140690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2558.141330] ? wait_for_completion_io+0x270/0x270 [ 2558.141985] ? rcu_read_lock_any_held+0x75/0xa0 [ 2558.142574] ? vfs_write+0x354/0xb10 [ 2558.143057] ? fput_many+0x2f/0x1a0 [ 2558.143537] ? ksys_write+0x1a9/0x260 [ 2558.144041] ? __ia32_sys_read+0xb0/0xb0 [ 2558.144577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2558.145260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2558.145947] do_syscall_64+0x33/0x40 [ 2558.146440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2558.147108] RIP: 0033:0x7f61c5901b19 [ 2558.147599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2558.149985] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2558.150975] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2558.151899] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2558.152819] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2558.153749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2558.158691] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:22:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x2, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:22:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="ba254aeed51719db9505a8c57e221b0263e4511f946e9cc458af7f9394ba6764e381054d5f5801c61d4cc60e24bcd1ac15a04a33e17cddfc4249abda0200000000000000a3298044890edf267c30dee2b5f2a4353f3f58027a75ffa09c9c4d1eeee17e9549472f1be7b0b2e3abb2cc5eaec96b7bda72f02a9c6fbe6023e0a6642dadc59c0474920e878f7c2d72930fad585bf4f652595bed79e4e71d508e5b4e66578fb7d1b5e6dcfea87e4e229da085fccdb3186c1a4dc02b7824b1099215a91f28e9d1877e8e730ac0733a15f835267ccc9250399539", @ANYRES32=r1, @ANYBLOB="1a0100002e2f66296c653100"]) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() fcntl$setown(r5, 0x8, r6) fcntl$getown(r5, 0x9) fstat(r5, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0x29c3, 0x80, {0x7, 0x34}, 0x4, 0x1, 0x2b}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x8, 0x7d5, 0x3f8c, {0x40, 0xc7a1}, 0x400, 0x7}) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000340)) 11:22:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 11:22:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000140)='./file0\x00', 0xb8) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:22:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:22:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x7, 0x4) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0xdc8, @private2, 0xa643}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="bdafdb6d98b9d296772322fc", 0xc}, {&(0x7f0000000280)="edf4204e55", 0x5}, {&(0x7f00000002c0)="7b0ffcd539abc8b4757a47b0e085355f54e215416752c36c44efe8c811867da657950d7b306d5c13f5bd3eca689a4860714e1f4ee79ae7d6986373218bd2bb3597", 0x41}, {&(0x7f0000000340)="0a68b6ea3d97ef9220c95dbdde391885f34bad3f7a5adc7a01f9c0286d91d4f43d035dad557ed3dd929558b67e5a34e8befb8af60dad8164baa4bdf4ebbccb8eeb0c23f49e6553b9dbb45f07a05a53046a43fd5780a545765791c207348ef5c12a25ace6af9616a3d162674af82bcede8018aee399c6b15aa02f0e1aa536754b78539be9885ee12c5ea2bfe6f90a611adc39d7a963c356c68d9da98dc029e58dcadec5a6c6238a57f64bce98088205edc2fa51e97b06affe1291a4", 0xbb}], 0x4, &(0x7f0000000480)=[@dstopts={{0xd8, 0x29, 0x37, {0x6c, 0x17, '\x00', [@generic={0x2, 0x98, "423017513d1f4e655ac6362e6487b64f4e5b1ad213e8e8e1294f0b2daf6b64fe3100c35064dcaea62ccce7ff54b1e45de93e71d866631a43cf1437b20f97700ce31bae89bbad19cb19aed46e281306f64b776989b70d6898d31f808bc38deeb20503f4f67f03b678def3bf28ac13c1e9ae50d00f27f8cbf22c7742296870ac8c564b0b262492359847fe04e1f4367a83474f93286c0d56b5"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0xb, "2bcbf92a57c27e3cc18224"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x118}, 0x40800) 11:22:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 11:22:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) pipe2(&(0x7f0000000100), 0x800) [ 2576.340274] FAULT_INJECTION: forcing a failure. [ 2576.340274] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.341730] CPU: 0 PID: 11917 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2576.342652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.343693] Call Trace: [ 2576.344020] dump_stack+0x107/0x167 [ 2576.344468] should_fail.cold+0x5/0xa [ 2576.344936] ? create_object.isra.0+0x3a/0xa20 [ 2576.345498] should_failslab+0x5/0x20 [ 2576.345964] kmem_cache_alloc+0x5b/0x310 [ 2576.346522] ? mark_held_locks+0x9e/0xe0 [ 2576.347058] create_object.isra.0+0x3a/0xa20 [ 2576.347591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.348217] kmem_cache_alloc_bulk+0x168/0x320 [ 2576.348781] io_submit_sqes+0x6fe6/0x8610 [ 2576.349316] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2576.349927] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2576.350533] ? find_held_lock+0x2c/0x110 [ 2576.351050] ? io_submit_sqes+0x8610/0x8610 [ 2576.351615] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2576.352240] ? wait_for_completion_io+0x270/0x270 [ 2576.352830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2576.353402] ? vfs_write+0x354/0xb10 [ 2576.353859] ? fput_many+0x2f/0x1a0 [ 2576.354306] ? ksys_write+0x1a9/0x260 [ 2576.358806] ? __ia32_sys_read+0xb0/0xb0 [ 2576.359332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.359970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.360600] do_syscall_64+0x33/0x40 [ 2576.361075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.361732] RIP: 0033:0x7f2aef7e0b19 [ 2576.362217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.363619] FAULT_INJECTION: forcing a failure. [ 2576.363619] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.364559] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2576.364575] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2576.364583] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2576.364590] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.364605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2576.370497] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2576.371426] CPU: 1 PID: 11915 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2576.372330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.373365] Call Trace: [ 2576.373734] dump_stack+0x107/0x167 [ 2576.374212] should_fail.cold+0x5/0xa [ 2576.374684] ? create_object.isra.0+0x3a/0xa20 [ 2576.375375] should_failslab+0x5/0x20 [ 2576.375926] kmem_cache_alloc+0x5b/0x310 [ 2576.376524] ? mark_held_locks+0x9e/0xe0 [ 2576.377182] create_object.isra.0+0x3a/0xa20 [ 2576.377862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.378664] kmem_cache_alloc_bulk+0x168/0x320 [ 2576.379365] io_submit_sqes+0x6fe6/0x8610 [ 2576.380013] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2576.380775] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2576.381551] ? find_held_lock+0x2c/0x110 [ 2576.382205] ? io_submit_sqes+0x8610/0x8610 [ 2576.382869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2576.383646] ? wait_for_completion_io+0x270/0x270 [ 2576.385183] ? rcu_read_lock_any_held+0x75/0xa0 [ 2576.386548] ? vfs_write+0x354/0xb10 [ 2576.387671] ? fput_many+0x2f/0x1a0 [ 2576.388755] ? ksys_write+0x1a9/0x260 [ 2576.389855] ? __ia32_sys_read+0xb0/0xb0 [ 2576.390776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.391468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.392119] do_syscall_64+0x33/0x40 [ 2576.392588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.393271] RIP: 0033:0x7f61c5901b19 [ 2576.393743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.396175] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2576.397768] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2576.399989] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2576.402242] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.404606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2576.406888] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:23:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x8801, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) io_uring_enter(r5, 0x7b41, 0x944c, 0x0, &(0x7f00000002c0)={[0x7]}, 0x8) syz_io_uring_submit(r4, r1, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x62}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$PTP_ENABLE_PPS(r6, 0x40043d04, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 11:23:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000001c0)=0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x900) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) fallocate(0xffffffffffffffff, 0x5, 0x100000000, 0x4) 11:23:11 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 11:23:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x138, 0x27, 0x200, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0xc, 0x28, 0x0, 0x0, @u64=0x2}, @generic="4442b3cd60d4a80675ffe832a87ae19e654337dc34600c01bd4bdc31d254cac0bb5b3dc609c9f095f88bce092160360516509d21e1c095c7049d4c6bfe57903a5f4864a22fba", @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="e6de520820b803ce8bc8ea3a3f7d0d9c33813eacbcfac0dad4ce3b62df690358457eb112fbd6bb06e9964bd45231c9f87a2e02c55cf98acdd10c687cec8f5e5971e7d7af8e5032a4048a625a8aa7fe191cac9c61e48cc4b72d68e46ed4179c89f7727f850b87a4b0e0c106476973f09f9c0d5f4014826a431c1caae2ffc90de869852e6cc6b4f73116d4cfa26f78cc1e4c44e26587d8ec4409e1ce4786dfa98a8ace105b627ec84dc904b8338f5dd2c7c4ac973881c2dbbf7c6f0b"]}, 0x138}, 0x1, 0x0, 0x0, 0x18}, 0x10) pread64(r0, &(0x7f0000000180)=""/203, 0xcb, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200420e000000000000000000001300"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b9512833", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003e00)='/sys/block/sda', 0x80000, 0x10c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b900da00", @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x1c, r6, 0x1, 0x0, 0x0, {{0x6d}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000004300)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000042c0)={&(0x7f0000003e80)={0x410, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_PROBE_RESP={0x1a2, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x244, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x40, 0x3, "94bd86e559ece19ad0f2ceeb7d2c6cbb4c14723ad32cdf2987648a54176a92f11d17bd3ed46363ccc3ba0e1f7804ee3560125c885e21e62d02595e04"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb6, 0x3, "40a8d4780323520426311ce6150477c7f9cf4aab193ca8d66ae7c7b919d48bc424cd33ed60f1abdb9aaadbf04d656bf3b754e0dcf5b4c53b7a37d310e3b0a2feaaf1d6717553deb6057ebdbff4f4296e5dca2bf106e6c2c921a9cc3ef022e8333c83ae465eebeb55e9593834fe8624b76553bccb43a324ccc4ed2b7e0281e70ea293cc9159c6a7dcbb5bf28936639c14bf13e0be946b4e03fa46cbc8f26d5a26489578bda61c122ace9f05a8f653db598336"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "b49c5550c7dc8e89f51fb8207569f557222a8b319c3d93b5dd7ce4f59dda2534"}, @NL80211_FTM_RESP_ATTR_LCI={0xaf, 0x2, "c2c86a59b4b7ea7ecd2bfe840a8baf9a5ab09ea800a6e38f60b5ea5d28d4673e15fe1c0a8b0b047b02c3b6892902750db3041765bc504090f4f2ea74d7bfd56c10ba8c3873b6bff49fca05f4a0d49cd8ea4bf8a27e41123a0d31573b5997e4d5c7c7045730379c4ff941b8ec151fe7142036d5f27a13cce70b82e02165bd03d26c81d4f4855ad5ce6ffe3dd66deec8c14676b89d9e5bc25b5fd8f7e7f354186ade5976805f09eb43ff8976"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "74b6210c58aa4437260d35d9fb871853814a65684b9025546e56d3d9ea5fae0c7b4ac640115e4f49b8aff3f294076f068f35f9bfdb01b8b2177b2629f071cf8c418436f5cf59c1999d6f01edc1e3024079e21d9676d2283da5054d71bb"}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x44040}, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d80)={&(0x7f0000000400)={0x397c, r2, 0x310, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3394, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3384, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xc0, 0x0, "48aa5be01ecacb6ce348d4b959aaca2afeb7e757f42b3c5346742d817a26546371b8207664f9f23a6783c8dcc4620e93c0978260fe839767efd4f1145fb680c7b957becb6cbee3d30348d75d0c9af79295ae746aac46b560b02b058adb5eb4dd16fd432b866e0097f90c1f9e6fc37f8c16cca67753ff7471098e5945f3f8773343170f8297e39aa1c0b6606d2c2f7d5f32b0bb1183e77b2efc957b00f74ffe525c4a1a3d5be50052dfbd1bb85bebece8b16a7f6c04a828dd9678ba52"}, {0x1004, 0x0, "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"}, {0x2d, 0x0, "37759dd6c51ca0c25cc224ea153443035a4d5bfafd4be0ec0faf33a5fdf1776215d00b674c1efb02ce"}, {0xce, 0x0, "c465cd68ed09123b4e2b440ac15ad3c59ed8c7d0e098b99d986226520ad03e252803eb30af9b43639dd9bb26effcd2e1fd15479d84a78783dddba819fb742145e424b1a3c1c6af75067711f28d8dfe2a91481461a7a01c2cce6599f1aaa9759a104aa3f744133d838a263b80918820aff961e0f79bf896adab36af012446e6d84f2bce8696fbff3cb66aff0b80e11c1ce408556e8d9099c7bed5d8a6ee11fb49e372fea185a8766bbbe21562deffe2c1d6a9745607c37b5e47dd7232bd1c59c81832aff32b57c39c1c62"}, {0x5b, 0x0, "e2edab100248e9100c6fa31386ea9b00ce70d5966da142c22ed9e671aa7a6816e2d9a08d1aca1fdf6f2ccdd79778a5bcaf0a0f242ef471ed52fa0f3a299bcc16a78f75e229e42b7b05579766e1628e542b171b53842c63"}, {0xe9, 0x0, "bb6f660d9ea94f766afefa6d9ac434c0980ea6c99febc731938b5ad70cfe1c1ccfbc63211d6675a8392ef1bd97014511ef868ee2b0db9ee07a3ecd2107cc4ed9aef525616251482f0d293d3334fdb5ca86916dca0f837858322be3c552c414c2d642254718d670b5450ac67520c84851a090478251901c6a8ddf652a04b0a595ae77117507d0131e0f256aaaca94ffef1f2de8ed10a8cccb72cf60edbc80afbf95480b44e7d3c66431888bd8ef3fbcdee7cf9ee70f9a1791a994530282d5ad1c3f1fb170260da808506f31574566e63e441d1bd815c8416c94e26d01669f10aea3fd92867a"}, {0x6a, 0x0, "3e2837f6863e5b150637d78b52a6be71964b24a6bc87e696b5f800554e90f15af180273c40040aa5859b51a1049cd264fb464e86d3e3f43e0b97410200973cfad879d20ecc38ea01e62de58233de9543412d0bc24650d34959538088a26fc113f86bba69f2a1"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x12}]}, @NL80211_ATTR_NAN_FUNC={0x574, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x570, 0xe, 0x0, 0x1, [{0x51, 0x0, "579a59538504a9f31cb7a7281f5010b2283fd7b455b729d104961c2597fefd4469d17829651ef6c6dd04bb589bedda7ff8400f07652091ccd5fb47818298880e75b860eff0f1553108403bf32a"}, {0xe4, 0x0, "60f68f08fa6a9aa6c2a53b7fbe9492deec4e6e788784f6c4d36fe3d76e752449bb909f536bb0fe1fb9cbdcda573a45fc92b7c701719bc69fa2fe0135c866088939f515014d20057cc498c2acc8532410eb7df7fedaef1653b0b8830ca98fa201a58b4f4418a4ffad4421289c43ba784800cb06e3e5480853b6cc28760164c9012a3cb3aacfdccd54c0a09560893f5e3156fd108efe56f5d2c1c2d35d48d12cec114c2c39ac022c1eae2a4bce3b0c1c7f2fd76349739770439bcd3945ade6216be96aabca0f07d1d2936dd4d7c6b29dfec091432701585adea9a02e7cbb8e0bdc"}, {0x101, 0x0, "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"}, {0xa7, 0x0, "12c3ac48e491f0b64f39162f53814c748fe5ab121b8a63fb0c4d6f0483b15868d03c3cf7a61e6224f612f7d434aa044bbba2c309c399138fbf2654564ae49af1274f968a0f4bfa5f355e4259f486c51fb2a9822dd758d5f2716a47edecc0eac0036d89f69582bdfac6d0836d61109551fc904dc0c26ce568453a26cdeafa19292a2b1c6164eb31d50c47766f70c78780bad7ea217190c2744641c5cc5f1625ee4a7e38"}, {0x70, 0x0, "338ef70f1c2c1d020c6511f815020cfeb06c4d9d35777dff796afd0286d57dc728eef642dca1d2d7686e854cbbf1596b7f0845617fd9881b861fd9e0ddeec065ea775d90d71f9b99987ccf89e05339cfa63eeabe0bfd5296492097811e5f66a2e50afcda9da7b1ff64d59709"}, {0xcb, 0x0, "9b6650dc55ad6b23ba307a4e28a6e22be3b1b9771a229c039d7682a48c3fce0d61bdc2e33b7cd7df28769bcf7636114f50697c57a23e799bc77d12469e57d61ad0222257ce1b003c109afaff191bf85ceda27ec54dfb681070975a011e1e7c6d955b3b55f4230ef5b54334aa12535667e35a3a6345044328b63d22f2f1a966b2474537578bbdd867fad4c3fe23f32557139cbae224d212f5a78aacbae40e36ffaf9ad69c2eedba24bc93b2f29de75096755cdd1cb9df04e05b0f54a17ef676cf1ed738d298883b"}, {0xee, 0x0, "e67c0a91f8fcac884e6a3b781e6947f04e8f9796f723eee73b8902a95bca6c8d55cab006422741368db223d19fde19dbd59cd7a1280cad96215e6702a3e7f9c1fa8f3bd2e4029bd94a96ab1c675565c26c12523ad7d5894cbdfcd343177d66f272084205219cdf4626c4fcd800bc95a3400544fc9befb9378546513d471061a43654a61031ff76a3a343abe5e823b68462152846ccf125301db6cba54d673e796443148e646990e65a40deb0b8be07cdbda1137dbc3aa51efd372c92be414d6eec51dfc5f4a039bd1daa6f82ea27ab1bd315648f9f01887bcde5d67f7f9e1f2e78dfd406831cfbe7317f"}, {0x5a, 0x0, "1ed8052c8abd4247d836e30a30fcbc743fd35402be468e48005a194212c9d3e331ad5bc24c57c55cc3ae3db4bab1900bf046bac3268d07401b043d9567bb54df6e9a547b1d53df5db8b48d2c8ecea165ef599cc4c698"}]}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x80}]}]}, 0x397c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000023d4f4879d4f0018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0\x00']) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000140)=[r0], 0x1) [ 2589.536293] FAULT_INJECTION: forcing a failure. [ 2589.536293] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.537868] CPU: 0 PID: 11930 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2589.538757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.539876] Call Trace: [ 2589.540203] dump_stack+0x107/0x167 [ 2589.540644] should_fail.cold+0x5/0xa [ 2589.541166] ? create_object.isra.0+0x3a/0xa20 [ 2589.541786] should_failslab+0x5/0x20 [ 2589.542256] kmem_cache_alloc+0x5b/0x310 [ 2589.542806] ? mark_held_locks+0x9e/0xe0 [ 2589.543318] create_object.isra.0+0x3a/0xa20 [ 2589.543909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.544530] kmem_cache_alloc_bulk+0x168/0x320 [ 2589.545139] io_submit_sqes+0x6fe6/0x8610 [ 2589.545706] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.546321] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.546975] ? find_held_lock+0x2c/0x110 [ 2589.547475] ? io_submit_sqes+0x8610/0x8610 [ 2589.548089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.548731] ? wait_for_completion_io+0x270/0x270 [ 2589.549342] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.549963] ? vfs_write+0x354/0xb10 [ 2589.550416] ? fput_many+0x2f/0x1a0 [ 2589.550918] ? ksys_write+0x1a9/0x260 [ 2589.551390] ? __ia32_sys_read+0xb0/0xb0 [ 2589.551965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.552604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.553283] do_syscall_64+0x33/0x40 [ 2589.553795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.554418] RIP: 0033:0x7f61c5901b19 [ 2589.554927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.557293] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.558273] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2589.559205] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2589.560166] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.561080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.562003] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:23:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) rt_sigprocmask(0x2, &(0x7f0000000200)={[0x3]}, &(0x7f0000000240), 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2589.590991] FAULT_INJECTION: forcing a failure. [ 2589.590991] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.592458] CPU: 0 PID: 11936 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2589.593343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.594412] Call Trace: [ 2589.594785] dump_stack+0x107/0x167 [ 2589.595248] should_fail.cold+0x5/0xa [ 2589.595791] ? create_object.isra.0+0x3a/0xa20 [ 2589.596356] should_failslab+0x5/0x20 [ 2589.596868] kmem_cache_alloc+0x5b/0x310 [ 2589.597371] ? mark_held_locks+0x9e/0xe0 [ 2589.597948] create_object.isra.0+0x3a/0xa20 [ 2589.598485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.599258] kmem_cache_alloc_bulk+0x168/0x320 [ 2589.599990] io_submit_sqes+0x6fe6/0x8610 [ 2589.600616] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.600628] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.600697] ? find_held_lock+0x2c/0x110 [ 2589.600764] ? io_submit_sqes+0x8610/0x8610 [ 2589.603410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.604121] ? wait_for_completion_io+0x270/0x270 [ 2589.604766] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.605359] ? vfs_write+0x354/0xb10 [ 2589.605872] ? fput_many+0x2f/0x1a0 [ 2589.606348] ? ksys_write+0x1a9/0x260 [ 2589.606859] ? __ia32_sys_read+0xb0/0xb0 [ 2589.607376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.608095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.608800] do_syscall_64+0x33/0x40 [ 2589.609260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.609942] RIP: 0033:0x7f2aef7e0b19 [ 2589.610395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.612817] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.613799] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2589.614738] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2589.617915] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.618860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.619802] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:23:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x8, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x9, 0xd9500000}, 0x100, './file0\x00'}) 11:23:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r2]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r7, &(0x7f0000000000)=""/192, 0xc0, 0x9) write(0xffffffffffffffff, &(0x7f0000000100)="0aab8161c18e220a66255c070f6128d05ed37cb06b10d73f7a42ecbcbb3e74a95934230a0a5b4fba6c221163798fa927c7538f4bc7d04acd3019d4ad5370ec9ce6fe3367ec59d4c1cdc4e2195e26fe7e87e214eb3749b12bf9f02edea539783b3cb486e91791ef1140c33f2c121e5e353132af1afddca2f26d8573e11d1309f0ed9d", 0x82) 11:23:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = creat(0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb5, &(0x7f0000000200)="17be4d59e92448a27951def2deaabf54864bfca2bdd3bd7796d1e334e9cf51e591093e4468b16223f93f5efc5eb8a38a95c9e691077a25dbb363f07c242f6d7a63759ef06627c22e13eeb5f3c4f3f80ef1a730af20c0e8c051a830a997fad7ec7ddc5db6e26e80f51bb78602c41f833d2cedd5e99f78e590b55cfd026116a829e42aec1385691e5597dbae3d405c06b80509533a399067932a56030166c4f7a2175f2fb6c4b30f0d170860ccd594bd362d41ee9c3a", 0xe1, 0x0, &(0x7f00000002c0)="de3f9590e0dc291a3471cbd87aa5b20083982ce10cbbb9425e498f966ddfe16b1dbbc96920861bfe104a83744c7c9df66f481bde11cc58f87d6731fcde20e1fd5427971162dd6b4981d16a29f87158354048c2e22d3341b59f94eaa7e70a8099eae55aa0a9ec24e7f96ec76d3458522058c24350e254988c2d88155ad0eb326327dd4980c24484a5900b71f22c4d997d0e3016b121ebaeb5b48f7534ab0cb8209f697bebc6fbf4ca850038f2145e5fdfbe01e3ec1be170a87ee61430bc57f1b8a3482bff249f38e5d0f2a97059ac49bb6292edce6c0c5279d68e45b99967683b5b"}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = io_uring_setup(0x667d, &(0x7f0000000140)={0x0, 0x71e4, 0x2, 0x1, 0x150, 0x0, r3}) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0xffff) syz_io_uring_setup(0x51a0, &(0x7f0000000240)={0x0, 0xdf41, 0x4, 0x2, 0x3b6, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) close_range(r3, r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2589.715648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2589.749671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2589.752165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2589.754226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:23:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 11:23:11 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000180)={0x20, 0x1, 'client1\x00', 0xffffffff80000003, "f6e39dc0f3400300", "e291fa09f35a5086fe74954423710e5d331800000000000000008000", 0x2, 0x3ff}) [ 2589.771329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:23:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) creat(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:11 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2, 0x5}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2589.802871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2589.803924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2589.805160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2589.832037] FAULT_INJECTION: forcing a failure. [ 2589.832037] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.834638] CPU: 0 PID: 11968 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2589.836785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.839558] Call Trace: [ 2589.840426] dump_stack+0x107/0x167 [ 2589.841623] should_fail.cold+0x5/0xa [ 2589.842868] should_failslab+0x5/0x20 [ 2589.844157] kmem_cache_alloc_bulk+0x4b/0x320 [ 2589.845647] io_submit_sqes+0x6fe6/0x8610 [ 2589.847051] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.848145] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.849435] ? find_held_lock+0x2c/0x110 [ 2589.850469] ? io_submit_sqes+0x8610/0x8610 [ 2589.851320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.851977] ? wait_for_completion_io+0x270/0x270 [ 2589.852641] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.853264] ? vfs_write+0x354/0xb10 [ 2589.853764] ? fput_many+0x2f/0x1a0 [ 2589.854275] ? ksys_write+0x1a9/0x260 [ 2589.854803] ? __ia32_sys_read+0xb0/0xb0 [ 2589.855392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.856156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.856890] do_syscall_64+0x33/0x40 [ 2589.857416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.858184] RIP: 0033:0x7f61c5901b19 [ 2589.858709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.861415] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.862516] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2589.863576] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2589.864601] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.865641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.866652] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:23:12 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/17, 0x11) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:23:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 11:23:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3ff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = signalfd4(r2, &(0x7f0000000200)={[0x385]}, 0x8, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000240)=0x6, 0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) 11:23:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 11:23:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) [ 2589.942396] FAULT_INJECTION: forcing a failure. [ 2589.942396] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.944014] CPU: 0 PID: 11986 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2589.944990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.946160] Call Trace: [ 2589.946572] dump_stack+0x107/0x167 [ 2589.947140] should_fail.cold+0x5/0xa [ 2589.947685] ? create_object.isra.0+0x3a/0xa20 [ 2589.948344] should_failslab+0x5/0x20 [ 2589.948910] kmem_cache_alloc+0x5b/0x310 [ 2589.949485] ? mark_held_locks+0x9e/0xe0 [ 2589.950103] create_object.isra.0+0x3a/0xa20 [ 2589.950729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.951478] kmem_cache_alloc_bulk+0x168/0x320 [ 2589.952138] io_submit_sqes+0x6fe6/0x8610 [ 2589.952733] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.953413] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.954074] ? find_held_lock+0x2c/0x110 [ 2589.954639] ? io_submit_sqes+0x8610/0x8610 [ 2589.955277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.955959] ? wait_for_completion_io+0x270/0x270 [ 2589.956660] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.957322] ? vfs_write+0x354/0xb10 [ 2589.957828] ? fput_many+0x2f/0x1a0 [ 2589.958230] ? ksys_write+0x1a9/0x260 [ 2589.958644] ? __ia32_sys_read+0xb0/0xb0 [ 2589.959138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.959703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.960265] do_syscall_64+0x33/0x40 [ 2589.960669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.961226] RIP: 0033:0x7f2aef7e0b19 [ 2589.961629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.963837] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.964893] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2589.965840] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2589.966615] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.967418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.968190] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:23:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f00000000c0)={0x40, 0x1, 'client0\x00', 0x0, '\x00', "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) creat(&(0x7f0000000000)='./file0\x00', 0x88) 11:23:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x6) copy_file_range(0xffffffffffffffff, &(0x7f0000000000), r3, 0x0, 0x1, 0x0) fcntl$getown(r1, 0x9) r5 = fork() process_vm_readv(r5, &(0x7f0000003680)=[{&(0x7f0000001400)=""/214, 0xd6}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/11, 0xb}, {&(0x7f0000002540)=""/42, 0x2a}, {&(0x7f0000002580)=""/62, 0x3e}, {&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x7, &(0x7f0000003700), 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/177, 0xb1, 0x29) 11:23:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x73ef, 0x0, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000240)={0x11, 0xe, 0x1, 0x0, 0x0, [@mcast2, @mcast2, @mcast2, @mcast2, @remote, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}, 0x78) clock_gettime(0x0, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5, 0x219}}, './file0\x00'}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) 11:23:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) fcntl$getown(r6, 0x9) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getpid() fcntl$setown(r8, 0x8, r9) fcntl$getown(r8, 0x9) poll(&(0x7f0000000140)=[{r5, 0x40}, {0xffffffffffffffff, 0x1}, {r0, 0x1000}, {r6, 0x1040}, {r5}, {r8, 0x98}, {r3, 0x8000}, {r5, 0x1}], 0x8, 0x4) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r5, 0xff, 0x0, 0x3}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f00000000c0)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318", 0x0, 0x8000000}) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r2, 0x0, &(0x7f0000000000)='./file0\x00', 0x63, 0x404002, 0x12345}, 0x7) 11:23:25 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 11:23:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') fsetxattr$security_evm(r3, &(0x7f0000000140), &(0x7f0000000180)=@sha1={0x1, "e8901e32e4c6528b45726a6698e8e9400ae7e16a"}, 0x15, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x9) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x3, 0x80000000, 0x0, 'queue0\x00', 0x200}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe7479ff237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) unshare(0x10020000) 11:23:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0xffff, 0x40) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ppoll(&(0x7f0000000240)=[{r0, 0x8008}, {0xffffffffffffffff, 0x30}, {0xffffffffffffffff, 0x4200}, {r1, 0x8}, {r2, 0x40}], 0x5, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x9]}, 0x8) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/251, 0xfb}], 0x2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x91) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 11:23:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x749d, &(0x7f0000000240)={0x0, 0xb618, 0x0, 0x0, 0xa, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 11:23:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x4}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) [ 2603.281792] audit: type=1400 audit(1738581805.442:154): avc: denied { setattr } for pid=12023 comm="syz-executor.4" name="comm" dev="proc" ino=44436 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 11:23:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x60, 0x8, 0x7f, 0xfa, 0x0, 0x400, 0x1008, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x410, 0x6, 0x80000000, 0x7, 0x40, 0x401, 0x0, 0x0, 0x4, 0x0, 0xe850}, r1, 0x2, 0xffffffffffffffff, 0x9) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e1b000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000d11000/0x4000)=nil, &(0x7f0000d31000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000d9b000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)="0007fb9d13c8d451f430f1fc44324c848551fa94eb49d6987d0de40f3360be097c6c11332df984b2d4c42bbfe164fde629e9231958e25e0fd8257b0bd7944129e78960b3a6cc2eb78fface493033c63f48cfcdee7219fc1075e0c47fc7623c25c6a85c02600869c01984ae32940e973e2d15d551f1249094bb4b1efcfa9106fddde8f2322f38acc0319ceebdf5a81599ce4cfa193125a727ec7ef6b7fb3b3559f48d2b9c9e48fc81ea4987069f9ff88a936dd9299373f5245e9db046b69dc18dcd4a70ee0a61fca9563348442d78926d659f281dc259280f33", 0xd9, r0}, 0x68) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x2, &(0x7f0000000480)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000500)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2603.332334] FAULT_INJECTION: forcing a failure. [ 2603.332334] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.333801] CPU: 0 PID: 12038 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2603.334695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.335771] Call Trace: [ 2603.336126] dump_stack+0x107/0x167 [ 2603.336612] should_fail.cold+0x5/0xa [ 2603.337117] ? create_object.isra.0+0x3a/0xa20 [ 2603.337721] should_failslab+0x5/0x20 [ 2603.338226] kmem_cache_alloc+0x5b/0x310 [ 2603.338767] ? mark_held_locks+0x9e/0xe0 [ 2603.339291] create_object.isra.0+0x3a/0xa20 [ 2603.339888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.340560] kmem_cache_alloc_bulk+0x168/0x320 [ 2603.341170] io_submit_sqes+0x6fe6/0x8610 [ 2603.341729] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.342385] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.343021] ? find_held_lock+0x2c/0x110 [ 2603.347604] ? io_submit_sqes+0x8610/0x8610 [ 2603.348180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2603.348817] ? wait_for_completion_io+0x270/0x270 [ 2603.349452] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.350061] ? vfs_write+0x354/0xb10 [ 2603.350546] ? fput_many+0x2f/0x1a0 [ 2603.351006] ? ksys_write+0x1a9/0x260 [ 2603.351506] ? __ia32_sys_read+0xb0/0xb0 [ 2603.352054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2603.352739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.353408] do_syscall_64+0x33/0x40 [ 2603.353898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.354574] RIP: 0033:0x7f2aef7e0b19 [ 2603.355064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.357433] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2603.358420] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2603.359359] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2603.360289] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.361201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.362115] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2603.371183] FAULT_INJECTION: forcing a failure. [ 2603.371183] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.372799] CPU: 1 PID: 12029 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2603.373696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.374765] Call Trace: [ 2603.375090] dump_stack+0x107/0x167 [ 2603.375545] should_fail.cold+0x5/0xa [ 2603.376017] ? create_object.isra.0+0x3a/0xa20 [ 2603.376602] should_failslab+0x5/0x20 [ 2603.377098] kmem_cache_alloc+0x5b/0x310 [ 2603.377629] ? mark_held_locks+0x9e/0xe0 [ 2603.378161] create_object.isra.0+0x3a/0xa20 [ 2603.378729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.379412] kmem_cache_alloc_bulk+0x168/0x320 [ 2603.380020] io_submit_sqes+0x6fe6/0x8610 [ 2603.380572] ? __io_uring_add_tctx_node+0xe6/0x520 11:23:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000)) [ 2603.381216] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.387788] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.388425] ? find_held_lock+0x2c/0x110 [ 2603.388965] ? io_submit_sqes+0x8610/0x8610 [ 2603.389547] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2603.390186] ? wait_for_completion_io+0x270/0x270 [ 2603.390824] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.391452] ? vfs_write+0x354/0xb10 [ 2603.391944] ? fput_many+0x2f/0x1a0 [ 2603.392426] ? ksys_write+0x1a9/0x260 [ 2603.392932] ? __ia32_sys_read+0xb0/0xb0 [ 2603.393472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2603.394164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.394844] do_syscall_64+0x33/0x40 [ 2603.395336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.396033] RIP: 0033:0x7f61c5901b19 [ 2603.396527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.398909] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2603.399924] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2603.400839] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2603.401711] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.402614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.403558] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:23:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) syz_io_uring_setup(0x4619, &(0x7f0000000200)={0x0, 0xb4c9, 0x2, 0x3, 0x24f, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f00000002c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r3}}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff0000002e2f66296c653100"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x4010, r4, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4642, &(0x7f0000000140)={0x0, 0xfffffffc, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000100)=""/192, 0xc0, 0x9) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0x2) 11:23:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x1c}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4d}) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 2603.568922] FAULT_INJECTION: forcing a failure. [ 2603.568922] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.570441] CPU: 0 PID: 12065 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2603.571326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.572441] Call Trace: [ 2603.572795] dump_stack+0x107/0x167 [ 2603.573283] should_fail.cold+0x5/0xa [ 2603.573790] ? create_object.isra.0+0x3a/0xa20 [ 2603.574394] should_failslab+0x5/0x20 [ 2603.574901] kmem_cache_alloc+0x5b/0x310 [ 2603.575456] ? mark_held_locks+0x9e/0xe0 [ 2603.575996] create_object.isra.0+0x3a/0xa20 [ 2603.576573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.577233] kmem_cache_alloc_bulk+0x168/0x320 [ 2603.577833] io_submit_sqes+0x6fe6/0x8610 [ 2603.578407] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.579044] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2603.579700] ? find_held_lock+0x2c/0x110 [ 2603.580221] ? io_submit_sqes+0x8610/0x8610 [ 2603.580801] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2603.581423] ? wait_for_completion_io+0x270/0x270 [ 2603.582059] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.582665] ? vfs_write+0x354/0xb10 [ 2603.583149] ? fput_many+0x2f/0x1a0 [ 2603.583650] ? ksys_write+0x1a9/0x260 [ 2603.584149] ? __ia32_sys_read+0xb0/0xb0 [ 2603.584681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2603.585367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.586046] do_syscall_64+0x33/0x40 [ 2603.586536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2603.587209] RIP: 0033:0x7f2aef7e0b19 [ 2603.587746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.590224] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2603.591202] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2603.592129] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2603.593058] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.593988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.594903] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:23:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x14}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:23:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 11:23:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x8, 0x81, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) 11:23:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000001000000180000003180ef056a8cef4f80938ead", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000019a00)=""/146, 0x92}, {&(0x7f0000000a00)=""/102400}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f00000001c0)=""/1, 0x1}], 0x9, 0x0, 0x5e}, 0x0, 0x3, 0x1, {0x3}}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/9, 0x9}], 0x3, 0x48, 0x1000) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0xb2d17a1057b3eede, 0x0) poll(&(0x7f0000000380)=[{r3, 0x2098}, {r1, 0x2000}, {r1, 0x249}, {r4, 0x408}], 0x4, 0x7) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 11:23:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r2, &(0x7f0000000100), 0x0, 0x0, 0x80000, 0x1, {0x0, r6}}, 0x6) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2616.836253] FAULT_INJECTION: forcing a failure. [ 2616.836253] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.837842] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2616.838794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.839975] Call Trace: [ 2616.840346] dump_stack+0x107/0x167 [ 2616.840911] should_fail.cold+0x5/0xa [ 2616.841474] ? create_object.isra.0+0x3a/0xa20 [ 2616.842118] should_failslab+0x5/0x20 [ 2616.842655] kmem_cache_alloc+0x5b/0x310 [ 2616.843221] ? mark_held_locks+0x9e/0xe0 [ 2616.843819] create_object.isra.0+0x3a/0xa20 [ 2616.844440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.845154] kmem_cache_alloc_bulk+0x168/0x320 [ 2616.845794] io_submit_sqes+0x6fe6/0x8610 [ 2616.846395] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2616.847090] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2616.847760] ? find_held_lock+0x2c/0x110 [ 2616.848280] ? io_submit_sqes+0x8610/0x8610 [ 2616.848818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2616.849414] ? wait_for_completion_io+0x270/0x270 [ 2616.850008] ? rcu_read_lock_any_held+0x75/0xa0 [ 2616.850579] ? vfs_write+0x354/0xb10 [ 2616.851070] ? fput_many+0x2f/0x1a0 [ 2616.851519] ? ksys_write+0x1a9/0x260 [ 2616.852014] ? __ia32_sys_read+0xb0/0xb0 [ 2616.852588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2616.853316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2616.854036] do_syscall_64+0x33/0x40 [ 2616.854527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.855157] RIP: 0033:0x7f2aef7e0b19 [ 2616.855662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.858155] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2616.859196] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2616.860262] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2616.861312] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.862242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2616.863160] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2616.902304] FAULT_INJECTION: forcing a failure. [ 2616.902304] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.908163] CPU: 1 PID: 12084 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2616.909193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.910432] Call Trace: [ 2616.910830] dump_stack+0x107/0x167 [ 2616.911374] should_fail.cold+0x5/0xa [ 2616.911997] ? create_object.isra.0+0x3a/0xa20 [ 2616.912694] should_failslab+0x5/0x20 [ 2616.913267] kmem_cache_alloc+0x5b/0x310 [ 2616.913880] create_object.isra.0+0x3a/0xa20 [ 2616.914524] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.915291] kmem_cache_alloc_bulk+0x168/0x320 [ 2616.916019] io_submit_sqes+0x6fe6/0x8610 [ 2616.916592] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2616.917248] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2616.917883] ? find_held_lock+0x2c/0x110 [ 2616.918433] ? io_submit_sqes+0x8610/0x8610 [ 2616.919010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2616.919642] ? wait_for_completion_io+0x270/0x270 [ 2616.920372] ? rcu_read_lock_any_held+0x75/0xa0 [ 2616.920972] ? vfs_write+0x354/0xb10 [ 2616.921893] ? fput_many+0x2f/0x1a0 [ 2616.923274] ? ksys_write+0x1a9/0x260 [ 2616.924732] ? __ia32_sys_read+0xb0/0xb0 [ 2616.926288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2616.928342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2616.930333] do_syscall_64+0x33/0x40 [ 2616.931723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.933721] RIP: 0033:0x7f61c5901b19 [ 2616.935085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.942072] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2616.944964] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2616.947663] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2616.948709] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.949641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2616.950575] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:23:39 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40505331, &(0x7f0000000180)={0x40, 0x0, 'client0\x00', 0x0, "a5e49b299b28f2bc", "e291fa09f35a5086fe747944237101c48dc8b6a6cdaddce714aeb9510e5d3318"}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88900) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x1, 0x1, {0x3, 0x2, 0x1, 0x0, 0x1c}, 0x7}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r2}, 0x0, 0x1a, @inherit={0x88, &(0x7f0000000240)={0x0, 0x8, 0xffff, 0x9, {0xa, 0x4, 0x0, 0x100000001, 0xfff}, [0x40, 0xff, 0x0, 0xffffffffffffffff, 0x110, 0x7f, 0x8, 0x314]}}, @name="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"}) 11:23:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:39 executing program 0: ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x1, 'team0\x00', {}, 0x418}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x3fcdd96e10f5a90, {0x0, r4}}, 0x2) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x38) ftruncate(r1, 0x5) 11:23:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000240)=0x1, 0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000200)=0x3ff, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 11:23:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2617.213320] FAULT_INJECTION: forcing a failure. [ 2617.213320] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.214827] CPU: 0 PID: 12110 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2617.215668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2617.216754] Call Trace: [ 2617.217113] dump_stack+0x107/0x167 [ 2617.217554] should_fail.cold+0x5/0xa [ 2617.218023] ? create_object.isra.0+0x3a/0xa20 [ 2617.218577] should_failslab+0x5/0x20 [ 2617.219038] kmem_cache_alloc+0x5b/0x310 [ 2617.219529] ? mark_held_locks+0x9e/0xe0 [ 2617.220084] create_object.isra.0+0x3a/0xa20 [ 2617.220636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2617.221286] kmem_cache_alloc_bulk+0x168/0x320 [ 2617.221847] io_submit_sqes+0x6fe6/0x8610 [ 2617.222369] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2617.222972] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2617.223588] ? find_held_lock+0x2c/0x110 [ 2617.224121] ? io_submit_sqes+0x8610/0x8610 [ 2617.224653] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2617.225241] ? wait_for_completion_io+0x270/0x270 [ 2617.225827] ? rcu_read_lock_any_held+0x75/0xa0 [ 2617.226391] ? vfs_write+0x354/0xb10 [ 2617.226843] ? fput_many+0x2f/0x1a0 [ 2617.227285] ? ksys_write+0x1a9/0x260 [ 2617.227747] ? __ia32_sys_read+0xb0/0xb0 [ 2617.228294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2617.228972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2617.229650] do_syscall_64+0x33/0x40 [ 2617.230141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2617.230813] RIP: 0033:0x7f2aef7e0b19 [ 2617.231286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2617.233705] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2617.234699] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2617.235614] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2617.236546] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.237485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2617.238443] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:23:53 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 11:23:53 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x42940, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0xde, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f26}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x40) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x311903, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 11:23:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 11:23:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(r1, &(0x7f00000001c0)={[0x800]}, 0x8, 0x0) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0xa, 0x4e23, 0x3f, @mcast1, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000480)="581a82c8c997eb4007135145fa3469aa04225d06b87dfc6cbbfa53ddb0d84daf1fa714464671688398ae9bfed211a4378021ce8d1abfb600ccda26b448456459037e75f2636e1fa224cb4e7cf88bf2a23f543df1a29e3afe27af404deb0c2045b2cc5a9000da5aa181ad994b58de5abfe6e2718cc5650002b77eca1a5572f90d627753053b5c3bf2969afbc952f0ef45bc2aff3e1b1a26b2b7e16e6bcdc7c70069af6c417db17a7ea4a7cf3890de0a48d0b564f27bcddf01f35a38f8add8c8a49e161e4917a494be436af6c4", 0xcc}], 0x2}, 0x20000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:23:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:53 executing program 2: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendto(r1, &(0x7f00000004c0)="46734fd45a6fa8dda685dbd44b0bf414de90b99dab9de4bcae86ceb8a50d75818ad6ffde2750fac2e9f80c184b3a7a1910a99e30ff6475daebf56e3912ad12ef4cc213c6e20d65ab91464ef1827eb232efbcd666ff409a129df091292472146e904e2242e4265241b94456646dbb061966c377b5d3c3e71a01d1a5c08026717e1e7d44ac8fd1b16c163f4c288d104e4aa9bc0ce1b7797ef0bf870481846163993d00210b7ab9791dafcd17ebfef2149f3a0e38", 0xb3, 0x0, &(0x7f0000000580)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10040, &(0x7f0000000940)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, r3}}, {@version_9p2000}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x7ff}}, {@access_user}, {@mmap}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'net/snmp6\x00'}}, {@subj_type={'subj_type', 0x3d, '-'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r2}}, {@uid_lt={'uid<', 0xee00}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x33, 0x34, 0x35, 0x35, 0x64, 0x33], 0x2d, [0x38, 0x66, 0x66, 0x31], 0x2d, [0x61, 0x36, 0xd, 0x65], 0x2d, [0x66, 0x38, 0x34, 0x62], 0x2d, [0x61, 0x32, 0x7f0676a13d91055, 0x32, 0x38, 0x63, 0x65, 0x64]}}}]}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r4, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2630.985861] FAULT_INJECTION: forcing a failure. [ 2630.985861] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.987365] CPU: 0 PID: 12126 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2630.988204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2630.989223] Call Trace: [ 2630.989547] dump_stack+0x107/0x167 [ 2630.989992] should_fail.cold+0x5/0xa [ 2630.990461] should_failslab+0x5/0x20 [ 2630.990923] kmem_cache_alloc_bulk+0x4b/0x320 [ 2630.991472] io_submit_sqes+0x6fe6/0x8610 [ 2630.991994] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2630.996631] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2630.997222] ? find_held_lock+0x2c/0x110 [ 2630.997720] ? io_submit_sqes+0x8610/0x8610 [ 2630.998254] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2630.998840] ? wait_for_completion_io+0x270/0x270 [ 2630.999424] ? rcu_read_lock_any_held+0x75/0xa0 [ 2630.999985] ? vfs_write+0x354/0xb10 [ 2631.000450] ? fput_many+0x2f/0x1a0 [ 2631.000892] ? ksys_write+0x1a9/0x260 [ 2631.001360] ? __ia32_sys_read+0xb0/0xb0 [ 2631.001855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.002488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.003113] do_syscall_64+0x33/0x40 [ 2631.003564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.004183] RIP: 0033:0x7f2aef7e0b19 [ 2631.004654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.006875] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2631.007801] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2631.008676] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2631.009539] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.010402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.011268] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:23:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2631.078589] FAULT_INJECTION: forcing a failure. [ 2631.078589] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.080004] CPU: 0 PID: 12133 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2631.080861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.081866] Call Trace: [ 2631.082194] dump_stack+0x107/0x167 [ 2631.082646] should_fail.cold+0x5/0xa [ 2631.083112] ? create_object.isra.0+0x3a/0xa20 [ 2631.083670] should_failslab+0x5/0x20 [ 2631.084135] kmem_cache_alloc+0x5b/0x310 [ 2631.084649] ? mark_held_locks+0x9e/0xe0 [ 2631.085145] create_object.isra.0+0x3a/0xa20 [ 2631.085680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2631.086298] kmem_cache_alloc_bulk+0x168/0x320 [ 2631.086854] io_submit_sqes+0x6fe6/0x8610 [ 2631.087373] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.087974] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.088578] ? find_held_lock+0x2c/0x110 [ 2631.089075] ? io_submit_sqes+0x8610/0x8610 [ 2631.089604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2631.090192] ? wait_for_completion_io+0x270/0x270 [ 2631.090777] ? rcu_read_lock_any_held+0x75/0xa0 [ 2631.091340] ? vfs_write+0x354/0xb10 [ 2631.091794] ? fput_many+0x2f/0x1a0 [ 2631.092236] ? ksys_write+0x1a9/0x260 [ 2631.092715] ? __ia32_sys_read+0xb0/0xb0 [ 2631.093212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.093845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.094473] do_syscall_64+0x33/0x40 [ 2631.094924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.095544] RIP: 0033:0x7f61c5901b19 [ 2631.095995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.098233] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2631.099161] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2631.100024] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2631.100903] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.101768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.102625] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 11:23:53 executing program 6: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:23:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') fadvise64(r0, 0x9, 0x45d0, 0x5) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) recvmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000700)=""/139, 0x8b}], 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004866da70a42dfae73e140a2e050000000000000100000001000074", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x2002) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000a80)=@md0, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)='anon_inodefs\x00', 0x4, &(0x7f0000000b40)='net/snmp6\x00') r5 = getpid() r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() fcntl$setown(r6, 0x8, r7) fcntl$getown(r6, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000c00)={0x0, 0xffffffffffffffff, 0x4000000000000, 0x7f, 0x2, 0x80000000}) fcntl$setown(0xffffffffffffffff, 0x8, r5) fcntl$getown(r4, 0x9) readv(r4, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/125, 0x7d}, {&(0x7f00000009c0)=""/72, 0x48}], 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000b80)={@empty, 0xab, 0x1, 0x2, 0x1, 0x7, 0x8}, &(0x7f0000000bc0)=0x20) 11:23:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x1, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/prev\x00') clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r2, 0x40}], 0x1, &(0x7f00000002c0)={r3, r4+10000000}, &(0x7f0000000300)={[0x3]}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x7, 0x4) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:23:53 executing program 6: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:23:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) [ 2631.258491] FAULT_INJECTION: forcing a failure. [ 2631.258491] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.259989] CPU: 1 PID: 12154 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2631.260845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.261846] Call Trace: [ 2631.262175] dump_stack+0x107/0x167 [ 2631.262620] should_fail.cold+0x5/0xa [ 2631.263090] ? create_object.isra.0+0x3a/0xa20 [ 2631.263651] should_failslab+0x5/0x20 [ 2631.264116] kmem_cache_alloc+0x5b/0x310 [ 2631.264632] ? mark_held_locks+0x9e/0xe0 [ 2631.265136] create_object.isra.0+0x3a/0xa20 [ 2631.265673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2631.266295] kmem_cache_alloc_bulk+0x168/0x320 [ 2631.266859] io_submit_sqes+0x6fe6/0x8610 [ 2631.267384] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.267998] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2631.268612] ? find_held_lock+0x2c/0x110 [ 2631.269110] ? io_submit_sqes+0x8610/0x8610 [ 2631.269643] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2631.270232] ? wait_for_completion_io+0x270/0x270 [ 2631.270825] ? rcu_read_lock_any_held+0x75/0xa0 [ 2631.271391] ? vfs_write+0x354/0xb10 [ 2631.271843] ? fput_many+0x2f/0x1a0 [ 2631.272294] ? ksys_write+0x1a9/0x260 [ 2631.272769] ? __ia32_sys_read+0xb0/0xb0 [ 2631.273268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.273905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.274534] do_syscall_64+0x33/0x40 [ 2631.274991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2631.275615] RIP: 0033:0x7f2aef7e0b19 [ 2631.276071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.278331] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2631.279258] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2631.280124] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2631.281014] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.281883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.282750] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:24:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 11:24:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 11:24:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index, 0x1, 0x0, 0x3ff, 0x2, 0x1}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:06 executing program 6: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:24:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) fcntl$setown(r1, 0x8, 0xffffffffffffffff) 11:24:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r3, 0x8000000) r6 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000300)) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="ff0000002e2f66296c653100"]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)='.\x00', 0xa, 0x100, 0x12345, {0x0, r8}}, 0x4) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa44, 0x0, 0x0, 0x0, 0x1000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x4}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x4, 0x6, 0x9e, 0x0, 0x81, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x7002, 0x81, 0x4, 0x3, 0x2, 0x10001, 0x2, 0x0, 0x1, 0x0, 0x73c1}, 0x0, 0xd, r3, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) [ 2644.652895] FAULT_INJECTION: forcing a failure. [ 2644.652895] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.654334] CPU: 0 PID: 12179 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2644.655174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2644.656185] Call Trace: 11:24:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/158, 0x9e}], 0x4, 0xfffffffa, 0x200) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe2$9p(&(0x7f0000000200), 0x800) [ 2644.656516] dump_stack+0x107/0x167 [ 2644.656987] should_fail.cold+0x5/0xa [ 2644.661298] ? create_object.isra.0+0x3a/0xa20 [ 2644.661939] should_failslab+0x5/0x20 [ 2644.662476] kmem_cache_alloc+0x5b/0x310 [ 2644.663037] ? mark_held_locks+0x9e/0xe0 [ 2644.663605] create_object.isra.0+0x3a/0xa20 [ 2644.664215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2644.664814] FAULT_INJECTION: forcing a failure. [ 2644.664814] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.664927] kmem_cache_alloc_bulk+0x168/0x320 [ 2644.664947] io_submit_sqes+0x6fe6/0x8610 [ 2644.664979] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.667966] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.668557] ? find_held_lock+0x2c/0x110 [ 2644.669074] ? io_submit_sqes+0x8610/0x8610 [ 2644.669612] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2644.670201] ? wait_for_completion_io+0x270/0x270 [ 2644.670790] ? rcu_read_lock_any_held+0x75/0xa0 [ 2644.671358] ? vfs_write+0x354/0xb10 [ 2644.671812] ? fput_many+0x2f/0x1a0 [ 2644.672257] ? ksys_write+0x1a9/0x260 [ 2644.672730] ? __ia32_sys_read+0xb0/0xb0 [ 2644.673237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2644.673875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2644.674504] do_syscall_64+0x33/0x40 [ 2644.674959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2644.675580] RIP: 0033:0x7f2aef7e0b19 [ 2644.676036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.678287] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2644.679215] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2644.680082] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2644.680973] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.681838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2644.682704] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2644.683597] CPU: 1 PID: 12177 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2644.684367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2644.685262] Call Trace: [ 2644.685553] dump_stack+0x107/0x167 [ 2644.685991] should_fail.cold+0x5/0xa [ 2644.686456] ? create_object.isra.0+0x3a/0xa20 [ 2644.687013] should_failslab+0x5/0x20 [ 2644.687474] kmem_cache_alloc+0x5b/0x310 [ 2644.687967] ? mark_held_locks+0x9e/0xe0 [ 2644.688464] create_object.isra.0+0x3a/0xa20 [ 2644.689012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2644.689627] kmem_cache_alloc_bulk+0x168/0x320 [ 2644.690184] io_submit_sqes+0x6fe6/0x8610 [ 2644.690703] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.691302] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.691890] ? find_held_lock+0x2c/0x110 [ 2644.692384] ? io_submit_sqes+0x8610/0x8610 [ 2644.693019] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2644.694985] ? wait_for_completion_io+0x270/0x270 [ 2644.695577] ? rcu_read_lock_any_held+0x75/0xa0 [ 2644.696142] ? vfs_write+0x354/0xb10 [ 2644.696592] ? fput_many+0x2f/0x1a0 [ 2644.697052] ? ksys_write+0x1a9/0x260 [ 2644.697513] ? __ia32_sys_read+0xb0/0xb0 [ 2644.698007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2644.698640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2644.699264] do_syscall_64+0x33/0x40 [ 2644.699714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2644.700334] RIP: 0033:0x7f61c5901b19 [ 2644.700799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.703014] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2644.703933] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2644.704812] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2644.705670] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.706530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2644.707389] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 11:24:06 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 11:24:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r1, 0x0) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:07 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) dup2(0xffffffffffffffff, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e24, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="d8811ca7bee9864f4bb850e3bc19d011657b786065bc0076b301edf2a99c14669ad032af5ca9681bb89761ed440984f98009ef025b3fadc5418e4e3057ecfaf338704a11c0ede01bc36b26ba1dde773b0bc9ea9217ce42e350be22750269bb3e61f6ee5693ac2ce0cee6b731ab111c42081577117d", 0x75}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000340000000008000000000000140000000000000029000000080000000200000000000000"], 0x208}, 0x8000) 11:24:07 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:07 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) [ 2644.952877] FAULT_INJECTION: forcing a failure. [ 2644.952877] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.954327] CPU: 0 PID: 12207 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2644.955163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2644.956170] Call Trace: [ 2644.956500] dump_stack+0x107/0x167 [ 2644.956967] should_fail.cold+0x5/0xa [ 2644.957446] ? create_object.isra.0+0x3a/0xa20 [ 2644.958018] should_failslab+0x5/0x20 [ 2644.958494] kmem_cache_alloc+0x5b/0x310 [ 2644.958995] ? mark_held_locks+0x9e/0xe0 [ 2644.959506] create_object.isra.0+0x3a/0xa20 [ 2644.960053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2644.960690] kmem_cache_alloc_bulk+0x168/0x320 [ 2644.961282] io_submit_sqes+0x6fe6/0x8610 [ 2644.961818] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.962440] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2644.963052] ? find_held_lock+0x2c/0x110 [ 2644.963562] ? io_submit_sqes+0x8610/0x8610 [ 2644.964118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2644.968754] ? wait_for_completion_io+0x270/0x270 [ 2644.969362] ? rcu_read_lock_any_held+0x75/0xa0 [ 2644.971143] ? vfs_write+0x354/0xb10 [ 2644.971600] ? fput_many+0x2f/0x1a0 [ 2644.972047] ? ksys_write+0x1a9/0x260 [ 2644.972512] ? __ia32_sys_read+0xb0/0xb0 [ 2644.973038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2644.973683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2644.974317] do_syscall_64+0x33/0x40 [ 2644.974779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2644.975409] RIP: 0033:0x7f2aef7e0b19 [ 2644.975866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.978140] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2644.979064] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2644.979931] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2644.980815] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.981683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2644.982550] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:24:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 11:24:21 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) [ 2659.700664] FAULT_INJECTION: forcing a failure. [ 2659.700664] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.702160] CPU: 0 PID: 12211 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2659.703002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.704018] Call Trace: [ 2659.704350] dump_stack+0x107/0x167 [ 2659.704798] should_fail.cold+0x5/0xa [ 2659.705282] ? create_object.isra.0+0x3a/0xa20 [ 2659.705852] should_failslab+0x5/0x20 [ 2659.706319] kmem_cache_alloc+0x5b/0x310 [ 2659.706822] ? mark_held_locks+0x9e/0xe0 [ 2659.707321] create_object.isra.0+0x3a/0xa20 [ 2659.707860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.708484] kmem_cache_alloc_bulk+0x168/0x320 [ 2659.709064] io_submit_sqes+0x6fe6/0x8610 [ 2659.709611] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.710326] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.710916] ? find_held_lock+0x2c/0x110 [ 2659.711415] ? io_submit_sqes+0x8610/0x8610 [ 2659.711948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2659.712539] ? wait_for_completion_io+0x270/0x270 [ 2659.713127] ? rcu_read_lock_any_held+0x75/0xa0 [ 2659.717737] ? vfs_write+0x354/0xb10 [ 2659.718218] ? fput_many+0x2f/0x1a0 [ 2659.718671] ? ksys_write+0x1a9/0x260 [ 2659.719141] ? __ia32_sys_read+0xb0/0xb0 [ 2659.719637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2659.720271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.720896] do_syscall_64+0x33/0x40 [ 2659.721357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2659.721977] RIP: 0033:0x7f2aef7e0b19 [ 2659.722442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.724692] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2659.725621] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2659.726511] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2659.727372] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.728237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2659.729098] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2659.751997] FAULT_INJECTION: forcing a failure. [ 2659.751997] name failslab, interval 1, probability 0, space 0, times 0 11:24:21 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r3, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r3, 0x10000000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x90800, 0x174) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r3, 0x0, r7, 0x2, 0x0, 0x0, {0x0, r8}}, 0x200) 11:24:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) clock_gettime(0x0, &(0x7f00000001c0)) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xffffffff) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037}) [ 2659.753408] CPU: 0 PID: 12219 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2659.754253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.755270] Call Trace: [ 2659.755596] dump_stack+0x107/0x167 [ 2659.756041] should_fail.cold+0x5/0xa [ 2659.756506] ? create_object.isra.0+0x3a/0xa20 [ 2659.757064] should_failslab+0x5/0x20 [ 2659.757552] kmem_cache_alloc+0x5b/0x310 [ 2659.758045] ? mark_held_locks+0x9e/0xe0 [ 2659.758553] create_object.isra.0+0x3a/0xa20 [ 2659.759100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.759723] kmem_cache_alloc_bulk+0x168/0x320 [ 2659.760279] io_submit_sqes+0x6fe6/0x8610 [ 2659.760798] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.761420] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.762006] ? find_held_lock+0x2c/0x110 [ 2659.762500] ? io_submit_sqes+0x8610/0x8610 [ 2659.763042] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2659.763641] ? wait_for_completion_io+0x270/0x270 [ 2659.764226] ? rcu_read_lock_any_held+0x75/0xa0 [ 2659.764788] ? vfs_write+0x354/0xb10 [ 2659.765246] ? fput_many+0x2f/0x1a0 [ 2659.765689] ? ksys_write+0x1a9/0x260 [ 2659.766151] ? __ia32_sys_read+0xb0/0xb0 [ 2659.766645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2659.767279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.767904] do_syscall_64+0x33/0x40 [ 2659.768364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2659.768990] RIP: 0033:0x7f61c5901b19 [ 2659.769458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.771667] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2659.772609] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2659.773481] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2659.774341] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.775205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2659.776075] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003000)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x2555e618, @remote, 0x7fffffff}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000006c0)="610ead5d019e1f931103f464bc2eaa50e0813b80e442e5d020f6a6be059382be9e1f0c4744d093172ffb8f2214a2257c00b0b4984a478922843db8fa2df440e438fe053cfc3d46a57ea0f0040a69948ccb3a9e66b93eb146eb3fb9504cd93a5210539cafa5411ffe13a125cd4a831cf3c58e1603735e36c138c2f8edd2a2c7c352794c1eecaf75376fea43500943cdbd30e31700b70594450ecc905a770b7d8afce51cbd92482499b6bb7406676a5ed2826fcf0016953cc94f006051d2bf0ca9f74af2199ed4e96bf4294e667da54826e7f9d6c94ea8804464a18d41be9b5427200fabdf088d394290ee2f6d9c5a9c1ac02133fa11b6287a1d53a300c04c2649ab8575c8e2fbfc47913d1752dda65d0d59c9ead5e0480dd51847d87f34c8811fadcaa368a7bfe47c4f9668f5d690059614fd718621203a4f65a2f810081bc8983b1388df01b11f8eed9841199cdf7b84a02f5082416c298fb8ac76b9ac29678faec2db6942a9ea2471925cb68ccd0d9dde8818376ccaae1bf1bc57c54f7ae3ece7b4ef01b8d2a3502d3f9a93dfb7b78606fd07db89489883c60b1b5f4910d173c67b66dd7b0f7d41b12e9da28cad1af465df2e8b32454530d24c0c413bbf530d7873543891623848138e4f2d65d49cfbdf569b626410c1f61bfc07eac604921f1debc6f98262a0dc6bbe72d130849b66716a2f7cca6ce09660eef24c1fa9e3b58ea916bfde211edaf8675a344ead3d8b77e8266db33be639ffdc27d36eef86ffe504be059fce811f8f5b84a9bee14e4ff5b1a5453a03eed246c6038353fe73e1e8ae8a235703af60119226ce2e952fa64b438a53ec8de859155ca4c7667f80dc924e8d512161ff3b92ad1032e857794811e942c0ac28790a1b185161490f8bacbcebd05d07ffe2dd1780de6b6874f7e39c9c4c3a4942f4288ee63ac887209bef850b390318cfed1623b60f26c9de9c9cad65e21f1c2d5569806a7fe97cc6002b47028ed4cd514459d1f71a56c558b3199b8e77c797c823710b0b7b22d02d97ee742b748812d94831e15e4c112d94c2c30334ec7dfe17a7aea8fb18e9ddae0f974c8d27c1c5ee069651d5f55ab77e7b65245da92d541bea6edb58b92cf45a5634d66a01c4419ca7da624e42a479b7156df8bccd0dae2013e5c01c9d434512086f5ea191aed274457fc07533a0ddf01834021ca89cd9807dccb3b493e61b55dfdb2cc10c6d4fe8d579962dae826ec48cd9a67d236d992e3618836b2d45fb69772612b551ea7f90a5c8a0840e27f14ea5a0a92e71f17d424e48800f91e786310c33f6257b4dec68d0e2c0d0ffd7a702a43b1ed58d7a70425fa6c29970bc4f306e4a5f89cf25c80651c7fcdd200cb78a63deb36039fa9e7b6d361529bd6ad1a8449bcd8b9030993a1851b0a69f5bd987b39deb7b07fed0aa5d0e3cfdbe9621ff07893e6912678d7c5858dd459ea497f8a275767a1959070b1ed8e35e1631190b8bf4d979963b908d64fdfc2b861f019056358b71cd66d50393c2d66a3809a90bd63259bfb5506f4efc7ea433eecec7e07979d98e1e5b1bb30aa66eb3c25349c0a5a6dd19dc87bdf85b76340ee9e29458e056c3522ebfa93621d456bd011d71f4c371de6483c33b1a4ec6730715eb2649b86cd8b8fa8ced6e62eb8fa4076226642f8e4f3451c9f42ca25fdaa6dec07db6d75876817867dbd4c1e63e6597665628df368aab26afdc707df253d3cc5813c9787f34a2497b4d41106ddf4d3e691c433620ca84bd41f9815884b6f49425dec88be1371ac5d9728e62a737eb6e267b747638a9247f1fcdbdc080c54b238775bd9cb5ef21882e94e3e6d9c25d2e1a6a9723ea77054ee6ab4c64f0d0feb5db89cd24268351412d03b3fe6f09784d564c987ecb6100fadf401d347421237c669d6bcfd967453db46816fda57abc1ccb7cd777c507004fe34921495c7b630d79d1c526ca04874631a2a86636cfee3bdd3ceb8db6c1c416705c5010842299627ad58662bc2dac7131e34f000ee2114b5afe2fb9170e6966cc0033ed2360c345e5523e9931aaf7d02b4972f955146e8dfa155c91031a83eec750b04e5813ece8062ae20286b4ad19c0dd1288005d8119c8c28bef8b34868dc90bf30ab1f1ee752fb8c1e3e04f3b753a8348c9d89448db1b56ebfb8206b368b2424370237737c2162920b0950e379ff0622d63831a350873b7e308fb3ebe465134e6aae2b6e369e5a4ce76d74bb1ffed6218827a198d698684ce68f1b11381da681c05af15a8d326dd00366a4668feca899d2c7071dfba9d66a4f40e4279adca31c06fdbea1861b4c31f4cee40215a57ee67fa2dba929427845dba00439ac3d6be07a66362560d3c6d932119288e2aec73ef13e7ef5ba20b86abb9bb7be3fde080e0cda441d1df123a77a992a52cc5817f0ada5bd622178ea6f8e5774a877f8e23a5e92d63fd502152f6b25455484297fe7185a416140a59faee54e1ea377154db2cd9fc08726c3f117bf7c7432f127b376dde9a55f8509b94e74f3214a0056a6626a7a47f730858d12e4472037e1b43860429ae890f9e183f09563a4134e67b60df1fb757e78e1c3c30633c9e8839949345538a30f44d8528daef405b08f3f96fba9d386faeb3484f10afa00b77edf369cbc33d9a84cf4f9b5438df8fc688cc874a1df1bc95672f5a0259e42fcba841ad179931381932cc4ce70ac4f38f0705a35358ca2c6f6d1ef4a9833d5184c8c68abd76afdbb0ad5ad4eb5e8219236d6b09a863340b6bc23f7755852001b99765f77e8547615e9c5ceab23db093f5100ea2c96755bee49ce954cdc2e9fe91b821368adbb91c9eda8d0ce0ad74196cb99ee80ff6a83d788edfe05caa828e5c6855a4db3bbc0d53cd6b6ecb920531a9fc12ae24903f5d9adea2da2d19fa2ae5cb4fdc607bbc120c6d1db463325ef5f2466bf4d45c3c9b7115c9fb418f0ae85af5c48ee9e07c3870af50a72cbb98c22b5145879ef64478a52405470cbb3e7cd1437741389332804ac90a334b92b553742a2f36daee3b745c9af86f4be946162eb6eaf9ebcd3827c5091f1363fe98a2751ddc2758f95015a1ffd69bc3be5576f37d691e25ce725895f6f2ec5d9a3550d35f30e3906c8c58afd68b5a0a56a5eb18edf6083619d514c50928e46c64c899ae83c8256659705fc213607b36a07dd2ee4cff769df721e8530b21460ece0684c1677628ddee3e0f2adb48202ef9d60244592c8efbf6e604df84148b991825658b3ce93571807c8dec6607e2175d3832f62b7c1d897f67627429849bbfa46481a973eff4c58edfba632ec01367b788a7388a45dd79787351a6cb0fb75023794259afd0f067e6e9efa5afc1cb9ef3fec7d5a688b265384c3dc941b9ed973fcfdf823baa9de9dc12a589a39b3978bd96346fb7b0346088784a1375d901c6852a7bfdaa17ca18a3251fb5e1454f76a09c20dc09b0217be32945622728b18a04195e69ecec24bc5d3d200cdd45029bfea6ad3ec7c9fba7cd061027fe72df93e9e56b73e475402627d66a7bf5642b3e50939441ef31dfbf98918a928f5f4786fb940ddaf3ef53cf672391567200caca4c208b4c88f2349f8cc9eebc84af347fb013f96faf62d5f1300252c61ffb6a10ba19dffdf03367bbb9e1db2a4850ba20c8f12e4205cd4584df3e4bfe5d7e515da9a3f539cbaa7ad07eaa7e95f03aa0c0dbd1f560d77254d322b6ebdf85ac6c61d2b1d5aaae53ac2b23f43cbd101e8c5ea425a8c3e755ad43a596e71b6c1ce7069169b4abd1170a18a6ef1f13a658fe6bd7b3887bdaac85919c24ea5fdc701b91d16d8471c13901ab95db95ce0588710a0e63c87121904e18c05ccf69676e346cc980eba1e02e24b8eede88e91611909551521ad76dfea3eae24262ab1f6ebdc9d90014225ede610e5e4e9b739a08c729d6f209b11e178ad90fad3289692a2205dc71878a4412142141c0b887485e5e65009df3eb7c6c82a02be579c548deb98a249b2be666b799eec644c75bef0467ced953c763c6169ac02c19a4ee8ac4875b9d9adf7a417c6b3da6c7925720a48d20642d655db0f387680e8ed459dd11699a97de164e8d656e4aba26966ff411468587383c1294e4c52ca8b1e1a2c5f336e997d61cd33f05de2dab070b11a007db8c6a1312289bc5dd98f860524dd3bac0b6f37eeb13c0b726fe04edcab66f94c03e0b13c73442b1a0e7948580458fd1276509d6386ffad3f68764fe2510235405733ca903264c7d1701cb94672c844f894e2b86c1d288a15e2c622d55d885213443f355fdbe3929f704347d047cb9e97f67c6f6ce136240936d02540f5ab11bb5271f3bdb737668ce725e61cc95cd4afa5c0baddbbab5771350a63c0c78372771a36f900f105ca6ddc0c431bfbdbf1a42b7626d95b794a6d63251b6ab334ed24b82efaa75d36a944bd260371d0457eb6ed940f07aee4fe4931432fc4b5909119019ad904dc5b162569e4d0cecb66b5f22009e66352d46fba07e0e84db2af37f13ffdbc51922a18589bd6cf606688ff265852f604dded215955b4377f54388747b9c88e8dfc385148b48b4efcd5062dcf693efe1be7687eeddc4dbd04291641b2fcc8bb29920c4a7179b1d4b19912c0a5b97ddf154d43e5796bdf1eaa70e8583bb6002b4019b7e0d32fa514d8d3248a0b306b178c6bff73ad48ce0ca4b0a042bf48ecb8f68f0a3b05853c9d2be76c8e6887fa80bddbba29b21bd51e74ae2a75ee04cae268549b85861f69209e72ce6f5f04ba483b26eeebdb53b0f5fa55ac6864319aa6b1fb4ce1f7fe6df843f155e71d828f47635b9e57fb58c9219bf6562b6506e7633dcf65ad285bef9abc19338c39bb4b5d876b37d4a511de21468dbbad22dfb5466c9fc44e0bbcc98b27365ee7adab09aba405a9e0cc33084fe4e260d1d12cab395bdfed15a7da4ea18d1d254f10f127a9e366d28f35f456e4b5fc261a8617ecb2cf3525a4c1b8575bc7307849a05c7a3a785d925a3d5c2a3285cba990896c6aaf019ef991bef8e1e44377bc8453aaedfeec8c253a40b37e81b03fcc709dfbe1978ac097098226812600fdbdb2c91fe6403fe62c39a38bd51efe3e1cbce5ac428ab312939b99dec51b913cf3230ad0cd26ff90dea1684c423e8e16c4d1b38e4a1a242ec97e6c1e9b914db5f4446ee0a0f797e81f5618c823aefdef1301398f863cfeaac21b4f114ed5faf8cb05d125c1b52ed916e6e222bfb0524f9bbaa660b44c5e9d35a5b0a154fa2d227f6fd8a8f69ea1d5ea21a130d8343e6c1383afdc95b0f8daaefeadf2367a202a5117bf652ba2d830de2656fafa03571dae3e50abca2c763e7d07f91ac525b01ca2184a900e5015a394dfbcb2a0951e667869799e08cbcc9275faf6141b9a991ecacfe8ec626f8ceec042f7733061387bfef44e1c297bfb14dd6deedc026b56c65d9bd9ccf9fd7ee34f74e5dfd3954f274f70bf81cb0fe24c20adb3655086b8010ec266537b67c7f6f80cf778ed6f9c79853ed91afc1d40b771b1d11d611b11a2a0d0021ea5d686139276b72a2b4051ee08b38d4ba99786922314eb55654f966a7d7b8924003408b8c47427242fc384256eb90a9c083a19ba6e9d065b535e3310beeacf50b8ff733d79010971a75f5fc98ae3a1635fb889eec7e2200f291c25944331062f24091c87329a576723c2707655b62e96d869724dee06824685b62c8a99d7f99c095197be032219c74c1ba37bb9c4f7ffd66affd9e1a09c863dc7cb6d5e26148339bcd17683322dfe64007d09e09bfc8415be4", 0x1000}, {&(0x7f00000002c0)="82d3614bd7e6dcb1fe565c60ce2cd94136245b0b8577ce0e3b3b68fb922a498013d3d3baad5b760efcd29bc436d84966e09ed97e65251a1883ed1028d06c198b705e95d20e7490", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="5e1c2654f9f115aee133ecbf3b620971d2d249d48403c3e0fa0d1c3739bd98da2dbc6a0b064537db3176327dbaec3469c446e52ec4fc10087486989d7b307caf86bd6e95899d17507f26279097add1e3cbbe52fa502e515440de9d4426ae7909944e0aa43be270b48957cb08c5c22b3de9281bba64d1ebb3b8c36ebe05bf7428924c03931f6e7f5b8453048ade857eecd63b3d37ec16", 0x96}, {&(0x7f0000000480)="b927dee9e7840da0b92d164ba7c33eee10e02aa442297806521346478843ade119ff11836fdff2d905b6327496", 0x2d}, {&(0x7f00000004c0)="c1bcbbf824c3b6fd59d3e277b60c509952b73c206956cc77454c3ddd24a014e20da8dd5f588e5d38f9c72158830f51d218a7491309f6bc714902a364a95ace64d4c04f33314fd66d3d09e77baf5e7b879fd0bc5e13513e69202f470ed9f538d7060539e838e15be509f3bf1372c647c858dc6a33376ba4ea93be7405bdc3a85b6218475e4f3cf3caa4ce45a73ab8415d804811ee000f0b0b3630f4ae554d32e079b357de9e189b3be20361f93548188c41ea0c0b064db8852c9b5eb69d13429f496c2f41a75b1a1262b1", 0xca}, {&(0x7f00000005c0)="a08b", 0x2}, {&(0x7f00000016c0)="0f19d5b9567de6d357ace1122c9067cf5cda7186708cc2ba20a80e000771ff72d26b350a9ca2abc985836f90a80944036d971a93bdd241291f8ed75f664e495b7c50129fa4e81ef647", 0x49}, {&(0x7f0000001740)="c8ede8d2b5a2cf67f4e7810daf1a5ada76f74355dc782c6ff6915bd9ad626053ae5a92e1e9a5f7ff9704f31c64ef3b8f377f632a1caf015e2918a36265f201272d89c3db39b8f13d9bbf7df40202bc346b46d4d8a1fe1e112bc1c5a7cd3e7998e0604b45ed9203a384305af2544714325487e8fe8ae6e7e69b10f1f9c836bce89a754a3f8474f771e1dd550bb5f77236473ffcb1ed1576794658a5ed0aa631107a8ebebfa5f8406f11ff6a5b5f5ac6a588c937e6e85fbd56e1d781f83a56e05220b271c1e1bdebb98414cfe02386fd36530b2dacf50b537a1bbe9667f50219c2895f3d0738949672f4c5bd662d57", 0xee}, {&(0x7f0000001840)="6c7802092d0c432509d5d5498e0e33e3b952d43a02cffe75e02555e25d37141b8114c7bb9d27dd08ae14985956de98c986d76df91fa1a47649a4a22035a50d35c85aa3655884e9d8", 0x48}, {&(0x7f0000000600)="91faabed5af83b1e234073b85b82eb86da1bff51c08041fffba20ebeb5e00bbbd126a2d116", 0x25}], 0x8}}, {{&(0x7f0000001940)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x36}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001980)="bb35be53d919d8747895376f3a46069e97c536db010d9c1a8fecaa0e4d45369925f7d15e4f4c65017c6d79d8d26a28f2dd64", 0x32}], 0x1, &(0x7f0000001a00)}}, {{&(0x7f0000001a40)={0xa, 0x4e23, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001a80)="fa83afe1ccf6c5bb45c48f79d32f16cdbf848b9324efb6fdc1f8602b4a324fcb494a133ee24ff821601c1ccb6ab1c291d8a744b088265588bb8e9e4b2e997e130261ee10bc257c5cb37d01c47064a4835071a12d249769ca6835406756e50ac9f9a9d92e2a3e4621122a2590c54e1779cbc83b80eb42bc19c6dab46959113ba354b86f35e018a07978332a0c0ac73ea952f6a2cb0a03a536eebad62b0119c859", 0xa0}, {&(0x7f0000001b40)="6569830da5fd354960a4fc25fcdbf13a51f520c408ea96ed928ed862fa5363e734195fd6f73b7ecb769f", 0x2a}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x178}}, {{&(0x7f0000001d40)={0xa, 0x4e20, 0x4dc7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001d80)="ea7110dbeaf3e69293cde4de017e17bddd2eafe1b7e18aa8abbe68b44917d290d36bba95c0ed480c0a14982b357dcba73908990c42ddde955272de5b78bcf8a2b326efa49d206bf5a14eef467384c5ebd08ffc7f10cb50d72f11912f55bad9a0e45d3d17f99389828c7aac8d93e47020be993f6420a40bec4575a09237c0857e6e199a07218d5b965b1a50cef0659e7764b1b1ac42d11f01c6c5a8", 0x9b}], 0x1, &(0x7f0000001e80)=[@rthdrdstopts={{0x78, 0x29, 0x37, {0x21, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xfff}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x7}, @jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x6, 0x7, [0x4, 0x68, 0x1, 0x401, 0x8da, 0x4, 0x4]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x759}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x84, 0x2, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0xc, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @generic={0x8, 0x9b, "7ecf09b36690b1ae64685d59e439b083f0734c904fbd301e68532e08485dc8c7dee917d975386e139a7bc89f3a49cfc56a2b1899a4a9c37acdcc01f29f2410dbefbce60b2db928e39825c4474d87367cd6391e140dfcbc2598877cdfbf6e18533ec28be76cf01bfe060cfae5a60a25b20f3f68b89dfdee8346d01ac63696d8e04106e3f7b6140f77276ada48dd1765cb871197330f55891f5d0161"}, @enc_lim={0x4, 0x1, 0x3f}]}}}], 0x1b8}}, {{&(0x7f0000002040)={0xa, 0x4e22, 0x7, @loopback, 0xfffffffe}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002080)="db597aa38e9f863e81ae9077cc9fb703fb0ffc64978bcf2a12f46d63bc44c6e9b2ea1d631db4fe1123fbcc1e703901867258fa6645653cb6dc83e662f57f31e79857330a808e5c775fd39c6d28985f28d07d36ee7d400389fa819ca91955addca0c7f222d23529e24797711f2e30ab15a38680e4ef79d389e9502261f92d0e9583194b4edc270847498661a5047678bf5a536e28ae7f8f52c5c279162ba430d9e079bdb3487e7327ae193f9a032ddaefbe1be7d54ce175b2d7118e3b69fcae49d4ec7ea977fb0ff7b41d", 0xca}, {&(0x7f0000002180)="1d002b5865ec92bae1eb4034ce0da200aaf654f46baa4a3ba8cf317373762e2b4947d7df8a4d90ebbb939ee256ab63f059ff9d79443b6953892b938c18948fd588cf0873751d8bde46009a1c9b9ea0263338869794589d5bad96202bf2d0da12ed814c3d4331fa2453b6f6f9a755af035be4be1298af8314cad9c9a437788e85991137f12d5108e6ad5e4f398f8e876060f3cf5d6e2af6b2c78545af3fd3f30128431859c39ae7e6159aa480e97711a0ccd165f692278b34317394f235aad7ca808363957d770c5cc945dbcfee78b75d53761561", 0xd4}, {&(0x7f0000002280)="f8b732f6e27771dd7e88fd141291fdae27940fc2e5df37a7ed3235224d86e3c5be64bbeaea452429b7319be993a3b1e8d58f94b4a17797db87d50f9f506841db4fa0ed18f95db1a5c7c5f244db2ae881835abddd2e30990eb5a7290645f8de8b5376a3008ffd54b270ea3fa5a79ff64ba8bc41c9907b9cda60ef4e059f4b565e92c13eb6ae2b13c50a017b169efd60e0aef2e0a576b5112edb742d79620ea96e1faa9a0580cf3c185386845a08154dc14bf6a4451b62edff97c864ec906bd1dfa76dece0fec9065b261763efde59d3c28282f2983a1ca38f38c812f6027626b89be427bd9f4d07e74ba25344bd", 0xed}, {&(0x7f0000002380)="f170e75018d9989f56fb671cbac987f89ab841a5af6c5ca04fbd7b479398d86c2dfc412d777f218a332c659edb05b3cfe35077575a56fe66d89847d9a8cd6ad33e92eda53b0da61e57c6c71f02dff28e10ddd7dd3a021c9c51ff9569f3bf91ef5bdef2b3da7373dd49f79fd2", 0x6c}, {&(0x7f0000002400)="30fff6826cf66dca9d3c9097e7222dcd2a6cc9297a121e39bdae1f34139225496e46b7b4f5e69f3571f8601ba76b8bde10407d027284bcce147000556f8249479b897e245419ede33c78224b0d03b09f9429b2487c5b2b332c715323fd9f447fa14a7789315db0f1c38767d1d762aef6b025a707087b9c692d8e5f9efb8437f72e6f19a21e8a0af7b67dba14503934714b0b52db2065f4fc0b43306065dd6c750d36ca398c8791671d39683358490cd16ea6f9087a343ef3bc00438dd9b6bd8e8b34b241f16d4b7222b37745bf6276ed9ae47ef4f740d1689f33a9fd3e6c", 0xde}, {&(0x7f0000002500)="04b226dfdae6e5719fda295c9c7aeb4e5856b9a6ccb2ba7aefc815f753e3ac89a68ed4d52a4b51f266470cb263ba4705c40eb9674b2d15b7cf72b2e46d06f28c8f28b414bf3647f0ef4a08c7b7430e1efeda6b556d7e7abc4707006c0fac672db02e95fcd0366195da6244319a6acacbf6475b5384b3fc99e4a1299105e13bf20bccb3d87aafdea417b0f9cb9d968f275d8b401aacfa8b52b3d66d7023b8", 0x9e}, {&(0x7f00000025c0)="635eb5338f61742e0a753df8e417a62150be18d39c39d22aab33775ee3a290f5a6575befa10d5091c88b697b2a2ec004db0f55ef7590fee69e55c3c31beb79db92d906443b991ad463336c338980100d264b7b0e10dbaaebc66d4736882f887e0b3b944548b9b34286eebb30663c490feb02", 0x72}, {&(0x7f0000002640)="863c6d06f7e4262473860799fb681229530a376b10a88f2b50da85e8bc4c544bd6851fcbe6e8b817892a563b6614bd4a94ed50164b5bb2d7da311e7ccdef2166559eb6b6690ba6a9d21ffcd5b8a658891bccbcdc71f42ba09bc30ca3e170704413ab8d793502ca799acac278b352c14e503829", 0x73}], 0x8, &(0x7f0000002740)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}, {{&(0x7f0000002780)={0xa, 0x4e21, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000027c0)="1cf4d8617b52c5a33038ac78e8c88a30502ca01eb9016d5d4177d3b03656f39aa11e93140d620a5fa05f97480eb103bcce360c1fa2ad157405261c50ab754d81a829c8198b7dc64bf926d29b2cc7107afe126e609d545037d89ea9b1214e97c07f992d21c0872d3810f668aee5c477be2bc20b27080edbb876966c0a76", 0x7d}, {&(0x7f0000002840)="a8482cb9abd107a36ac800d32d09e3771606ab424e3e95b246cfd1c20ac6bff5b9c788f990defc403a05800edf9f67bfea697695f37389f9be07624aeb9f5fd6cb26f24c99d369fcac490779b0b192d164ed6be11b5428ed1adcbb4ea85def6fee40df669589ec260baa936136202a4d8b2add7e4207c85129a0dd94858750ae5681f1f76c3416e96c1d1440ad66", 0x8e}, {&(0x7f0000002900)="4058da8bc68ea9a218222f09f9c393a0a7f9099e431646de694e9c035a76c631c2940af79e994b9d56ad113583f388d9cf801549a6b983575c90b38ca9d3d37511b76a42ecd219b649d24020e9dd3ca6f467b873ce6dd9a294d736ca001b4e50b20b9a4efeb917", 0x67}, {&(0x7f0000002980)="5558716e6b8bff94fffea1f52e6810e5a9d096227d6a473c43919ddadb3b7883b43a9484314f8b5e0fc38e656fe69028b0c79e484bc4d59013b69fe331685926dfbfb192f2ab02c6bda93ddde93d523cb2de35b4865908b40b61c99f7815226537e0913cfcdd26b5aac541648b386cf17e40e02afc3976884178e265edfbd30597ef8fa061e52419d98dd0416ff07baa180c9895d872d095bf", 0x99}, {&(0x7f0000002a40)="94301a5a3d7103aa1a9e97b36dd6ca2e2dd107cf9690e288a958a83b6c23a3032b4d90fd08df270d6501bc334e48a15062c9d532e6e746724ac184fe2fd09a6c7d382cef73ee7e26f0c74d7232bd088f035163c2bb09ab192d69461320bae02caf5075440e8cbe9bbd6ce4c618fc585e5a775b27a7075b2d3da1981e36ac1415fb558461901f1d18caa73360c8c058e9d3010e14af7b4b0f8243beebfb6413c53e0e904249ff5e5fc8e5f2f7519be4d7f427d1070ba33670beb5b72acfcb85f5537faa5db259e7c45cce85c260dc", 0xce}, {&(0x7f0000002b40)="4116f59241c309520288", 0xa}], 0x6, &(0x7f0000002c00)=[@dstopts_2292={{0x110, 0x29, 0x4, {0x2c, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x1f}, @pad1, @generic={0x1, 0xe2, "e436564e8bcb5bb90d4d17caff7752c595b76b6f60ff651c2f93ee897bde37940bee04d50e080978cfc1feb748098d5577f3805176e9370ed0f510c90ed5e1f134280975998fde3b755610f27a03a66ab86d38f5c8cbb37b6a63e784d99b4d6d9cd9ba008d302028fef84cb2311b7492cbb4cc3fbad56250b264d1260a189f1248680384cc7f01eebeb696a4fcb0246c5c2bfae3070c22ad68dc66976c58e638ed39f3f08ddb5e9ea2b59371a01dd44f35995988b577aa765fc9d2ed68d2e6c70d4a1aadaf7af08c454f55fc9bd3c126607c11a2fbbd49b62870c1b45d6464542d49"}, @ra, @pad1]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x20}, @ra, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1]}}}, @hopopts={{0x118, 0x29, 0x36, {0x87, 0x1f, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x4, [0x3, 0xff, 0x4, 0x1ff]}}, @jumbo={0xc2, 0x4, 0x100}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x40, 0xff, [0x80]}}, @generic={0x9, 0xad, "bf775103116898617200f8317cb5f3f68bdea083d59e24e48dfec826798339ea0a23ad3c76976211cf735568fc739a16a7f16f76688589b250365f07f96dd1e30b54a39d45a58b0b517e0349e4d0994759266c5fe3b8da4e905bab4496c303df8f58e0b387f1fb8bcb313ff6813dde17f453cbe5d71a944109899eadaf73f7fa682ebbaa4e4494db80633c86bc09e2c5f4744a61460c6204d489ade68b45b69774467b36483818c95cfc3f588c"}, @pad1, @ra={0x5, 0x2, 0x16b7}, @pad1]}}}, @dstopts={{0xe8, 0x29, 0x37, {0x67, 0x19, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0xfe, 0x1f, [0x0, 0x1d]}}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x2, 0x9e, "c39d9905d0e5f9e4f650952d02424d5d8b99fbd6fbf140c5bfaf38125436b677b605df1096f735bb4376e3c06411cdb59005ee82ad5bec870279e27592dda89db44ffd806f82108e61fda4feb360ce71e1c4841e77d2548c4bd0fbe410f863c428a6475282fc133c9b788d996611580676b4658722801d07e433e16ced14d8034c89a75d76b13795ab44251f6d5c544b3d300265009adcf05f5d5650b257"}, @jumbo={0xc2, 0x4, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0xdec}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x67, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}]}}}], 0x3e8}}], 0x7, 0xc010) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffe, @loopback}, 0x1c) 11:24:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @remote, 0x2}, 0x1c) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 11:24:21 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b900da00", @ANYRES16=r4, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000060f00)={{0x0, 0x1, 0xe3a, 0x10001, 0x80000001, 0x1, 0x9, 0xfff, 0xf65, 0x4, 0x1, 0x40, 0x80000000, 0x100, 0x800}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000061f00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "e529864c81e5be"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000062f00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063f00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {r8, r9}], 0x20, "69e3aa316990a3"}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r4, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14d}], @NL80211_ATTR_MAC={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x4000080) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000140)={[{@utf8}, {@shortname_lower}]}) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) capset(0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0xa6, 0x0, 0xc4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) 11:24:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 11:24:21 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 2659.891226] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 11:24:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') r1 = io_uring_setup(0xd91, &(0x7f0000000140)={0x0, 0x4088, 0x10, 0x1, 0x12b, 0x0, r0}) fallocate(r1, 0x42, 0x5, 0x6) fcntl$addseals(r0, 0x409, 0x5) pread64(r0, &(0x7f0000000000)=""/182, 0xb6, 0x9) 11:24:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x50, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_setup(0x5017, &(0x7f0000000240)={0x0, 0x3159, 0x0, 0x2, 0x3b5, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r6 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="ff0000002e2f66296c653100"]) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r7, &(0x7f00000002c0)={0x1}, r0}, 0x81) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2659.935304] FAT-fs (loop5): Directory bread(block 64) failed [ 2659.936195] FAT-fs (loop5): Directory bread(block 65) failed [ 2659.936904] FAT-fs (loop5): Directory bread(block 66) failed 11:24:22 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 11:24:22 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2659.946105] FAT-fs (loop5): Directory bread(block 67) failed [ 2659.946857] FAT-fs (loop5): Directory bread(block 68) failed [ 2659.961289] FAT-fs (loop5): Directory bread(block 69) failed [ 2659.962019] FAT-fs (loop5): Directory bread(block 70) failed [ 2659.962972] FAT-fs (loop5): Directory bread(block 71) failed [ 2659.963784] FAT-fs (loop5): Directory bread(block 72) failed [ 2659.967577] FAT-fs (loop5): Directory bread(block 73) failed [ 2659.991019] FAULT_INJECTION: forcing a failure. [ 2659.991019] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.992524] CPU: 1 PID: 12246 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2659.993390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.994422] Call Trace: [ 2659.994751] dump_stack+0x107/0x167 [ 2659.995248] should_fail.cold+0x5/0xa [ 2659.995785] ? create_object.isra.0+0x3a/0xa20 [ 2659.996348] should_failslab+0x5/0x20 [ 2659.996814] kmem_cache_alloc+0x5b/0x310 [ 2659.997390] create_object.isra.0+0x3a/0xa20 [ 2659.997939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.998563] kmem_cache_alloc_bulk+0x168/0x320 [ 2659.999128] io_submit_sqes+0x6fe6/0x8610 [ 2659.999652] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2660.000257] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2660.000851] ? find_held_lock+0x2c/0x110 [ 2660.001469] ? io_submit_sqes+0x8610/0x8610 [ 2660.002074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2660.002666] ? wait_for_completion_io+0x270/0x270 [ 2660.003257] ? rcu_read_lock_any_held+0x75/0xa0 [ 2660.003823] ? vfs_write+0x354/0xb10 [ 2660.004275] ? fput_many+0x2f/0x1a0 [ 2660.004720] ? ksys_write+0x1a9/0x260 [ 2660.005198] ? __ia32_sys_read+0xb0/0xb0 [ 2660.005739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.006379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.007076] do_syscall_64+0x33/0x40 [ 2660.007559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.008185] RIP: 0033:0x7f2aef7e0b19 [ 2660.008642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.011021] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2660.011953] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2660.012833] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2660.013803] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2660.014720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2660.015613] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:24:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 11:24:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 11:24:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:35 executing program 2: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="3b2f5e93b943def1330daec8dd0598dd28ae7ae9baa10a3e7283b40ec692c83a120d242e026c682726ace5548180e374aff63510f63e44b8b065a9f80a5427aabc268be58f1424cfd9fb1bfe46622b5b366914a5a46d68085737feaaaa5184eb617d834b88fed2966e6ce70a8d73f5230d774b510d6e923ae49bd45c03", 0x7d, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$link(0x8, r1, 0xfffffffffffffff8) 11:24:35 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x2, {}, 0x5, 0x4, 0x1, {0x0, r6, r0}}, 0x3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000240)=0xfffffffb, 0x4) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) clock_gettime(0x5, &(0x7f00000001c0)) fcntl$getown(r2, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x4010, r1, 0x10000000) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:35 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) [ 2673.376427] FAULT_INJECTION: forcing a failure. [ 2673.376427] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.377877] CPU: 0 PID: 12268 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2673.378716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.379732] Call Trace: [ 2673.380063] dump_stack+0x107/0x167 [ 2673.380511] should_fail.cold+0x5/0xa [ 2673.380982] ? create_object.isra.0+0x3a/0xa20 [ 2673.381545] should_failslab+0x5/0x20 [ 2673.382024] kmem_cache_alloc+0x5b/0x310 [ 2673.382524] ? mark_held_locks+0x9e/0xe0 [ 2673.383022] create_object.isra.0+0x3a/0xa20 [ 2673.383562] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2673.384184] kmem_cache_alloc_bulk+0x168/0x320 [ 2673.384748] io_submit_sqes+0x6fe6/0x8610 [ 2673.385271] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.385894] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.386491] ? find_held_lock+0x2c/0x110 [ 2673.386989] ? io_submit_sqes+0x8610/0x8610 [ 2673.387526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2673.388121] ? wait_for_completion_io+0x270/0x270 [ 2673.388713] ? rcu_read_lock_any_held+0x75/0xa0 [ 2673.389285] ? vfs_write+0x354/0xb10 [ 2673.389754] ? fput_many+0x2f/0x1a0 [ 2673.390200] ? ksys_write+0x1a9/0x260 [ 2673.390666] ? __ia32_sys_read+0xb0/0xb0 [ 2673.391165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.391807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.392440] do_syscall_64+0x33/0x40 [ 2673.392895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.393528] RIP: 0033:0x7f2aef7e0b19 [ 2673.393998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.396245] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2673.397176] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2673.398065] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2673.398940] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.399813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.400685] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:24:35 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:24:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d756e69782c726f6f74636f6e746567743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c66736f020069633d3078303030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e23, 0x9dc, 0x4e24, 0x2, 0x2, 0x80, 0x20, 0x5c, 0x0, r2}, {0x1, 0x6, 0x78, 0x0, 0x0, 0x2, 0x847, 0x4}, {0x80000000, 0x3f11, 0x4, 0x101}, 0x9, 0x0, 0x1, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d4, 0xff}, 0xa, @in=@empty, 0x3503, 0x4, 0x2, 0x1, 0xffffd19e, 0x8000, 0x1ff}}, 0xe8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) syz_io_uring_setup(0x209e, &(0x7f0000000240)={0x0, 0x2222, 0x8, 0x1, 0x1b6, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc, 0x9, &(0x7f0000001b80)=[{&(0x7f0000000240)="cefb3bc83cf80238aaf948b05431d8ee5704a98226e97ff3b22be1fb4d7e3034916d4239c5666dbea3866290efdfec1eb19dccd8a62156dffd88f26a704bb1ca75622af84ad6d8b9d5fe1211a83bed47b3a3814397741db6678656fe242e8edc56b8fe2f3629a26b58455c7f0924cac30307c076ff2c12b6e2b0d8cc520426cb44878c7bcc15be19889d53ecf41b0c1a9965f43d80d8e652838c7f2e276bbaed6b93d9ea4734d7554ca1f135417fc08eb50af24bb5d1c3919d5fc538766942d12fd651757543a634af0cfba1", 0xcc, 0x4}, {&(0x7f0000000340)="e7b17a936ad8cd58d7de989368234151036cf3a2aef744a002bd5091808103b4ed78cbfacebbb37d2074adae14ee74fd54", 0x31, 0x100000000}, {&(0x7f0000000380)="0a1e37ce3615fef164b88fb71b229d13a9fcb962f2a90aaad3c95545d2df89ad494f8a842f6f585887dd3758ab1b18eeaebd329d39f4363d937d6d8081439569300f78c2abde238905c2e2cabe19128d3ffa3a848d39187aedd7bedff9334c2d59d17fcc96b15e087193", 0x6a, 0x1}, {&(0x7f00000008c0)="60de8563797de5ce7c64880311dcba1b8a0d01c18b831c9256daf2940b7581923c996a0e79dfb8e245eaa82fdc7cf65b2a1f6ccabfe6165d2fd10f2c4839ecdbff3957f439f92c5e1c8f3fd0a187200398b0b1aed4e9e2dd572ddaed5a2266041b7af125adffc4cc115e0b4c4e3af6f79672b5c86fae0a462b6322c9f795d402325ad075139c4e6dd8d83d5e067ff281e44465ae478929749171b196949c8f8ac4f02f5473740397e482a3ac5a7561d85d57c5d4ec69e6acea1d9b53f10f92070a6d2fbeba6a49710288cf1b8918f4dd1a1cb6bc44f28da4ea9f2a77c394cf44fcdd74fd741a1c8b3e6cdc126e6d43652e523f2d106001fae189e9c0f480ca5d8e62ed0ed076c47530366c8f58135dc968127b513b1f9f3bad79ed7b6e82286be5ff6f2bbad659f44c2cd805a6b4b16fd9ef3cec521053d598ad71fe2d01ab853781d86bf9f510b8c888176bab515db79e0240186a39253f15ff3f189df38b46cfdd373d2aa1fea0f7e0cb2eda4e3e721eb4dfe6632ed7aa1e95ea8b7b75a5b0e401068fb3b7e2e19b780414ff39159591e764c2c0c86e12ff753802967de83553141ab623bccdcfa9417dac38af7c57bfba78603b24ef9701bd50fb83380ef541809917d8595d895ae1613b56af6024878c71e4ac3336433fbd3b4d3cfdc6a2f10991b311bb079459d84c887c2e9eee7ccb1489fc667ed51bf688feaf8117401f9044e837ba33cb4f265cc94aa1ca1ae813925c6728fea2ac88e288a846c21afb054b708779b31ca92efb3111d7b337e4a8ab4e4f44db1cd716eaf21733f3aca95d7c7604ccfd2b9378a6a44a5b5a7d05041789c90166a39ff54f3bea889bbd962366ba955007a2a39e0351f4570e1554d19ec2c14733557aea74d7a45be07a0c88c358c51b101c94c7c4c70872d0d0d051cbc575ca1412b2aaa54c4dec1414cee8dc9dbbec278ba13f46d98ab78180e504c3efa0069a25fd842fd7cf9fb397d1b1df265ffff000f50d099e367a30a468f74908c5e2a088ec7dab59d12ab1937e58018481fba10e1b7c1c41cc2e7fabe757b7d83d3a2f99060a6fe1240cb963deab1f87fe00fd6257bea2e273115a7597e46531521e671de8eb7a4dd8dca8d58817d14dc7b099002a7ca46ba19c24dc37b2c29062151d9dbbd4a6bfc5e01cb01558a51f686ccf1989b428595f5b9821fee88b8cd606c6deb47d399a2515b8e9e0f213e7008e7796da0c85a74f475103d01175a2da348cb41c911971d31cc3f415c4fd59991b3c7f8153ef1a8b55cbba694975156919f0a9c905c5f2c8b3f70852a9bcc5ba8583dd9ac916509eaaa3b3170e0047d6e12b3c8ae157e3cc15fe505e1c42ed909fa79105c9b209260d12d14bb097425437a90f96e0988414db2a14a66e86fdbfa8c33c01f191aa92e6bf427be31bc24cef0da184537fb3beb464d2bf010ddb950b0ad9da83b7a790a063781d570c5aacee97ff20a7ba261b82069cf631fb3d8aafa7c2ff4927d1fd39013061f9fc7d81fdf4d9be65c9e069673f16e5c866d34b69a97675085c22ee64ce997b29e2a286e641eb1011b2d7db779bb7b243d1c34709d116051147833cef2fa0fc724f7a10fe30231fbd942eee12624d091b82fd1b8d5135e218c22a488654a79cc0124d9d743713966c45074d7f017418e6bf7ae16644842170aa104e2330fd0c693286c7212922d3ea0500d9396839d77dc89697de84cfda8d324b3bdb2b5321fcdf0334c4f4227b7aa1576507881e5a0f095d5e65543dd75aa7a0f6e5acfb667233fcc7d3ba76e6a63ede96a7fa8d2b5781d7ae747aafe0ca2c096a3f3549d782f1ade12f30085d095b864743383429fc7d6c599def8c0c2946f0a04b276e933f39c1202a37943faba2f8fbaecc7f89637d7d78220c0f55dba6950fe912266d9da1a40d7b03b081e5ea812fa8c8ad459ab1e0a2834999a9b2f326e936ec339c177423e1ae27b902805f1f60e5c4b7b8cdc0172baaff5aa0c32935cb12ee9affcbabe412392a0d0a89d7880b6436690042e07bb96d8ec0c7bec5a562e6a1005da3739580a845f9025b0bcf25060c10f0205133153eb8042e589255482a3d384b4c20a2cb2392a061f4fe0568fecf41171e56781e704476756b942dac30c1f267cf2472764e0f1e439d4d7054eeedfea42337ee814ab15540fdf7dc88395a129c2c9e58b9dab0059037aef91f699093651970824c88c136d1101382945a1584e5c13fd2a303ad856da4ae5acccb60cddd1a3df969e4663985d05535dfbbf14762a425ca6c86c39062d58e654a73bbd1287a7836af1854dd34388d7a229320e50451f55ece39836a4163d80fa8efd2e2649855ffd28870270329515c59611526b0b44b41151f83bec06aa4929d0a28d462669ef64ebbafa01667acc6eddafdb293e3e46662fb589ed17a96a11cfe9e53442f67bb9f51bf4b0b49de47be54a70883409a62314562d7c1c2878067ab784654cd493b2f1c5975b8231f478bbca66b012a6bf3ed5684dae3bb72e2acaea5dad9264906d9bbd3318eedad9b9484ecfa68d7a9fe10ab6c844045fed016f073329064c235363daa8b92c383e9d44bbcb290451da54641aa3db0736778891c786f93ef1e9d37f74084df1545a53f78c6c640101604cd245a4ddfc4aeebdcda481d9ee47bd43ee736a35b8fdff9a580bc935419285966df21b2e78fbed4be5ac84ae182bd4ffbbec58f948754795ad05e66229e5a762a0a1db0d2a6224c0b25e19f892e32c364212fd9996700b37baf319671040aac71526c318500e9db6eb587434c44c486eaab950251c5a07fd709323b6bb852486ac60ac1cb6a693f2c830c60d64357c60d31a0029beaf852935545781100b25c755a2963fe90ac2aacc225a7aee2a525607b164c99a960d5c84daf037d4cbccaaf1fb4d58c99bcd3a2a095dd1aba0abf3dc8af9bddd29a46fb5329be7eb0078d59c9dd0b7f91c8ebe8a48cd4d1e6be3c158bb820a845a014a84b0fe03fb86194ec471584212d8599942c766be977ff984f7e7a9b4bd6a1362537ece4493d3c34aeeeecc7db0989ff62361322adc49b75e22716f3c3fb12522ed3dead0b20546152a843323442e12044ba9e3b816097c45a9144a38027db0207fd6c4443aef89e4a28b292af27cd4a2637815a10e93ab9c5c62fa069127b0b6f8f9a8c9442a393bf6d16d66529d5496faaec96d3c1b825d1dbee0eea1dc6c2a142a9bd1521856ce691ef616d3f7d955dbc2aa8deb0f7001725fa3fcbab579905aa74b88a92480721b81ae8c62f4a7dd467a1f332e4085b1b6e6abf1e6be17b284aa9181db51c3b059f9f715e645301f1739a7d8bc8ec36a9b23e962f9ed954a88e108efe3dd9ab929a669bdb1b284dc24e25e80789be3b50bf78a471cfc81a1e8127de4293760f43bc02bae049a7b72798697c490b737372597a7f8a5ef35e4a1fe8a468ca69e2b78d64c6662b739b6fa743729d29be8c59932d224779e821980a81de4c986464e9b5df23672e13b7dc501a0b28bf82378680cc0e218f2172cae3cad5743943a199e679173027e7396637d97c0e52919e5185fcaa5ebaa22f19ce100f352d37e230ee8bc1b40d6ad2e783e133eb47e5e98e156a88c86df3f9458e529bace95c695283568040b486c64f8cedc1fd4e1833b3b6ba6bae67ae218606a20cac852d7222262f362a87aa0efe34aa7f5c757b2a6ca5a23b5c56b6e65736ecac7d3d246191d3163d27dbc98516ce36be70a4623a27a9e7ff443cf1f19a7251a335c3536e5a0495043d2ea26bbbb35e41984c52b3d7f357df8d7b90a20b5156e82d5098cc3c5065f911524adb02d7f4ba8a26077f6e6fad0d0c063f1ce77f87832afebeaad36f174f50cd137c4e0f756b564c30b4e263502afa086538eec935634865f431257347a718ab8e84a9de06789a0faf25c8afd93c12427a160d45e5e49c63b4e44794b831ed40dae7eab80a926fccf2917374910be88f0f72cf54c725e1e4e62f1141a71ab095b81a30c6e96385e7a3212f8224bf92bbbff655e9198203a0e1d8a0c98d209583b11ecc739d75cd64abfe4d11341a53f04a4c50a8f1c0a1e1e261bb5c070f7bdaec14a381dfcb5c743e3c868b13e1e87e75ce308a87c150b8ab84f34191ad2e8fbac5583c6583883d1e6fdcc5c4b46f1faacab564cb7cf6b58857537764b543e07d8116a6cee1b11987427f7be69498eba6f26a1265f2f764d19919d40b89283453026a0c678e0ce93a0e6a4b13891e18e831fd75eeb8ffcd5b7470e51e3174a1c08dd058467e6ebcd8668ba0f2d1060b09d9a391826e4304f266b22d763f6786deeabd51b7820e5bf00d7775b700abd56172f16c96572ad431db475398f83afc47ecc2e960f0e4641b6cb0dd4fc9a9d10883fdfb9c5d9dc9883c07a89a54e77af4262d2e6528d5953f325d9d73ecda38b3cbecdd82d2a30547dcedd8d2e928bec331cf32dbdd0786cb707726e5cf7c6ed331a2f61d8bb4b9dd91c0dc0b53956f44c45b1d4c840f69eb5e3badad3f15ddb141cbfa481109b5af41950cfcee3c1a2da9fe60e428f172e0f5fdf5b3c10cfac7d4b803524c1fd57a181695b90e706170bdc0a0d0d5975a9ef84300d350c61926ee74bcb09d5260579413004f51b8c083a3e45cb7870451803367c7c5abac0444ccde264073cf078814b6f099042450e70bb0974b0d954a8360d6603a8346a7a2c56945d4e281cd06c37c8fc407cebe52af8267d7eca35a88143e977d92019f3436b5f74ca956d99541dff78567743855b1610474376d4cef50ece1e4ad966290026c1213028b897987c615ce612cb51f9d83f76ff19f9697bb507fe4bb78373092869757bdc1edb6ddb11e409565358804f88c5aa37257db0d13e49c9e0f55669aad749f4f25f1418c28c9ce42c3c6fb7db469701676b4b4fd52ca2750df86667d51f0208609d3d49b5104042e9bf80e6a5697ceafc15d1200a42a77a28de530a0484761218e42de913ad4ae02df80df7e2ada3f38da70cf345ad8b4bf70628a3908b0d8ae3c8da9d4abcc7d098b2a855b72ad08f18c564a07909d8531efcb43511e158a437166e49d35e1ea63b89aaa0dd1d1d3e1cbbbdc700f8f18e220b6ef5025701fd6b9ffcef8f95dc9f134c22c048efc76bb652e4021e1d2c98b737d11f943e473b73b5fb2a27e63204c33744c4d532495225e7b97f1fc7d1579368d281109194e99c6d171de0ee9781eb7c024f27ce6883c21dc5a66bb00e7ea676db8860095e9f76cfa94e2b6ae398318047c93c8139c74e565249f2a9cb5a97b7691e85a363c141bbe90a2d524b34f0ea3b836b02ccd270dd4444bc136d4819c6e2ab161742382689feed3ddb07e0d11d2aa8bbe94cc718a7aa1193fe714c4df90c1ab7973ec48ee8ab2654056c7f0d99d0b8999ecd9c9201d82a7c95e8e8a0352fe3e5ec4fa27c7076f619d49abf693608804f2eeea219d105f279e0931b07dde881ec9816e25412350f0705fe1d1a2a459d4acdcf724283a3236c0be0875f5798e0b2bce6f45c3ed43f6117ad6eedc5a89c1918ff10801bfc08902b9e667f3d639b692280616f0643f1380c085e338893daa78e106f1f44ee5b0768b7c79bdebf7daeac890de16b71d395e40685c22bd1e198a74cc56435b4b81c39a5bcfe6a806e8a6dc1628fe5fecebb4f8fde15e9a1415dfca28dbaab379e121badf2c873e353ece08ea8e15c3b2f56a02cc39b62573223ebb1795da43ac02b8794e8d63776c58005ee4f263cc06cae20e29d88adb0d7514e98963", 0x1000, 0x2}, {&(0x7f0000000500)="a776401b5d79b973e29df5b8d4acce8d298312bd55d52c73bb84d908138b15eb39dcc301d14c531078647ba199fc4d0b10315c5cb3f909ba49961157aac9251f51332ddd6185848a34b1d20fde033dc7949f7bd400b833bffc9b0df5d49497acc6b920aba7d61cd2626ee65cf56aec1c9e019ee40b886609d2d2ccd44fa398a3a59a28d9621a98b7c0f0c347df0d3f7db13beaf085d66084f50d56d8fe0c28ccdbd933b762fd", 0xa6, 0x4}, {&(0x7f00000006c0)="e4e4e78f4432f65a0d3bff74a49550e869ca72346f86ab1e2e2d63efad1b9287ca99d896edab31b12556450b6b6f296df652ec34a76fab73b827b284906f2662b0f1fd6791df0b356b9dd3ca57876b306697b8a54e1cc368ac51fea5218d455d29e4b7b44a2f76cc8a47e080b7e140790b81502998adc41fc9f9afdc5b73ade5c30a22fd0b864fbf6518c59bf20595e1801111eba1f308d526e552a8d4497798019116f8ef3fb6764e5e4eaa51347ad83c91c8cbe79eb932c5b25b86030a6e931d408d3f2642249e96", 0xc9, 0xffffffff}, {&(0x7f00000018c0)="9d9a7c8abcad8df78b4bf523bd45af846a4549f3fc863f12bce0fb23f9079e16b5732acaf51b5446a547e3514dea79e316a83662f549f1ef052dc7767f0083cb4bdb657ee988821352efd8e4a9d1a9eeaeaabdad3124ff351f583d92cb081347139682e4861b7ab5345bc288a988ad5fae0ef1c68936e7847df6e0dcf0eafd0cc1e30f98c8b11182c5d129437220296479163f6331a332d52da8599a", 0x9c, 0x6}, {&(0x7f0000001980)="806e44d474d6f64369d7ab7cd8ba064e0bd002dae18f891f0875665f1297857577de4f1d4a0a2868f9d077f0aae99cc6af691dbfb0484f4b5c4da700a7388d380b9c3030c141eca00a0926a7c9ba4bdea5f48f5f396ee0600b1efaa808796903271370f1a63aa2ea14670a480aaccff7d93db6b74840225d4dce866bced69d722754820ac9466eb20a01fd4565aa55eefecaad4f14424155d925e18125a9d0c9e209cc65c3517413236ceaed9f6a4d79498a71ee8be525bcad344c6a4c9448d2970f4bbcb7f60f1b8571d94891f84f80726a5c7bffab42b19b86b5b07a3b8741a8288733128c33eddda6d5cee59b051606f2d5", 0xf3, 0x40}, {&(0x7f0000001a80)="9c98e89deb8160d096c4dac4eb223900f0a0feea2432939b1a7f41656dd7cefd680c6176fa7e882a8d651ff8456b26585c79296580ad4aecf01461b0d32a360fa84f38b98a17156ebd5669dd91b9778bb85c83bcafd827771041f9cee18415a7f7f353f8a3c4be880e15c9530ef1e104ca0685ef52e67989b7422da87ff6e81b59f54ec2ffaf649b0af0156bd4e6cf1781c6c6dd299ea3e0597498a32de33e8e0d3192f3a8319060ab9a464cc46c42220f64cf12ed809f8da432c442211e6a868b3ae6d736f717687ad7db4879f3e3d1d492de3ccf1d4f5e7998f232158d0feffd042219758ebea321468e", 0xeb, 0x401}], 0x4, &(0x7f00000005c0)={[{@fat=@discard}, {@nodots}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x20001, 0x0) ppoll(&(0x7f00000007c0)=[{r0, 0x1000}, {r2, 0x100}], 0x2, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000001c80)={[0x71]}, 0x8) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x5000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2673.536045] FAULT_INJECTION: forcing a failure. [ 2673.536045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2673.537662] CPU: 0 PID: 12269 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2673.538540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.539556] Call Trace: [ 2673.539888] dump_stack+0x107/0x167 [ 2673.540336] should_fail.cold+0x5/0xa [ 2673.540811] __alloc_pages_nodemask+0x182/0x600 [ 2673.541387] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2673.542176] alloc_pages_current+0x187/0x280 [ 2673.542731] allocate_slab+0x26f/0x380 [ 2673.543209] ___slab_alloc+0x470/0x700 [ 2673.543687] ? io_submit_sqes+0x6fe6/0x8610 [ 2673.544222] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2673.544797] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2673.545355] io_submit_sqes+0x6fe6/0x8610 [ 2673.549947] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.550562] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.551152] ? find_held_lock+0x2c/0x110 [ 2673.551660] ? io_submit_sqes+0x8610/0x8610 [ 2673.552237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2673.552892] ? wait_for_completion_io+0x270/0x270 [ 2673.553555] ? rcu_read_lock_any_held+0x75/0xa0 [ 2673.554201] ? vfs_write+0x354/0xb10 [ 2673.554701] ? fput_many+0x2f/0x1a0 [ 2673.555188] ? ksys_write+0x1a9/0x260 [ 2673.555703] ? __ia32_sys_read+0xb0/0xb0 [ 2673.556252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.556961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.557656] do_syscall_64+0x33/0x40 [ 2673.558146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.558786] RIP: 0033:0x7f61c5901b19 [ 2673.559254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.561534] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2673.562500] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2673.563534] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2673.564534] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.565405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.566304] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:24:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2673.576388] FAT-fs (loop5): Unrecognized mount option "func=FIRMWARE_CHECK" or missing value 11:24:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040), 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:35 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:35 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) [ 2673.628426] FAT-fs (loop5): Unrecognized mount option "func=FIRMWARE_CHECK" or missing value [ 2673.661802] FAULT_INJECTION: forcing a failure. [ 2673.661802] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.663307] CPU: 0 PID: 12298 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2673.664146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.665156] Call Trace: [ 2673.665487] dump_stack+0x107/0x167 [ 2673.665952] should_fail.cold+0x5/0xa [ 2673.666424] ? create_object.isra.0+0x3a/0xa20 [ 2673.666991] should_failslab+0x5/0x20 [ 2673.667461] kmem_cache_alloc+0x5b/0x310 [ 2673.667968] ? mark_held_locks+0x9e/0xe0 [ 2673.668468] create_object.isra.0+0x3a/0xa20 [ 2673.669005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2673.669630] kmem_cache_alloc_bulk+0x168/0x320 [ 2673.670210] io_submit_sqes+0x6fe6/0x8610 [ 2673.670737] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.671349] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2673.671941] ? find_held_lock+0x2c/0x110 [ 2673.672444] ? io_submit_sqes+0x8610/0x8610 [ 2673.672981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2673.673578] ? wait_for_completion_io+0x270/0x270 [ 2673.674193] ? rcu_read_lock_any_held+0x75/0xa0 [ 2673.674762] ? vfs_write+0x354/0xb10 [ 2673.675220] ? fput_many+0x2f/0x1a0 [ 2673.675667] ? ksys_write+0x1a9/0x260 [ 2673.676144] ? __ia32_sys_read+0xb0/0xb0 [ 2673.676646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.677290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.677947] do_syscall_64+0x33/0x40 [ 2673.678454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.679162] RIP: 0033:0x7f2aef7e0b19 [ 2673.679679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.682242] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2673.683300] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2673.684308] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2673.685298] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.686297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.687292] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2687.111113] FAULT_INJECTION: forcing a failure. [ 2687.111113] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.112691] CPU: 1 PID: 12306 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2687.113636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.118806] Call Trace: [ 2687.119175] dump_stack+0x107/0x167 [ 2687.119676] should_fail.cold+0x5/0xa [ 2687.120196] ? create_object.isra.0+0x3a/0xa20 [ 2687.120815] should_failslab+0x5/0x20 [ 2687.121332] kmem_cache_alloc+0x5b/0x310 [ 2687.121878] ? mark_held_locks+0x9e/0xe0 [ 2687.122447] create_object.isra.0+0x3a/0xa20 [ 2687.123042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.123816] kmem_cache_alloc_bulk+0x168/0x320 [ 2687.124473] io_submit_sqes+0x6fe6/0x8610 [ 2687.125716] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2687.126419] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2687.127494] ? find_held_lock+0x2c/0x110 [ 2687.128103] ? io_submit_sqes+0x8610/0x8610 [ 2687.129389] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2687.130094] ? wait_for_completion_io+0x270/0x270 [ 2687.131544] ? rcu_read_lock_any_held+0x75/0xa0 [ 2687.132231] ? vfs_write+0x354/0xb10 [ 2687.133327] ? fput_many+0x2f/0x1a0 [ 2687.133893] ? ksys_write+0x1a9/0x260 [ 2687.135027] ? __ia32_sys_read+0xb0/0xb0 [ 2687.135634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.137198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.137935] do_syscall_64+0x33/0x40 [ 2687.139046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.139791] RIP: 0033:0x7f2aef7e0b19 [ 2687.140891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.143585] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2687.144669] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2687.146472] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2687.147521] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.148538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.149564] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:24:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 11:24:49 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 11:24:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:24:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x80, {{0xa, 0x4e23, 0x4, @mcast1, 0xfff}}, {{0xa, 0x4e21, 0x6, @mcast2, 0x1ff}}}, 0x108) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3f, 0x8, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x4, 0x6}}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:24:49 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x88740, 0x0) io_uring_enter(r5, 0x4758, 0xeef6, 0x0, &(0x7f0000000180)={[0x3f]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() fcntl$setown(r5, 0x8, r6) fcntl$getown(r5, 0x9) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x550a218d88f4d52b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() fcntl$setown(r7, 0x8, r8) fcntl$getown(r7, 0x9) recvmsg$unix(r0, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009140)=[{&(0x7f0000008080)=""/4096, 0x1000}, {&(0x7f0000009080)=""/155, 0x9b}], 0x2, &(0x7f0000009180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000092c0)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)="c2d3b9166a1e42b906b1cd62848afb67582aebe74e7a168694fa236b78954d5dd3cd16af2a7a0b7e6b874aa3c976dbd4c05970a862825522daa627658c708eaa6c474c4efbc1f22a8f16b2107e58db7a6a908f0b0c1d93b4587ea3fdef6b8576e5faddc33543d8db867cde575c793d3ce0f64ed3617d85730388f8ea47ca0a9938b910ee9558aabec8", 0x89}, {&(0x7f0000000280)="5806f15f28826d3e0843a59ebb0a9be762bcddf497da2b8cb2017b419844d1c6139b20bc3ba2f7fa51ebf642a220bab9ac400e2096a685ea983d86a987a908e569f0e6612ca12c18905d6aef98cfd48a77c2e8af3d0c4d55cf795d4e7d956ecdc706f7406a01972dab77b859bf8eb065c8eb561687b5eaa6181c32e50bd9e09701bef0473a4305f073080004cc", 0x8d}, {&(0x7f0000000340)="2aa8ea47b9a4efeb343d2417759a0c5041912463bdeada04815d627f1c28ebceb161649e3702f6759b083941a894b6ba56f5f2da1e657f5e78c7058555052ead0a44da85c9e7dccb39f2f5dc0285603a345791dad51f0d695290c517f72bc37e72f792090d345f74ad2fd48c9399c94d0fdf9512a06319351d313915f8cb5162bb8566647d7b3041f978e10d6775ca9a626494279d56463240acb5a9a4bbfb144cc743d81f67af6c44fd5c7975452c36a9bfc98e9933bb497fdc2764ae52ec6f8bcaf8efce07aa04e26a2f51d35761f0a944b44599ac2dd6c20197e6f606accd58026ec36b1b327e805d40c02ebaf638ec", 0xf1}], 0x3, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}], 0xb0, 0x84}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000f00)="a1293c62945e07374b2b0945ae1b47a425b71a9956dfc08dbe1e89fe1e1776ff30ffa53ae664f4a830ca67298f0635e92ef0bccfbe7144dfbd05be925df330fcef0cc102fa7d72bd7746a26b23a6bfc34f674bbe1d8ea9b53ee3dad9e8fe2bdc52089d09ae19949ff05be4def573737ef70fd1800e46c5d976afd390241a811e18b791c5b7b14cd1980da8bf196ca18824d86cace142db89d72c7fb112ddb4cd9e8b3310cf", 0xa5}, {&(0x7f0000000fc0)="04", 0x1}, {&(0x7f0000001000)="591d7ce1ae2a24a82cb2ff9e16db70232572d810b8485dec84c5cc8ee3b0c3a5f83adef6c960345730f13e519141816c98c4179e49daef7d814174963bd384ebb361ec492a2f5e6863fbb9c7af5c45d4b1750f4d063fe5f0c224303beb92558732030647b93142e2799a1f4802f061e0b1168abea8191a97c4ade8c1a811003d4c215d2cfa4444e288dac3901cdf3057c0fc3d598504c772a950bd3f6aa358dd432fd55a07d3fd9e5dbd2a427b810c84590d44f1f56bf56240e4f59fc9cc92b9e33876970a859d34aab832b456f3a74893bcca6576eb6d98e5f9b29999d38fc25872b0cf016a242d1abbca32455033e3dc87afa7c9fdc9356382c63576", 0xfd}, {&(0x7f0000001100)="21ef7c14922d11db6f1969ee872e2997dded0c7ec365ba90db43576786d2c1c5adfa25c4", 0x24}, {&(0x7f0000001140)="17a38f2434c4c54a8f50ad75d789d43ef817ef5c03a116f0c50207a6328299378b3c3b84405dd6642de3ff9c9780a66af759d46d897d1bc8c720721c", 0x3c}, {&(0x7f0000001180)="e52c9621a2eeed", 0x7}, {&(0x7f00000011c0)="907308de5a5442bf890a9c44d9f051c2a79b56a052ee54f48d2a2782cd28ef71cbab28fcf64f3986428b1d219248482bd2ebf0321d79e505297c7727014c1e243453d5", 0x43}, {&(0x7f0000001240)}, {&(0x7f0000001280)="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", 0xfc}, {&(0x7f0000001380)="2a59b763b956d450283a9a8ea7c626af2b1badf766ce6577d02b5e5a83c4a8caf82ac21ac5be9017d22e8632ebdb92485e5c2f7d42af14dc338c212cfc1da5657dc76a4413f735a81d8be37673d960c9dcd5cff3c3846c1565ce8d416a0477fccbb9ac02d1ab090ece99e4d554ba65e17827b90e4df1b49fdcd6b6e2f0fc2dcac2893bb6a2a61bbb5890fe1aa7a08561af9322a60c765160ebab99ff97792be5a20128ee85de45", 0xa7}], 0xa, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xc0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000016c0)="d9b2d4b73a5b0492ae4624052f4bbf81ecf8442e8a486ef9b2ab3a841f0c0d903b2eb87417ea7be396792b07950f7aad0b16050a9c26b0ac15bb08aaa841eab75ae850a70e2a87661bce8f553d231e4fcbf02bec189e50a556fb10e738339d614434737f008bd72c27d0284f5cc40cfad997463f26", 0x75}, {&(0x7f0000001740)="3268adc5fd0d6cf72e97ea3250afe20d3a96d0015aec1ba5c4ed8860021930409d95901bd03696", 0x27}, {&(0x7f0000001780)="915004c0f3983dcce1cc70f5018201950bceb863ab86b5cf6950666135be71682f836615066a540e0e34fdc169e7389c2b311ff781496918b2f7a12270e455e1967a4b8a0dadaa50ab52f187df136f7ee95de31a6ae9f8847d219c95e9b2a57f2cae33", 0x63}, {&(0x7f0000001800)="e8546292", 0x4}, {&(0x7f0000001840)="ddd1b3e58f47063c87ceb23de73207200efc0d0e4a28de0469758d1eeabd1f071a9328f0fac438b9bb188a72432ae33d71507af2dd8dbb01302c823a68a946ca3b11164d043674f468e2400690424762e798acee81c4ac4a3fcde590d10ded2a1192e8bb30ccf9d35f1ba7b10f24f24e5e625ff2c6766d076d801eea511114958703e5fb19613df4c55fa8cc5e6871f59cce3811ab12b74f167c9e34935914fd55b11f85", 0xa4}, {&(0x7f0000001900)="0cc81f1ebc4db37ead5f2b8e8e7ae6b9666ab4572748c2be6d5ad7d6d0ad64c5926c3807b565769a8bae45eda7df82df342867031a0b51dc0011034b1c0afa0f18533fa199baca605f78f5e28deca341b54107cea094944db3f94fb5e24002a10d57485f33c3e887dd4798bb169929f031ca299062c9517cb4aecf0a7eb0df65dd7f25c03b001ce16e653bd2680bc770d344342ce58b00238fce3bd456aae5032ebaf990f517c98bbca4ede5cd88603a06a2af064536dc02c84fdfdddb79c933a5fdea0769afdd1a7e65404a5dd31b", 0xcf}, {&(0x7f0000001a00)="d846ae471f9fa05a7567698fed271a1d2988c99292fccbef70538c0944e8a31093eefd0a8287c0c08dfa242a4a625ca6118c856dc7f776428a249f863973fb3498476d1911bf7887f771ceb59197e199d2611d25562fb69cf1c108205c46d3cd0208091052913f4f9cce", 0x6a}], 0x7, &(0x7f0000001b00)=[@cred={{0x1c}}], 0x20, 0x48000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="690196d6bfac27aab132c00b9fe253aced1e3649bd46cc78f29e007d0a39f32362fa1e5276d596599961d8bde0aa8416176964b1c22c77dce1e860b3d64d787167851f52da88ed705148a924afae4db8dc2cc301ea5ef2f42992d7ee7afa2d1e5b3163773cbe85eebfde7c8c4138d6903c9319b78e96306662ac9547fffc796876de5c467fb94da6b44b991e573a331d236d5a4372ce48", 0x97}, {&(0x7f0000001c80)="aa33f4d1a18b43ca5371ffa21658ea72c64a1b1eaa77da40c4412b57768a1e5d814769ce16cf57b120b5b20ea0f6d477bef97614b778c84acd7cfa842359858f03949548b2ec9900f9b510da4a2965e6c82ce034cd274e2f833a099d4ad51f39c142f16174caeec564f2ef2c0f7ae4afe30d9af2e759e9815f5d9682eb5fb3afc60096c899e68d07b59514716de4c179091d2fd618627b64e1e425c5f5a3c424a13173", 0xa3}, {&(0x7f0000001d40)="ad0117c6d555922c28c2bfb5945435a29061b5d03013a6d3b669d669e0215ab88e3702f6b0aa46c02efb52629bf4113fa228dc64482e1f9d5334317010a105b20e0c46b5e04725338ed354d64290ae044c00fd7f7037ef9d6a9d52f339362315f7313c7e01b63ac3b49d19eff42b19b091e6ef2e1cd77d7beaf6c22af4137decb982662199c71ae0c96015dd8d2fb8172793b0b65608b174984cf8b00cc78216358ba98fa4c979b34c4153b48c18701f8dbf125fd340f4fd861710e2b2205a7221c982de9a6d274342cfefb5c91684db", 0xd0}, {&(0x7f0000001e40)="9d5579d6dbd7ce97e80e3b6170e38eddcd7ef99ee67b499b8b6b3f76a266c664acbca709b7aa22307aad0dc89cc357188aaf473ceb80fa472df611e1228559798469732abc02f5607088e1eb9fa42637747d57be58067774754c34ce48d7c481bf3d7d22385f2f785c9c8f187339c17a5339df88b8fe2bf1121a95b71d", 0x7d}, {&(0x7f0000001ec0)="09e25723071cee872b24bb0215896b53d7085da840e614c102a186eeff41ba3326dcf3aa63558b8c93e9224975e2f55d2beca1c63c5a67820363cba4b980d239f5b7ca2d7c8c5ea814d907982ef583da2f70a3af66c0326b50eb3fe4a5848fce1b5eecd41e57f77548862ea3b3e9e0301101e999df6f4c612c005c9735b2e50aad3511f845a0c3175984dfe5dc8dd6842fabf56fab5395c70efcc6b429bbb00ad751a15223757fdd31d41e2b0fa25f7c748706d16f9e734e11af7b3417cb", 0xbe}], 0x5, &(0x7f0000002000)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002040)="ee0f6ce603fb636f3ad5200384cef768b67107cc770a3ee61a5b508d5a9631aa62e4b2694ca833b4f193d81ba5a0182e824ddca05d65c50066641e3339935e74844cc9dba41b7f595e92773e3c83ebae315ea9bc7ea224fc3f7d3744b1e3d022b3d95fa8ee2888fa61ec9dbf59a55a0c3e19718cd792a569", 0x78}, {&(0x7f00000020c0)="c688193cddfdbc50e134eba5870be52ef2034a665f4119031225a4860e55dcd7c10ed0d198b088bb70e76a73a0df3499d80e4de97e6583d53277563f7e4851b71907a4754ff1c1a6b6a0a5893cf60d703d8ddb385d6907f84b46d4d57fddeab56440aea1cb559f65c9336a49443db8cfb4bf50b57c045786af55013109ee56e04d242d90503d5f2c13f7064e1346929f6587a1e28854c5dd03ce1136c4df1e64fed002c7954f32bba258e34ab5888022b439173d3a610c06e3e4fab5fb50b4ebf0a654e85519", 0xc6}, {&(0x7f00000021c0)="cd5477a722ebbe97b7a30788318642294c2cfd6bf902b8aeb3b9dba90637d61e32cad6", 0x23}], 0x3, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002240)="058ab7a06e9bad18129285e2c53d45629ef1285c86992684cf6a715fe419abd70c58a7a79d955082c90ba70f9f272ec415c72a750e97970ae7eac37cfc06144804d18dbd15c129f704fbefafbbc0ea5736db22e337c823f10ebe6ea2cc7d1f4eca7aac226aeb914a6cfd7fe7c42939639c3113ba25627a847f9e9b75e9ad97da11b999edf82699ffc6c03a4e5b74a4e8db565dc93fa13cebfb5a3e8896de23446d7ce533efd368249532965133a75ba511cbd8ebee9acf6ed522a41ab9c5b198d32c0175c42be09f29c11e0eaaff8055f49376ea121cfb7e", 0xd8}, {&(0x7f0000002340)="05b23d46855b5bbf53770ad50a00691cf6979d6d4524af9b384019063d7daa22921b0e044d2971b0f04e95a49c4e3598c4d80d7c5480383fa83346b753b92bc10730a2dda2c864f28ec1a5cc60182e", 0x4f}, {&(0x7f00000023c0)="adf54ff28bb2053914d48d06b4bad96e48e4ac6739c46af245db48eeb80d77555bae02708cccefa9b380839d5e082ec92c4cc1eadb449f96fe8fac0b4a9c6c5e1c5f543a7002b70799de9494d35cc101c73c5f0722406997fc23885451374cfda51d7e45855a782191ffa84daf3fa0d131a71b3e1ad4a61af7ba438f70a92f493c94c4e9f6b8dc415f11f5ffcd9000592bf3a179e74ab5d5a3fe101d77eefab91e8fe5031d703f2e94e09fefde3d226530afd556269d6441f36920aba31f8c65df513e8baa6f06e617705cabe2f170bc75a13c575b747a56a417d73f454071c5d6b05c31732639717049deb38c6ffad0dff1604f36338f5d1f375ea8a280da0a77c5aaf73f0b157a7f3c84031fb7107ceed7427bf0f6ab08f2c38746e15dc110446716763d2b098133fedf3650ac688a5d34b38d272c3a8b57cb92152241cd6b0e8febb31337cb39bc825f167daa80860af36bade117a04d581ba7a03ce3fce82f8c512732974e002e070b7317cd335211ed2250d3436f394b8803a43d5ffb60bc89ddf660fe0c6f3ee9c802fd1376ad698b5f3f951822c8d2aa7ef37fb5542a938e8fd38da26f174f277eaeb9ecd8a750f9a19f9d0a6865c894a7602a2d99970a188a2bb4efdc057dde657ae92bb66b8923bfba71de5fda4f3b058f42342518171bb3072f4762152613edfae45ff937766f848933e9eb655110739fd19a19fa5134e5f3c52146ab599d4a2df7a8331850fd2106b793821f4f893dee20154fade933fcf1162837c50f2f4132687478cf15929087272e799f25d04d14cf14847606b2b4ebccd0608143aa85bdd629716f49b1574fa5a1f970051c9b8ef673562e7b59e6f760e751b521e5225c5b155145cddbf38bec9c8994db76f6c4808f228f01145dae1cc2ed22bacf2561ac6b2827ad7d74b93b00940afeebf5139e6a71920cbdc6cf424d1fbca6663f524f40b61c67f395b213f6396c3bd87ccfe505ea7dc5cf3f26f9152cfa6470e156a0caffca3e2557a5005a0ad4c0c06dd5241974f2ff4e0cb5724e1fbfeb453bd31f438e500cb9959a52e51d0614363064e8de1918c65c72a1f972177f46f1ff51ddf4004aa9268b0b902a6239157948ed4d840d126a8e88cc76bd799a90ab3520df91d2c54f268b5866917edcdce66f8673da394e8072c303ae609feae80383d984c9e563686601eb1f5c2d80b8a153273eb134e935f4a8965aba1c78ad8a20ba4506ef4406bdd4d6ee0cf04378a92b03ba1c2695ace35231b6f61dbd92baad4670e91980c3b4a285db574d44ee4ce448a379d736b6993187f1063a518d5e0172bd1ef07c86786ba7e6e29a78d84e077c354b29e6a9b91bc74961f76774464b949c1957fb6ae71f126a694f788367141eb59b2abb531c1cb8a30cc948be89c26be89ac7de7e5f8da2ce9517f1696938bb88746d22de9c8c233dc2fd6d2d92e5e951c0856a1267fb10ac62d7e013ed512a7f768b0a6333523ffb6d30e0177af4321804ef97362949faaad598c8d6953b785504a9eae0022dba9fc8a7a5efcae053e66d11afbd05fbf6ec99c6f1fa5ba355749ec336984d5ac70c6607871d02cf4acf72ca85e657fb6029ddda6b02eb7840d095b4d97802afebfe25d1ff73b9dc947733ec3c283c6b795f2f95428ee0cf7c5bf5601f3278a06e553cd890ef740abb7114e920e80ee8d629ea773f6e28ecf8e5134d6cd56d70cb8f3897bc5dfaab62928691f6c19d440764d3f5d2de6a0acb23bfa85810c8963cd4578b0947a9c9c08adec2d838c7d558b93716c733b39c61d55a2dd49c442ecfefee51bd58a8bb88fb3f91d415744ea01a762f3845a961caef3b3d4b39518ef526d85d3c50f543f1f47e40ca30bbd852990542f0a1854f194b8df6efe543debb49ca94830d12695bbbe455b6a4769d80a0bccebbdb1f2ec931ff85d70b30a6f56804190ce3faad804974e86d5d2359ebf26f9f1d0066ef1dcfdd8434146f23711da3786b17370b58d1a25a03ff035a167d7d01aee5e3404f6eb0826daeeb401adaff197e4611b953464059c8863463c0ca83bc9132429b496da6fe1f1491a44391456224ca8ee231fed558532aaa435ed77f7c106589fe657fb81b3dda13cefafd8191888d8bb17bb53c3f6c0db24d7293229b7a562cf16d3a61157971694fc65ef389a3253525597fc6d6b44c07ec15b18a662a0c5f25f0d424253a8d313c980111dea37f903dfee44737a8325963f85e7550e0a46513f98c1f3994e74d737b5f624e007a63f038b3126b754f72e5ac5060bbfeed46cdf1cf290634523199da429d29fc4ec0097f89b769973f0741535740e42cf934242df6d57f4ca1af625558224fb697f5980721be74bb5d5d6ace47b56b4e0152b0615d7b8d3b052dbefadf2522f178c63626bc80604072a9e22db3a0f113dae9662ef10a77f116e1fb7026d20ada93018d6bbc372be57610f1ce216cb0641042cfb3c7b3aed055d9964284a87eefca411e75996bf5437a458d2e2993c41f685c070d70155c71e4ae21a2af6cb38bee61e763822482fd87594078b0d633f7cb122d0b6dcd32ab21bdd27b4d4947c324b8c2b776651be7d8d238a06cf7e3bc0e895c60bd8ca04770c9963850ea7f988a6e269dd74ff7725cbca52db3752a82b316c4c692e1e607b97d42d59aa21e14a7a8cec93161fe1ca9a0d1b35171d66fa6af8bf9bbc702a3e9cdfc672bb47d35213d2618ab37a0b0077902fb5a9b13f13ce70ee49518ae5afe3c18b398db3979606aad6b45b23231b2a2ad5fb7aee0fe11a78f682542586c71199e4b32ccadd40e876ab0a2da77d4146fcceee0c5ef0b41831f5c48416b3f549a810f7299d7c79c1b9ba15621b6aed4b0f014c0865763d20a918d261bd8a32fbb60672e43110b3122af4e4dc9dde3a5476fec256bfde6ce8aab55098043978f2c9dd1be13fafd86ae432ce0c5205c56651baafac959ad4d221d417092a2f5fba6cc3622fd807147c005129dfdf8adfabd3b2a5beb64d6c47bdb61ffecc868dcab8304203c1950b8d970448c6895330fa593f46001cc2a74cc99a2ee569c8c4de539d3c530155600e4ae6f40f26f35fd4cc65add7c95229b3537b338e5cc87fd7af5625ea99b8e542c1fc2f7008dfdcde3e9691354da26bf2e5c7d954be684624b7df0fde1aa2ebe1b27181f8fd99774b26cf68c17f9a70932b460862226188477c52511307c8700da8b401bbdfcc99cbf69c8c5dee8d81a4c7cf81de35dbcdc93abcf39e377cf2909304d0d875b4a4d12e813082057ebf49850a158c4baf3c4a1b895be2f4691e75bf5678c3565b9a780fbbe3e6f780a4055610bdf8f967636eca8a05379b923ee6b98b6ac65d61c3b88d5f6c9e61de8cd4fcd7527fa6edd5c1b60ea960e775338acdf5d8581ea4fc21d2434da5434e462e6e4dd11bf14b6f0e221e13da7c4f0e236831007093e745e8686a5caa9ec23e05c456cfce03ae0fe938516445c151f90c1d30f022f572844a3a8a9d8882b4fa419f3b2a3de08467b0fb9840b316881cf8ef78dde93678f2533ffce62d35051de4a14e2e02232c365701998ab094d1ae5304b609826d22d9287721fc02421b86e0fbe2058ca18fa05b57301a4fe574842c7b8c2aa4f140f5f8af2627d1ae28977b971568f65f3cc63eb5d1be0b5f565735e48f37bd099cf639090985bae3a871506b83ea8f874ba5428906d5815371426dbf7b72d953e6b2726006826aadc8c2e80f8bed2850805d79bf0043adaf14e0b7d9e1b3f04dd1424cb07855694f445dde401e8dec818797c60eee347d551ba93a612c5a3321c6a1b0c8c1bab975412130077f3a2aafe391a2abda8a34a1a34e4e56ee269f58e349e3abde002a933d99b6c22d2fccb9834d4c7a7c8e6f1d9e429155e801a381218ec0f031985d75cdc4e6930e5e47a1fb5755e06c5fe782a50358dba54d54f58300f2ccbf615412ce84f1de3844564aed0a888e9d1c95bb276e58ed1b621e5c8e5deee1e86567f2517779e444d0d91d3765bdc7bef432749a0a49ed191e669fd677ed0e2ea32d95dff9827bfce16a2e81d4628b5a1c8d8353b61a047d3fca5c1117abdf1554b40ed5161a3d3149a8a521affd2f5394c9e7a06955fcd06462dd05517c0aef82491c6e6e75c1ff6dffaf8a2b6dd60c6b59d26dca1d34b8e1d4382c0fa771f2d52c0e0920ff4b1f1543aa85257c3addf9464ba437dabb7245879c639c2f021868ec033e884b15b96ddd8d2ea4ffe2554ef7afc6c857ac9a754e61a5b51f9fb811c1ad63cca0ef2703f2fef03fa0df041c14ac83f12d27937ee22ee7d3bfb03d16eeb9c0aad7af9b6350f3056c3954210532a60bca9222ce5b39d8cf2735031c15af5ab5790d84075942a2c44f497722ab8be01f5a56e2c22e17520f9aa5babddc3947928ebb880b1b4182c62d898688df37ff4422fe48857f5e8cf7aa4b94876c6e991a44a20c19f9e149fc6c7edbf9654a38930181a657e64af9ab1a4f13573542e27f1bf07b55d6b3afa344175dc8fae19f739452f4f9bc679ca5c334675bc74f0243be35911f48692fed6e98ae4774289d4066e07acde8793a6d079572cd38a71f1e8c3766a89aa617e9ed4b2f45b61800f3e6622cc9a9bbaedf7b556847ce8e4bfda508763a76f6d6096bc40dc43566ed469e2dcd396a35b9a0b0f86299bd8155cdb408ac61ce1ed5c09a8f8a4a61b882080ef1c5d62acc343ce91817545b98703fc28ccf528b04cd261b91a1917b233d9d46cee585baea7421953f8b1f702159b4f5ed654109d012b9657b020aa55ede4aeb5a50d55010c493c8ea48e7dcf1f68445f1268cebba3b878028d8b11d2785f77331cd7e28566f97db5e57415157abb00cf5c68730f3826f68e1fe1799b9dcfcc8f91999bc769a27804235f0e690c18906105fe653daf961184e9e73e94aa2b86db2a2d0e9947a47894dae030b82fda36aa421c4769daada5a26f91797204788747917cb0b77ab7965f83ab18ec2766f69a8518ac94935da3d4161d39190fc161ad9c1581ebf22d5a0edb6d2e033601e45e94ce28d14baef1cebc66be009359da86f8af1e95a8271ff9c97f32674f71a4324ab23a3b7fad93ccb7d565bfb6f38977f274490fcba8235ab59c3531896fa3e25f5f988a9daa3c27433a7242ca55ae21d70e43338b7e66915a818e96f2f89228ae5c426531630cd1d1b4e1a730dc12678cf81c6c48962bc8344fe5067dd0ef4f73916c0db2aaee1527102dd4166f606ffb7f49e93031d05139fda50d14c5ba8510434db4f3cb7a106db1538e5e4f4874e95cf44e0d2a3acacd5fad27264f76a79dcacc22390e6b65537035d34160f35110c080f6048b5297d8e2e5a79af5388ffdeee8eab1aef80c3b135a32e460ac26ea20df255ff090ea4ad2912a3e4aa4bbbf909c13e9c816e5f253afb8d83d6feb0a7356bb771c2849fb90f030f27b1d50f18259801447fcd1ee24e1b3768ed7c6fee44ef4287662ea5134be497f904310db99e4b67062656437f9f2a406f25280b6f502f425a8b9c350df12889ea69638e7f4ef309094275f35019d17b672e7ae86110805a9fff58d47166e69ab2c05de5db5a9693ea94f46e14c0219e0523ddea8ce40134fcbfde7c71f12436f65cd36c30c1c4a14c6888171e45393f2c27a6092664459fd305a1f9fea8073f6a3ae5addb8189806852dc856de3126879d82937f8050321cb7c350d96885b08e422f50b984d0b81dfa197279517d83766685c92899b5518d2ab31c6c4a7d664b74c1b125505e8ebb7074", 0x1000}, {&(0x7f00000033c0)="673c56c526cfe9cd2ae4b8625cf0c6230bdf930fe8b10751dd30691cbf97da7403f5a879c3aecca13ad337aba7807d0611081a6d295ddfab79e152cc4b79078a4ecd0ae03edf265c85d6e3ca7040d165fc29a5ea51e74fdfc74ea3167776290fe0a6e2782d8ee8068a9858af8ef1de6868ed895aa43161c04c88b33cccac63acd5245c34a4f752a6", 0x88}, {&(0x7f0000003480)="620405e2177d8b8883359c3d4159ddbd8cf2", 0x12}], 0x5, &(0x7f0000005640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x110, 0x8800}}, {{&(0x7f0000005780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005800)="035127899380aa6904d8cee96014dd4869d23f9adc97d284cfc27594d6b0e2b7b2810cb9f937c5c49eb74c33989b63ed96a157bf319280bf9ca5477ae85989eabc1d3879aac8e3dedd94f2097653529df4a03b646623e73cf162ea6f7056ecee6a7ad3475d07719b113a72e6c0b616a5b8e7660b51fa70a3988b51c4be7cf51f03fcf6921f", 0x85}], 0x1, &(0x7f0000005940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000005a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000005a80)="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", 0xfb}, {&(0x7f0000005b80)="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", 0x1000}, {&(0x7f0000006b80)="209147936c499f4241c53a8e2e1bb83dd55cbec13745cb230994eb8be23c64037fa2990a6082c7fdaf1ae40e435588ecf44e4c73420284f2d5d57ca86024f0a053d3557fb42fada02fb3f6277f4cb9a69f39c797cd87a79b1998a87b5b5267b74a2c4cd105eb8d1e0682245605cbc7406a3838481fef1da287554e85a023ec1088ffd1b143d2142bbb85b4c2504569db48da694702cd6530412d9468decdcec1bb8e845a85b2bfad845cfbb540a306c2ac6dc0d054020e0ed613e4815cdceda19ebaaf1a6278bb2078bf66c5c6dd3e635231f21c8011691f07b677e7c018dd68820bac350d7d80", 0xe7}, {&(0x7f0000006c80)="727f6bf99161b5ab0528b0e2137390eab27a9e17f6ee77395d87a9bce96f973684247b9ab07f09b41297914c4d5235d898b5c43a91d02b0d9e5795e2172694c0968242e89b44a41534bc098242522d6efbf1f6d947842820221b1efefa29b51b7c70f4be61ff0aa9fd1eee8757720f23976e00cd0ddaaf4107519f7826a5182ef61ee5450bcd9b559d43f1ca2946db5a59f099320600abd4ef7e640b690974f6451f1952004fb7858a30490a491083ab9df8f8c3305cbecdaec453a0265b28137a4bad8a6667b336", 0xc8}, {&(0x7f0000006d80)}, {&(0x7f0000006dc0)="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", 0xfe}], 0x6, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000006f40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008000)=[{&(0x7f0000006fc0)="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", 0x1000}, {&(0x7f0000007fc0)="5a75931782dc34173eeaecd25417ef97ecb6cef0097cc5", 0x17}], 0x2, &(0x7f0000009200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000000200000000000000026260d9901000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40000}}], 0x9, 0x4014) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:24:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:24:49 executing program 2: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='syscall\x00') r2 = syz_open_pts(r1, 0x80) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x81, 0x6, 0x40}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000001c0)) pread64(r1, &(0x7f0000000000)=""/192, 0xc0, 0x9) r3 = signalfd4(r1, &(0x7f0000000100)={[0x5]}, 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x1, 0x1, 0x8, 0x3}}) 11:24:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) pipe(&(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2687.256925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12323 comm=syz-executor.6 [ 2687.261031] FAULT_INJECTION: forcing a failure. 11:24:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, 0x0, 0x0, 0x9) [ 2687.261031] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.272323] CPU: 1 PID: 12314 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2687.274367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.275379] Call Trace: [ 2687.275709] dump_stack+0x107/0x167 [ 2687.276158] should_fail.cold+0x5/0xa [ 2687.276628] ? create_object.isra.0+0x3a/0xa20 [ 2687.277189] should_failslab+0x5/0x20 [ 2687.277655] kmem_cache_alloc+0x5b/0x310 [ 2687.278205] ? mark_held_locks+0x9e/0xe0 [ 2687.279469] create_object.isra.0+0x3a/0xa20 [ 2687.280772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.282309] kmem_cache_alloc_bulk+0x168/0x320 [ 2687.283663] io_submit_sqes+0x6fe6/0x8610 [ 2687.284939] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2687.286444] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2687.287829] ? find_held_lock+0x2c/0x110 [ 2687.288992] ? io_submit_sqes+0x8610/0x8610 [ 2687.290263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2687.291649] ? wait_for_completion_io+0x270/0x270 [ 2687.293029] ? rcu_read_lock_any_held+0x75/0xa0 [ 2687.294275] ? vfs_write+0x354/0xb10 [ 2687.294732] ? fput_many+0x2f/0x1a0 [ 2687.295178] ? ksys_write+0x1a9/0x260 [ 2687.295645] ? __ia32_sys_read+0xb0/0xb0 [ 2687.296143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 11:24:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2687.296782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.302359] do_syscall_64+0x33/0x40 [ 2687.302816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.303441] RIP: 0033:0x7f61c5901b19 [ 2687.303902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.306148] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2687.307088] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2687.307954] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2687.308824] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.309691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.310576] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:24:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:24:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) fallocate(r0, 0x2, 0xfff, 0x400) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x344, 0x19, 0x800, 0x70bd2d, 0x25dfdbff, {0xa}, [@typed={0xe, 0x83, 0x0, 0x0, @str='net/snmp6\x00'}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x55, 0x20, 0x0, 0x0, @binary="2e6642011414d84ea4f8a1f4fe74e3d915a01aa637dd17837b68d9d9d5fb594f3c77d203d1c1c57225c95144837971af8d911186fcec1594ac4f6b2fc4a2ed27b08dfe58df1a6ff12108b37ab433711a3e"}, @generic="68eb086bfd320f6be094c1e7e0d50716f2937ff07e66d37d1aeff1dca6ce6c74c84e1dccc3b09a5f2bb1f44877faff9feef0f0287e8421b2b85a9b34dd013cda0a04f9c86666e0fa35a36897a00a8231f33544e5d318b61065197f8471b64aaa5f6711ec847c9a06b7e96b1b3f276bb41fbd8b54cecca6a0b1cd7b2a494cad4ffa170599fcd47eb29828dbafc1638b", @generic="1ede425d05ff4c28e71bc2a085e96fa7470e081c7008b1a9079f13fe8faf8bd08570eece40d5e6eb86106c6895fcb5382f94a50ab48832c184ecf9b4a644d7c4557268fcd5013c146489d812205d47f6f5b59a691c4f10f665fec280bf4a33b5d24d164aaab1cdfeb11787392a6c4056ae05c3e2f92ba5e293ac04cf3fa9b94397d61e0ac66b7654d1fd96917e7adf19ba8d8ae86662aa2742e4c675549404e72fdad5a3ae7c272b35af62968719bfe197c01b4e26a36664ec342d2ef2cbf5f8ef558281ced988dabecf12f0ce690aff505fc768bc9cdb5a16210522b8ce9cdb7bfd5cf8", @typed={0xac, 0x46, 0x0, 0x0, @binary="4e23e6dab74211462164b5b69de4ba31862aecfb96362684e6a9e835124078b45dd7933cfb9f373419c13216ab51c8afa3821e16fc4bf987f646f63a640c2e162b5d3e00d26de533d9e96f10d1c0e809cb66be6943f53acc1408fff8db5611d9901beb8ab0ad7d33f5cb99065a27667658464a63b74cdf3b9696ce6060d23f0d0d8a3e8cfce03341b22b9b12791039f8a30437c5d34046fd3ae4e2e7c325221c70ac1a6316a7ed26"}, @generic="a96bfe10035915ef3b39c9e1b28ae84154535e9e7791d62db42a8d8e7c05793ac79412754ec041e20866efa0ffbe5ab6fe64ed8891ecae6d4ac29fa41907c1fc8af0cfc59ae5d78ccc36bdef7296801db9a83eadf657d1ec2fe79a0448583678d41e26d345989211de462423a18fc1a2dd8298ec0ae731399fbe24f02c192848845e87768ea4a1151fbba6cf0cdc761263b5341f1c24cde5b714c61db2ab5a22"]}, 0x344}, 0x1, 0x0, 0x0, 0x4840}, 0x800) 11:24:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, 0x0, 0x0, 0x9) [ 2687.390504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12341 comm=syz-executor.6 11:25:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 11:25:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 11:25:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xbe62}}, './file0\x00'}) dup3(r1, r0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x1, 0xb0, 0x2, 0x2, 0x1}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:25:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6975, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = memfd_create(&(0x7f0000000280)='d\x02\xb8^(<%\xd1\\\xcc\xc6\xd3\x84\xf8\xc8\xb9\xb0hn|%\x81\xe50eR\x8b3\x04\x00\x00\x00\xbf\xa85P', 0x3) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000200), &(0x7f0000000240)=0x4) 11:25:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, 0x0, 0x0, 0x9) 11:25:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002940)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002a80)="ade11e55bb066fee25690669cc4b77d0a080b7a911425d505ad8dff546f6f71d7ce746d3ea503a46864f63c3be20dc183350e5b61ed78cac2ca18398bae0dd102e22d4d84d4fc953babbce7b5a8823bf5ea894ccb8", 0x55, 0xc4, 0x1}, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) connect$inet6(r2, &(0x7f0000002a40)={0xa, 0x4e21, 0xffffffff, @local, 0x4b4f}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) clock_gettime(0x0, &(0x7f00000029c0)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000002980)="a1605a308f4828bb952e146e022433", 0xf, 0x80000001, &(0x7f0000002a00)={r3, r4+60000000}) readv(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f0000002880)=[{&(0x7f00000002c0)="4513dad08ec0059718eeb89308a219c262b45d049bc8db52d60df7d52e55f09073208c98f8834f90e5eba34c3f6fb7668b0c8353a0423843e6c0696b19e9d32da796a3ab5eeb273d2fe9371dc4075c6e581b3749e8e532c6f9e9f6677c7fb88bc90f4074441bb4613c933449d982ed512a8fc9f69fa68e64585d7d3a874d27cc049c510a16ca711572d036cedf211632dfb8a8d66859d93e8f", 0x99}, {&(0x7f0000000040)="5e3ac5ee31df0e2c718d23e5c1d53df04443c1e5118405d4fff9a6e0c51ffbb45a01ce7385289708ca24cb191ba3b95fe4bff28bf29417902ee9c918d89724", 0x3f}, {&(0x7f0000000480)="44b95cf27c674dd0db8c48c62d01af9c95288d2b217807c8bd489be2e539c7b45d9643d5b6e576d7add19e9b33fdf38df315156aa48aac216056f4a08ede7e7b468fac1afdd45695ff57e28d067c1e9a3ec5856219f9d4dd31071ec0861ab21e9cf2959f375816bd3169baf03426a128cdb366e8a99da3eaafbb8795c86a03b55752791b92d7da30b8b021f36d0cf260643af62f2e540a872a9ff122f30303a6c6b13ba23d4065f0f6d45541f13cd0b822de873c7c42266763b6b51d4c396d45e71f943f", 0xc4}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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", 0xfd}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000380)="1a33e2f27d227194aa95659c040b8d3b2eacaaa5d40d7be4a94c02d48a80aa0d7c91f248b3ab91a078b71d89e5a91abfe0fe22914c223deabf6e9c1af1a36fcc4e3784ea41a14a548144ecae706482259f4f0197a0e8305c839ad36d725172c6ca6df5df28ac3d724d126051d7d4d618e55f2a419c058010a700d632b87d6391b643ed197cdc32b6c63ba03996aa6701dc8911a2a8b6baea7217dd1c820877f15366a00722aa496d8ca9bdb08dafa34e00c05cee17277abb", 0xb8}, {&(0x7f0000000580)="854075a694097c2ae466b5d1aa893916a63cda9a155840fc8b9fab2dde3a483e59d28a4fa65dbecfe17e8858cefc253d4d51e684580e972f9c193759faaf964dc3ec3f0165", 0x45}, {&(0x7f00000027c0)="3669e855da740336b7d40642daf0c915ae5cf8bfe49277ede15b3d180ea5f2298b7629cab0fb256fa42aab61716a50758c3c79227e4c00dc51ebda511c4130cc1ed974190ceb5d70ccfd3a9bb459553ade4e126b3514ec085163cf902f932727a415c7f59e586aedc6d3f20b4aa3613fb7e25b49b497fdb12ddd40dbdf956d80ca6a7a52924ed91e979004fc2247", 0x8e}], 0x9, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x1, 0x12) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2701.241463] FAULT_INJECTION: forcing a failure. [ 2701.241463] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.247017] CPU: 0 PID: 12351 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2701.247864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.248874] Call Trace: [ 2701.249199] dump_stack+0x107/0x167 [ 2701.249645] should_fail.cold+0x5/0xa [ 2701.250114] ? create_object.isra.0+0x3a/0xa20 [ 2701.250707] should_failslab+0x5/0x20 [ 2701.251175] kmem_cache_alloc+0x5b/0x310 [ 2701.251671] ? mark_held_locks+0x9e/0xe0 [ 2701.252168] create_object.isra.0+0x3a/0xa20 [ 2701.252707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.253332] kmem_cache_alloc_bulk+0x168/0x320 [ 2701.253893] io_submit_sqes+0x6fe6/0x8610 [ 2701.254416] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2701.255114] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2701.255747] ? find_held_lock+0x2c/0x110 [ 2701.256277] ? io_submit_sqes+0x8610/0x8610 [ 2701.256849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2701.257481] ? wait_for_completion_io+0x270/0x270 [ 2701.258126] ? rcu_read_lock_any_held+0x75/0xa0 [ 2701.258799] ? vfs_write+0x354/0xb10 [ 2701.259287] ? fput_many+0x2f/0x1a0 [ 2701.259772] ? ksys_write+0x1a9/0x260 [ 2701.259808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12364 comm=syz-executor.6 [ 2701.260241] ? __ia32_sys_read+0xb0/0xb0 [ 2701.260260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.260277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2701.263558] do_syscall_64+0x33/0x40 [ 2701.264057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.264725] RIP: 0033:0x7f61c5901b19 [ 2701.265231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.267680] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2701.268676] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2701.269611] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2701.270540] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2701.271507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2701.272435] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2701.285481] FAULT_INJECTION: forcing a failure. [ 2701.285481] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.287067] CPU: 1 PID: 12353 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2701.287966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.289031] Call Trace: [ 2701.289384] dump_stack+0x107/0x167 [ 2701.289853] should_fail.cold+0x5/0xa [ 2701.290363] should_failslab+0x5/0x20 [ 2701.290872] kmem_cache_alloc_bulk+0x4b/0x320 [ 2701.291462] io_submit_sqes+0x6fe6/0x8610 [ 2701.292033] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2701.292671] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2701.293308] ? find_held_lock+0x2c/0x110 [ 2701.293829] ? io_submit_sqes+0x8610/0x8610 [ 2701.294406] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2701.295047] ? wait_for_completion_io+0x270/0x270 [ 2701.295681] ? rcu_read_lock_any_held+0x75/0xa0 [ 2701.296284] ? vfs_write+0x354/0xb10 [ 2701.296767] ? fput_many+0x2f/0x1a0 [ 2701.297238] ? ksys_write+0x1a9/0x260 [ 2701.297725] ? __ia32_sys_read+0xb0/0xb0 [ 2701.298260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.302981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2701.303655] do_syscall_64+0x33/0x40 [ 2701.304146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.304798] RIP: 0033:0x7f2aef7e0b19 [ 2701.305289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.307679] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2701.308668] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2701.309554] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2701.310450] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2701.311382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2701.312314] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:25:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x0) 11:25:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x0) 11:25:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 11:25:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 11:25:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) [ 2714.485934] FAULT_INJECTION: forcing a failure. [ 2714.485934] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.487373] CPU: 1 PID: 12380 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2714.488220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.489231] Call Trace: [ 2714.489560] dump_stack+0x107/0x167 [ 2714.490005] should_fail.cold+0x5/0xa [ 2714.490473] ? create_object.isra.0+0x3a/0xa20 [ 2714.491040] should_failslab+0x5/0x20 [ 2714.491518] kmem_cache_alloc+0x5b/0x310 [ 2714.492016] create_object.isra.0+0x3a/0xa20 [ 2714.492550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2714.493172] kmem_cache_alloc_bulk+0x168/0x320 [ 2714.493731] io_submit_sqes+0x6fe6/0x8610 [ 2714.494254] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.494865] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.495471] ? find_held_lock+0x2c/0x110 [ 2714.495969] ? io_submit_sqes+0x8610/0x8610 [ 2714.496501] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2714.497091] ? wait_for_completion_io+0x270/0x270 [ 2714.497681] ? rcu_read_lock_any_held+0x75/0xa0 [ 2714.498245] ? vfs_write+0x354/0xb10 [ 2714.498705] ? fput_many+0x2f/0x1a0 [ 2714.499173] ? ksys_write+0x1a9/0x260 [ 2714.499635] ? __ia32_sys_read+0xb0/0xb0 [ 2714.500131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2714.500765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2714.501389] do_syscall_64+0x33/0x40 [ 2714.501839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2714.502457] RIP: 0033:0x7f2aef7e0b19 [ 2714.502907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.505143] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2714.506061] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2714.506918] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2714.507791] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.508652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.509516] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:25:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) rt_sigtimedwait(&(0x7f0000000140)={[0x6]}, &(0x7f00000002c0), &(0x7f0000000180), 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7f81, &(0x7f0000000240)={0x0, 0x2c22, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r2, 0x10000000) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000001c0)={0xffffffff, 0x30, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:25:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/169, 0xa9}], 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x81, 0x7, 0x1f, 0x5, 0x0, 0x2, 0x60200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe02, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x1000, 0x0, 0xde, 0x0, 0x1000, 0x9, 0x2, 0x0, 0xc8e, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r0, 0x9) 11:25:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r7 = fsmount(r3, 0x1, 0x1) io_uring_enter(r7, 0x6051, 0xe28b, 0x2, 0x0, 0x0) 11:25:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/1569], 0x621) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x12402, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000000240)={0x0, 0x37db, 0x4, 0x3, 0x23, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x0) 11:25:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x0, 0x0, 0x33, 0x0, "2a7e5d1307a791fa7ff38978a13b821302249b07c242b8c2ffa50a3ff45b8083a30dcfc5d954f86bd911ed921dc09d3bb59561cfb97f483c5ee69d31399ed2826af661e1e31fd1e02327c8320ccf3620"}, 0xd8) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x4df05333, @loopback, 0x1}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x400000) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000001c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) [ 2714.593599] FAULT_INJECTION: forcing a failure. [ 2714.593599] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.594986] CPU: 1 PID: 12390 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2714.595891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.596890] Call Trace: [ 2714.597213] dump_stack+0x107/0x167 [ 2714.597653] should_fail.cold+0x5/0xa [ 2714.598122] should_failslab+0x5/0x20 [ 2714.598583] kmem_cache_alloc_bulk+0x4b/0x320 [ 2714.599148] io_submit_sqes+0x6fe6/0x8610 [ 2714.607398] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.615486] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.619117] ? find_held_lock+0x2c/0x110 [ 2714.619612] ? io_submit_sqes+0x8610/0x8610 [ 2714.620140] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2714.620723] ? wait_for_completion_io+0x270/0x270 [ 2714.621306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2714.621871] ? vfs_write+0x354/0xb10 [ 2714.622322] ? fput_many+0x2f/0x1a0 [ 2714.622763] ? ksys_write+0x1a9/0x260 [ 2714.623249] ? __ia32_sys_read+0xb0/0xb0 [ 2714.623744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2714.624378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2714.625007] do_syscall_64+0x33/0x40 [ 2714.625456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2714.626075] RIP: 0033:0x7f61c5901b19 [ 2714.626524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.628764] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2714.629689] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2714.630552] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2714.631428] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.632296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.633159] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 11:25:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 11:25:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r3 = fcntl$dupfd(r1, 0x406, r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0xa5, @mcast2, 0x8}, 0x1c) readv(r0, 0x0, 0x0) copy_file_range(r1, 0x0, r3, &(0x7f00000001c0)=0x400, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x6, 0x0, 0xffffffffffffffff, 0x0, r1, 0x2, 0x0, 0x1, {0x0, r6}}, 0x6014) syz_io_uring_setup(0x2002, &(0x7f0000000200)={0x0, 0x54d1, 0x8, 0x3, 0x11a}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xbe62}}, './file0\x00'}) dup3(r1, r0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x1, 0xb0, 0x2, 0x2, 0x1}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:25:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd=r5, 0x9, 0x0, 0x893, 0x0, 0x0, {0x0, r6}}, 0xfff) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:29 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 2727.876538] FAULT_INJECTION: forcing a failure. [ 2727.876538] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.879826] CPU: 1 PID: 12419 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2727.880623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.881581] Call Trace: [ 2727.881894] dump_stack+0x107/0x167 [ 2727.882339] should_fail.cold+0x5/0xa [ 2727.882806] ? create_object.isra.0+0x3a/0xa20 [ 2727.883362] should_failslab+0x5/0x20 [ 2727.884398] kmem_cache_alloc+0x5b/0x310 [ 2727.885598] ? mark_held_locks+0x9e/0xe0 [ 2727.886812] create_object.isra.0+0x3a/0xa20 [ 2727.888152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2727.889646] kmem_cache_alloc_bulk+0x168/0x320 [ 2727.890983] io_submit_sqes+0x6fe6/0x8610 [ 2727.892240] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2727.893706] __do_sys_io_uring_enter+0x6b2/0x1890 11:25:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x204040, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x210040, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@fowner_gt={'fowner>', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role}, {@dont_appraise}]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x1, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x1, 0xfff, 0x908, 0x5}) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r4 = dup3(r0, r0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1940000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}, {@aname={'aname', 0x3d, ']-/#,/'}}], [{@subj_user={'subj_user', 0x3d, 'net/snmp6\x00'}}, {@pcr={'pcr', 0x3d, 0x4}}]}}) [ 2727.895108] ? find_held_lock+0x2c/0x110 [ 2727.897981] ? io_submit_sqes+0x8610/0x8610 [ 2727.898494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2727.899054] ? wait_for_completion_io+0x270/0x270 [ 2727.899862] ? rcu_read_lock_any_held+0x75/0xa0 [ 2727.901225] ? vfs_write+0x354/0xb10 [ 2727.902304] ? fput_many+0x2f/0x1a0 [ 2727.903369] ? ksys_write+0x1a9/0x260 [ 2727.904537] ? __ia32_sys_read+0xb0/0xb0 [ 2727.905730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2727.907305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.907977] do_syscall_64+0x33/0x40 [ 2727.908415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2727.909016] RIP: 0033:0x7f2aef7e0b19 [ 2727.909455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.911623] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2727.912519] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2727.913355] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2727.914183] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.915008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2727.915840] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:25:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) [ 2727.997461] FAULT_INJECTION: forcing a failure. [ 2727.997461] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.998836] CPU: 1 PID: 12408 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2727.999653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.000661] Call Trace: [ 2728.000989] dump_stack+0x107/0x167 [ 2728.001433] should_fail.cold+0x5/0xa [ 2728.001886] ? create_object.isra.0+0x3a/0xa20 [ 2728.002420] should_failslab+0x5/0x20 [ 2728.002862] kmem_cache_alloc+0x5b/0x310 [ 2728.003335] ? mark_held_locks+0x9e/0xe0 [ 2728.003945] create_object.isra.0+0x3a/0xa20 [ 2728.004455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2728.005048] kmem_cache_alloc_bulk+0x168/0x320 [ 2728.005582] io_submit_sqes+0x6fe6/0x8610 [ 2728.006081] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2728.006659] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2728.007219] ? find_held_lock+0x2c/0x110 [ 2728.008233] ? io_submit_sqes+0x8610/0x8610 [ 2728.008742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2728.009305] ? wait_for_completion_io+0x270/0x270 [ 2728.009870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2728.010409] ? vfs_write+0x354/0xb10 [ 2728.010843] ? fput_many+0x2f/0x1a0 [ 2728.011267] ? ksys_write+0x1a9/0x260 [ 2728.012607] ? __ia32_sys_read+0xb0/0xb0 [ 2728.013084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2728.013698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2728.014298] do_syscall_64+0x33/0x40 [ 2728.014753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2728.015349] RIP: 0033:0x7f61c5901b19 [ 2728.015804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2728.017927] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2728.018816] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2728.019655] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2728.020484] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.021307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2728.022134] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:25:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r1, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd3db}}, './file0\x00'}) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x64}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x5a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xfffd}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r12, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 11:25:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x70}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xd1d, 0x0, &(0x7f0000000200)="dcd59babb15cd3457edc6624aeb9f65750cecdf54d341c651006250ed7ce55d9a22392583e58419c928fecb81ab78f20e9f491de9b9da195ce5c45dfa6a5e34c6186c8431d1d150da1da5f2c53be451e163c16542700a049a19f467a20244d808642027f133d7162dc06e03bc4277be9c670572cb1ef4387478e23d15b1a8f92a0ee91dc3aa9c622a68e6fed9876a0103f7f4179c72797a47aa02af7b947ad1f1f3e5254a8a4251858867f6e9b0ecaf77481dbafa27cf45a0351744467afcd402c3a96d68da1ea", 0x101, 0x0, 0x1, {0x3, r5}}, 0x400) 11:25:30 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000240)=""/77, 0x4d}, 0x0, 0x40, 0x1, {0x0, r13}}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r14, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r1 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001980)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@l2={0x1f, 0x6, @none, 0x3ff, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)="6f6cfe9b24fae0d6d19ff5e18f9813d58c1643c2a00774b332e8d61a1a15a0385def52aecdbf669ad372a486fa15", 0x2e}, {&(0x7f0000000240)="396e80f5bebce25b62f8d7a8deb367ca8cbc7bf571d952a0bf8146a7bcf95f02eeeac21f531f240b9882ec8cddeaf95c9b1c85b89f05f82fd4a08e22fe4520f3a7699c1fc72f41aa2e45c7471805621436aa4de8f6c8b659b3e6e458ec4984703aa608d3b3246e15ef85ea05f97fe8ba9b15bcb86063923ca95a32d265c4e44e4669e50740", 0x85}, {&(0x7f0000000100)="a5deb1e74f010af8026ab4f4eb236ef016788501d1ef7e363f09f2", 0x1b}, {&(0x7f0000000300)="bca6225f", 0x4}, {&(0x7f0000000340)="278e3754c074aa9285475f5089d42bd53f75", 0x12}, {&(0x7f0000000380)="dc0e4bfeb5640f3d7e5d2eed08e271a74a308d6996f62f273a24e3d0a8f2e0aafa7693cb64c222b7525d3c58f5b06d1358dee95f6d4c64a75e", 0x39}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000003c0)="7cb71301a06a691ba1b8789f58e5bb0cdb", 0x11}, {&(0x7f0000000480)="32985cb0ed659e89672a830f01db5804b25cdf1a2b9356de6d7a98fd980825073ef78123e52490600e2c8f55f37e7403d8c2db1e54ab78e6544a00e89c7d07057d91083bcbf5b6b0ab4b0df15835d8117e4cf2f245f28bd2861d9d68bd1bf80811cdc09f109be0d8917438734f7562bb9ea91b18977c149dc5bda077b3e05e87d9e28eecd8702afee1161a9b2fe6fcc40bcd29f3e43b361ada9344fa73751369d410d4c5dcdb9e63e3d37aa3d2bda5990ecf81f4cb710ceddc7d7d786cc96a0919337e9d144052b543e9fea14f9a17", 0xcf}, {&(0x7f00000016c0)="c90fcce607bf68efee0a5902fffa06edd7730e09e482690aee2f049c7ca406477ad8746f1d749bc40b78d9b749160ba718ef21424a269e22643d25e44e7cdf4474f9ac9979444706fe8619222b633ad5316e7501c206891606783204568088e85af152e0cc80b1562114d0d82b3fa44fdd01c77eb38edeeb6160072667d253679dfa70874fc6a0002c1844e60b5c11ac2492c159487aafc73f8a737fb1064444c9f13c463b914c45ce846cb338c88dba61738df724ed99830cd280595f1e64eb3e9901ef67ebb9b1fd69aa20dee0627c15c621c29df60dd277daf2d5", 0xdc}], 0xa, &(0x7f00000017c0)=[{0x70, 0x125, 0x3ff, "109f1e83e5384b45cb784554af7b445f19e2304720c73e9e15ea1beb02087838d3288d128e40e6dc1c70b40638e53c8fc84b137aa4576b6050b45ebeff3c01effd2b0d95a14408dc7f838f0c6e6a4116d66065cb4e3bf114a5052c9643"}, {0x78, 0x29, 0x401, "c9fe49cd739551f092bc18ad8b41c6679ecbe4daccaa0d6b7eba401e0b749af83dacfdf6996bb0178b5f0e11b7f1240f2ef39cebbeb8f0c74f261738b5f548c4d7929886effdc668ae16cca749bedb9ac103e0b6108b68d8b61e06dd79379a6ca94f87"}, {0xd8, 0x10e, 0x80000000, "a2569e82325c2d556f5ab9ac952414aa3a35f5eadee78dbe487d92c6e025b784552215f4989ad5ecd314bddc90d06c0d818b92f4d37414864ae9104882c74e65e1fb5e4119bb486d53fd1d6761fb5b8398895f2e55d6194cfdb0042c7672136180ee2d5aa046b4be8494bc1f6880d5e8d9bc7dc8c8196f7f8c116c604be42e067dcf1ea6cfb3470a25a2476d8bb72adf1ffe072b914a8e14cec1c07fef64c63e3f67657aeed4ba0f296401da8c49504d3e415514fae573c2fc8cc00567bd2ed8d71d21fb7ad6"}], 0x1c0}, 0x0, 0x20004000, 0x1, {0x0, r9}}, 0x8) 11:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 11:25:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:25:43 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 11:25:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 11:25:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r1, 0x8000000) r3 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}, 0x0, 0x4004040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd=r8, 0x800, 0x2, 0x5, 0x7, 0x1}, 0x200) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 11:25:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:43 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082abd7000ffdbdf255e000000080022017af5ffff040018013b00000008002600000000000500190106000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x80) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100006d00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r1}}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2741.147578] FAULT_INJECTION: forcing a failure. [ 2741.147578] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.149014] CPU: 0 PID: 12454 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2741.149810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.150805] Call Trace: [ 2741.151114] dump_stack+0x107/0x167 [ 2741.151543] should_fail.cold+0x5/0xa [ 2741.152023] ? create_object.isra.0+0x3a/0xa20 [ 2741.152554] should_failslab+0x5/0x20 [ 2741.152994] kmem_cache_alloc+0x5b/0x310 [ 2741.153465] ? mark_held_locks+0x9e/0xe0 [ 2741.153938] create_object.isra.0+0x3a/0xa20 [ 2741.154444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.155034] kmem_cache_alloc_bulk+0x168/0x320 11:25:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000240), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:43 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rpc\x00') pread64(r1, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2741.155565] io_submit_sqes+0x6fe6/0x8610 [ 2741.156076] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2741.164459] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2741.165019] ? find_held_lock+0x2c/0x110 [ 2741.165494] ? io_submit_sqes+0x8610/0x8610 [ 2741.166002] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2741.166562] ? wait_for_completion_io+0x270/0x270 [ 2741.167118] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.167657] ? vfs_write+0x354/0xb10 [ 2741.168100] ? fput_many+0x2f/0x1a0 [ 2741.168524] ? ksys_write+0x1a9/0x260 [ 2741.168964] ? __ia32_sys_read+0xb0/0xb0 [ 2741.169435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.170039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.170633] do_syscall_64+0x33/0x40 [ 2741.171062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.171651] RIP: 0033:0x7f61c5901b19 [ 2741.172093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.174208] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2741.175087] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2741.175907] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2741.176751] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.177577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.178398] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2741.212636] FAULT_INJECTION: forcing a failure. [ 2741.212636] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.213971] CPU: 0 PID: 12465 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2741.214768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.215723] Call Trace: [ 2741.216054] dump_stack+0x107/0x167 [ 2741.216479] should_fail.cold+0x5/0xa [ 2741.216920] ? create_object.isra.0+0x3a/0xa20 [ 2741.217447] should_failslab+0x5/0x20 [ 2741.217886] kmem_cache_alloc+0x5b/0x310 [ 2741.218353] ? mark_held_locks+0x9e/0xe0 [ 2741.218823] create_object.isra.0+0x3a/0xa20 [ 2741.219328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 11:25:43 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"e118a28d844170a524b9a4069b14c3ac", 0x0, 0x0, {0x8, 0xa21}, {0x1000000000000000, 0x1}, 0x4, [0x10001, 0x5d8c, 0x100000000000000, 0x7ff, 0xfffffffffffffffb, 0x5, 0x8001, 0x9, 0x4b0, 0xffffffff80000001, 0x7fffffff, 0x0, 0xfffffffeffffffff, 0x5, 0x9a7b, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)=r3) fcntl$setown(r0, 0x8, r1) r4 = syz_open_procfs(r1, &(0x7f0000000140)='wchan\x00') pread64(r4, &(0x7f0000000000)=""/192, 0xc0, 0x9) [ 2741.219914] kmem_cache_alloc_bulk+0x168/0x320 [ 2741.220466] io_submit_sqes+0x6fe6/0x8610 [ 2741.224178] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2741.224758] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2741.225315] ? find_held_lock+0x2c/0x110 [ 2741.225786] ? io_submit_sqes+0x8610/0x8610 [ 2741.226288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2741.226846] ? wait_for_completion_io+0x270/0x270 [ 2741.227403] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.232097] ? vfs_write+0x354/0xb10 [ 2741.232531] ? fput_many+0x2f/0x1a0 [ 2741.232953] ? ksys_write+0x1a9/0x260 [ 2741.233393] ? __ia32_sys_read+0xb0/0xb0 [ 2741.233866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.234470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.235071] do_syscall_64+0x33/0x40 [ 2741.235502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.236110] RIP: 0033:0x7f2aef7e0b19 [ 2741.236543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.238662] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2741.239545] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2741.240393] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2741.241218] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.242042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.242867] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:25:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') flistxattr(r0, &(0x7f0000000040)=""/63, 0x3f) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) socketpair(0x1f, 0x80000, 0x0, &(0x7f0000006540)={0xffffffffffffffff}) getsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000006580), &(0x7f00000065c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file0\x00'}) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) fcntl$getown(r4, 0x9) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) syz_open_procfs(r1, &(0x7f0000000140)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000180)=""/209, 0x44, 0x80000001) 11:25:56 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) [ 2754.196342] FAULT_INJECTION: forcing a failure. [ 2754.196342] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.197830] CPU: 1 PID: 12490 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2754.198695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.199727] Call Trace: [ 2754.200067] dump_stack+0x107/0x167 [ 2754.200546] should_fail.cold+0x5/0xa [ 2754.201031] ? kvmalloc_node+0x119/0x170 [ 2754.201550] should_failslab+0x5/0x20 [ 2754.202035] __kmalloc_node+0x76/0x420 [ 2754.202529] kvmalloc_node+0x119/0x170 [ 2754.202993] seq_read_iter+0x9d6/0x12b0 [ 2754.203471] ? lock_acquire+0x197/0x470 [ 2754.203947] seq_read+0x3dd/0x5b0 [ 2754.204395] ? seq_read_iter+0x12b0/0x12b0 [ 2754.204914] ? fsnotify_perm.part.0+0x22d/0x620 [ 2754.205458] ? security_file_permission+0xb1/0xe0 [ 2754.206020] ? seq_read_iter+0x12b0/0x12b0 [ 2754.206514] vfs_read+0x228/0x620 [ 2754.206924] __x64_sys_pread64+0x201/0x260 [ 2754.207418] ? ksys_pread64+0x1b0/0x1b0 [ 2754.207883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2754.208529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.209187] do_syscall_64+0x33/0x40 [ 2754.209663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2754.210313] RIP: 0033:0x7fd243eaeb19 [ 2754.210785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.213135] RSP: 002b:00007fd241424188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2754.214092] RAX: ffffffffffffffda RBX: 00007fd243fc1f60 RCX: 00007fd243eaeb19 [ 2754.214988] RDX: 00000000000000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 2754.215886] RBP: 00007fd2414241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.216828] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 2754.217730] R13: 00007ffd753c588f R14: 00007fd241424300 R15: 0000000000022000 11:25:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 11:25:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) (fail_nth: 1) 11:25:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc571}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44003) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="ff0000002e2f66296c653100"]) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c00037, r9}) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000140)={@mcast1, r9}, 0x14) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000006e1966216c653100"]) sendmsg$inet6(r2, &(0x7f0000000300)={&(0x7f0000000140)={0xa, 0x4e24, 0x3f, @remote, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="821bdf2184dd79f62b180100163613bb5e5f9c34e43051b1732e9045ea04813cec383d18e886d8c4a64a57b8dbcd3bf7603ba935fa13f5f47406797173868f4987d36c18453d93f37d08e5897d52e6341c134a47b6ba8771e10836c96b358a582640e75ebb3d", 0x66}, {&(0x7f00000006c0)="785fd2b4be033d57d33d02e244dde7ba0ac308be2588529566517808cfeee27c4cf920d8bcd02ed56c235df2fbbe93f52ac8e70865f00f8a7c057cfbe41b5628e3a4f8373e8546a44903ddb444f345052e429fac13bb59de52157d2042f3031f04dd79d793f5c027b62d58c3473b14d3131e09ec5a5289b3ce02bd8abc8354d8ba19ead8a8339d897855759c71b18059b6a7d077f8851f274c273b0eccb46bd0f86d4baecb7402b09ae164d89fd49ac62cb518516b408384bacfc433c1fad29729b3bff3f31c3ad5acac83f984c6916846e3262935992461dca7da3bd21d1fc14cd80a5127887871d511a408ce5a1063ddf07a2b2de18674cbdc11c84402c31841deac6c4c7d4e47ba7d993a51e5664cd02e2dc6c46eb5f587c8065f70cd50a2a97f4505329bbaa71015042661482e51261b727fce13db8259d712694da15d2c9cedc87e0c1e7672d26102fcf3a5f427e01244040aece4d12326498c9bef7eb0e47694e4919cb15dfd64a5b0a142fc95cd489a03a139d02e8576e9cf8f9904edff29068a3d60438a312e196f2abe158b853aa592db538d0867a47e66b4dc2f076cb567b4976507675ff9e978b1f386a55ce1caa6af8570f288696a2a96bf56027ba7d0754d1b2f06a159db685256be7760e51dbe4dc1c5bf9ff7046d663f8126126306da08a809b16c1708a162ec8476b674ffe9988e0a9351f6958182c4862965dd06b13ee93fe510ffc14219f676f2a987c8b0ed88698784d2652013158cb1a48909fa01bccef19fbdc21a546541561c1bf3cb947b238d13295a41b954c53737b099c5660230eecca18dccf1be8366636658fd086444b759301c3fa939816d86b2c703074744b70e25098d6a82aa8973ec34b96ce43217af766c759e84be498fed2056d3cf0f3c51e368e58d228f2fb6e7316b7a4ceabf8fad29fd8a81e6f9307d71e31722f8d70c4458c35afae25e490b617b6ff1435a7cdd1a2c6bb4128a82d6b85d9b6fac261fe02cb166aa92692185942ac7d7cefe095fe497eba72e79904bbdc5f2ea4a3e151594751ee79838cde2daff5f28d056d9a725d556cebd7ce40123cb5e9a3ea575b5ce35561c8ab2df7e2e72f1c26df9b5d433833cec8d9fa5697abbcd285e163407cbe9e7a57ed294cab33f94251eaa9879f8953774268d2f276d1a530dedf89fb831289bcab8a227b2dcc6a6ec76fccbde69d2cfb4d7c4440fd2a57b57abff34f36b6d250f85529bb3788c71bd3dcb7f1584795bba255309b8f26755268b422db49dcdbdcdd6e564016cee6aaf516913644cb686eb4e2b1c7e653e8af1bebd2092aa1da37fa8c60c74827bd0fbf31bfd55d1f4b2d8aac6d4def0f318214e41be228dbc6e674adfd21cd959966c9d329d09b0bb4b6b989292270fd18b0b61002c22ce0f550133b3b336dd991980f3b2e2937c49524eee05ed35967264668f2f4fc31fd7c8dc731a5daea8d250cf8dc60edfe064f4ac1f0659aff47c8e20c90f53913d86d9fa64ee84c228c87c92e8fe0d3975322869cb90369ba5bbe89dd78ac2a11a5b81bbebdd022e1105a95da13fee3539b3ed21f41e7f2e631bafe5d287fc8d2083c845a6814c0cc0c02ee4df30d19a137f83b2c12adba5ae794840aedc89412fd9de9c11416efc8387e279b49f6b87f5572283040d95fdc6d2f19b9e1e0aa1303d750951b292757c6ea3cfa918ee3dd2535625ec2f79d37889c314b2024006e33b775c621eb309975cd84a39feb72a972c412db0d9ccf373ad29a5a9ee1506ee3ddeda9a4e7ac4938a1e75caf1ad562059903cfa6331241af4bc115700f73b56d64435ac38114fb10663a8c10c0d6af08a8bda66f6f0150b4441fdf5ada73a90460f8715408beddabc535d1ed36f3728282d0773f53942881ab3c7d1fd14a2af9419c1a19972109a04e4b8f3b132e87671293e38cfdf25f970a0e80216f4bd6a8fcf78d3d39caea154de1ddf885b2f105c7056e44ceac7c88de98dfb13389c83fa24018455f58fe5439f67ea475681d7674e052a4169db17d794d07154579cb09121da252cbf72c46cbf689769fc737400f24cce96c1641af7c54fcede0b59abf763dc7788e3f15fe94601df3217c5803ef69cb06bd7a670ed82638d66b255f755f9171215da39e1de5d7b0ebd5262bc74292d06b7cddf021e7bdd32eb835873c3d8390307d8b3a0eaf0af2d5456c93009afeefc81160143ca27b2e97f2f9a265ef2d6ba3913ca6fa2b1de3093b657f6dbb2a71aa8689bbf65c7b55d4bf53d477e2a61bb262b16dca19aa679b49190eb01e208c78fcf0882ff6b73e8437451bf3e4d9d58967e87f74a3f2daf11f5d5225f3cee7f2d82902a2f75a82d321999b5e956d444690e128f4420d18b094cadcfab64f091bbf19a4acde077f2ade871dc582339e22d6f7ae1c134360f608991509eb315f8a55a228e745291ef94f61cf63c4599ce1aa3822449dca47f9f781fd82fa92406532d926ba829f5de6974479f5edb08de1f685a2d53663703f9eea8ac1ad8fd24a712a10cd379fb99195e83a0317d7bdf982c4a4da6ed24f5202856abc9e8c4697dda513d64fea3b26e5b3a04a766110daf8bad5e1b1560b0a1a9c7c6678ca2af872c867898485acd459aa495d4b64cf6946dfb25dddb91a70ba21697d8bb25c4ec4b450b98b3f1a771efe8662f378f40d9de800fe5a72c80f5ad64dc4b19b49349ac89cc394735da564b851c31e7522f0b1b5d4d7e8c947b9c6a41c2e3f1cac97eac962d420cf1ce9fabfb41e96d058904cb8c9e2e85d42824955ee206975b09c25269eb81a9374c041df4211f1687e99554fb776c9231194bc4077967922ae5b9e26b100ed6d7b8b83cfb1afd302e7afbe212d50b0f143c35ea4baeed64064947fa7f32c224d88b5b969e3acef5fe2ae31ad70dcb3b1165958cd283937e4c11a1fd474113f5bb03017ad44d0ea6604d4c6f393a8365ded5c933db78fb44177de455fb9be07fa2c763f6a11cbf7e9eb78ac00e64d513571720a85619be02bd03c4736f19a1ba0e7d2b6315da6f12be2c9da0ec30fc48e146fe3a20f1151e331156db224b369891abaf8fd4c3ce22d3eea6141b2c7d1777c891ae4261ced901fb97a6dac21434eae071dab2c0ec44acf1f5948838c7e986a5603097fd24f13594590d4e8b0aa26d189d76559d2fa3f0f2874a4ab42aae584941d93f545d0e95b46c267f2bed14bf6433e479f0d03bd793f4cb71b031df61e005650ba77eedc2e96b952de0b68301c124a6c7a3d1264733b9c2db4066f8333815ece63dede4eda48406a84c605d2aa55cb2830fc92c4d66b42322901eb8755b7b205303f732acb47adfdae2647844474910d23a54042236e53f834f0218829cb50ca2bcf5bda346ca2bcde1ded1ad7076a349889739e155300ec11607c6b02fa6810edfc3347b3c06eedd502ea0fa4fa1383fc758262be39c04393d609749325576563b4f71d15b1a2d8cb474d8e5bd62354417171ad0966893ccb89da6dbf58288718a7b1109993d3ba021ecb991f7954896c635b4320e73d91c3433362263c60153a1b6e4373a9e101683fb6088af95c7f6713bb03da0d0c973fdb881905bcf74a65de29a05553f8bf8b4bd22ae018c01a7f5158377c6b5f7345c668aac26578289ce3b2d2f098623ad5dea9e443855090e065374cd83f8807e15de91777569632beaa2f312064820343066f6702d98763a513326ada8968db4e6f179b4793195bfc09e5a4e6a3165714573daa4de33544670b1f3e78660a239991def3643fd4827dd07e34b83537750d40bc3c9b1a97acf1d852482c8ab402961b60c76c4837cb13b0b6fa40f3998a01abd035eac29f79315baed295c1b299262c8cbef0566b94f0219d41e940ad8ad6d72ab2306589762e19c3a3da739296b9d69cdff8f32b639ace569c688e9952552ccc5e2d2f29ac522c38ad2dd4eb93d949b73291a5ed729c44a3dabd547aa8b8731a2610135813592a28e8cfaeac8c3c09e43c80e3223fecce64a18d0d404833efed4a3499cac20b9722b1fb653d0d7d80b43e88612955d6c14e92939a977ac6b299df6aa59e354fb26798706d2bad16510c8d67593a41eb83ff610183dc46d6a6af33ad91ff93891e6e58e072c0da6d83ea713b9ca199134559e986c8d09ee99f6479492f58058f109544a00a775076e8c801e44d1fd7dc65032d8fca786238dd9fa53c0d556b6053f2ea5894fbde8a2323f9f14b9ccb388d35d34f487e90b7033753b66a9b042e73cfb2a4ea3cbeeb43422daca886777261618764496177a993d641ca0c7717e92d3104c638d22d385ea15f7384948d6159395e5ed0bda6eb16c80318c4fa2ee41df1bd313681362292d0d97e489a70bb0a4ab27c9358be9b0792f3b5e56c8ea348118588caaf039b6752137694bef4dd79da965bec76a54d33894f27d4e0806991c528af9031d7464ecbaf9c51f004036962bcfc691cb6f8e88beca63763b99333cb6bdc60f7220d4f5161a915ba9c774be16ee142ada6a907782df68c2d920e5a9222290ed0b1ecc2b6dbcfef6216bfae41c5a9320dba66e64fdaeb7bb0c4eb1edfdda6f8a5b6c15068e748555941654608d98d7eec0025b7dd61ed269003d647cbbe49496c08228606ab839afd18d49ca877e7ec5f39ff977fdd484445785fd4a98e02185bf7830a6b328a01d79ac8901772086fb2d3d908849c2212fdc5e9003bdf101169d3d367c5c8598459fa40816fdb0ddeb1581d5d55114f07bec89a8eae25361f3a128537e79bf6d149075cf9d48a14221cf42067c57f42a04111110626f86b47804feef4661ae505477cc51d6c727d1a48ea4a6064ebb2e475493e3c52226ba8f558b0dd151ccfc867508807d558791ca93b01ea8985fb63e7c62399fdecd42e502b275d35f09f1fe1f4535cfd25ccc0799764869211816e14b1d92746b222c4df141b6373b73415bd9c58da8fd161833f7c6d6084167947e8e25fc3aee95c4e494984003908fe9ecfb3592031427719d845a786ff5fdadba07c2979d158725f3cd612c7a9642a582c21ed530229587a7a84d522bfa74fdf6d37eebb8a7007043e3d06fd0285e7cede26532ee37b179ea210e70abb8c22f488786e104414b53a9dac9b5f8b01b9c58f3129fc06126e9786d3b66b79b1a86de932248e0eaab2e65f5552d1b73903d73da26a5a5475d928ee6b66b6f78edfef343b9ac6ca9db90e507b8d2b49e3245d65204378fecec5c457905053d0cb023c570aa8998d5e13281044a2640df02aba58b53ffe2059c95ac39d5ea0ac6dc57f904b961875acb5fe97cfe630262e737162281b3be4332b4f8bd7fc974019eea7df40c014465c3258a53cbbbed22d3c33d4602e4132803bf9f4e250fc3e2f952c20ce0deb525a5157dbc5185e62cf3f3cf2501a6b3f8a8a801993cc629294dfdb2d0740bd30a921fe314bd54e09f7fc9920c28df79507eee30463f4e46eefac77c2b46e2edd2cb473a6d4a6fdb63f17100d5d1516882bf114648d441b2cc3460f4def15d38a082aca9f19ee11adf3b37ff8b1c24bf0170a65ca286dd76de95bf1ad16b296297497330cb1c33c7f510339d974ccfa91d87c7a666dc8d24c88fae325ffaef19e24ddffd6dcc847efc7ac5b33a4047d13a170302c40ac67e340a06bcb79cb56f69b9149aaa281b4cb81731cfc6568f29af2b70ee8d2305b2bd912f8ca90546d6e4fdc20983ca511b41fe245f85748957ccf78eb93b7274544cd9113f9f80a2c3e06be9c151c4f86eccd4f7720742b0b011f1adaf", 0x1000}], 0x2, &(0x7f0000004440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1188}, 0x11) recvmsg$unix(r2, &(0x7f0000002980)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f0000002880)=""/146, 0x92}, {&(0x7f00000005c0)=""/86, 0x56}], 0x3, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}, 0x40) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x440, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x388, 0x0, @perf_bp={&(0x7f0000000340), 0xf}, 0x2010, 0x80000001, 0x9, 0x6, 0x4, 0x7fffffff, 0x40, 0x0, 0x4, 0x0, 0xd44}, r3, 0xe, 0xffffffffffffffff, 0x9) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000003f80)={0x0, 0x7c2f, 0x20, 0x4, 0x3, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000240), &(0x7f0000003f40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) clock_gettime(0x2, &(0x7f0000000040)) readv(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff0000002e2f66296c653100"]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f00000029c0)="43b29ae2deb144ea868ae82dfe9f0bb8106fde31cc9b1378139ad02d76be4fad2dd8f799b14f04ce20ff3fa6a86d3b54d955f336f16c31b2b968237b6e69d5214f36b01af5f489e3075ae12001ba62d86599347b5205e2d2adaf01ca77d654e80578a654cc", 0x65}, {&(0x7f0000002a40)="8f0b70c6e8dc9e92f78803762df3e6de009f346acd706b6058dda8feafb861ac47e186d416c8585be576ba51bab80a680d8304fa4bec3bde2c5f31b112d1c13dd69022fcc9dce9dc5fc54f1c9de4f9e208412783ae4ed154d34dda65fc031dad9e5d211e3e00500d522af2815174ed40f621c5224bfca5e850d95015b0667b8eaa953f49711c9ec2bc4682849353a9857b22a3a79d0c6ae937d9b10a0048765df142d1c8e6547a2d06bfe84345ece08f4e6248a53d79ffcbd3b48deb64e01fe515895700ca9c", 0xc6}, {&(0x7f0000002b40)="200dd353b97b9f252d5f27a4971048cb6e49a2175402399ac75edf5c3ba025a73e400773706941414709cc5bd6fbe4e580e508853c301f6ae008e269b617170f176208118775313fc1e0024ae59732cb84f779d29a153939ba7b45f719f6de66392f93b4da27450deecc437170db5cb0ee0ddced1b793761d95f991ab867b4bbf66a34e619f9026b3fdbb80e840432", 0x8f}, {&(0x7f0000002c00)="3769a8f2fd8432661f6387b92e04b44868dfeb5fd7b852ccf57c522bd30219ada65d4bf38a5dff697240db5e0a2d0defbe7e062508a8db993e9f558421b7f661cc28a588e553efef558b1231c0abccf74addeb9a0542340e6dbcbb411e88059a1d7c4a08dd3d5948d6a32acfb39180663ade0981d193a161e282a5a204529e8ba3360a57579ae6c83e2fc4f857", 0x8d}, {&(0x7f0000002cc0)="017b381f6a987c7e3bce9fa1e4d841201eb8b75befcb2a74076b668f0c54c4b1b1a499b444b93a0e7fa1b96445f006b01458155596317f67896f853a7187bebbe9e5034dcea25d35e9aecc3a4515165324873dbd2f9fef0fcefed34941f5e46a5fe2cfee26e663a3d6706ea06c2d624b37a79ddf890ddc05c495ac17fcbb4e45bb2b5087f39db99c3390cfe8120cadb2f7204098a7b93f27e3bdd4ad114abd6b675e68b3000e62f9b45e7bba8a6a5fbe02903f43fc99cbd7621a8932e3e70713ffb1228790277b729ea35d66050d8531f34dfa98", 0xd4}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="116dead25bcf8d7e87d59f66ffe18d9e851d1993193212290c98d4d1bd1f345adccbc7c6e24a12b0cc5c5a49630b9afb20f6b23448c40081254c9fdd5aedfc39b2471abd93f51719038998436a01b7b6f995106374d9e4785dac0128dc790b89cc273e2c1fdff107b07d7d4d8b1654c3e377a1c70f45b352ba4e2775ccab4e3fe881637fc40126158035b727261bbff4e6d5818045b4454c6e03539ca57a9430f8b7c50b2d5d1741ce97113b160fac4742676d6641c379870250dc9c927f5ee04601f5c298879cbdb54d1cf3c084bad08907d80f48a6aa48726f9bfdd84fd6370fe03ebb4c8172", 0xe7}], 0x7, &(0x7f00000041c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x1, 0x3f, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x2b, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x40, {0x2, 0xe, 0x18, 0xac, [0x80000001, 0x10000, 0x7, 0x200, 0x20, 0x1, 0x4]}}, @jumbo={0xc2, 0x4, 0xe44}, @ra={0x5, 0x2, 0xff}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x67, 0xf, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xf2, 0x4f, "df6723b53384b374584f61d420f4a75ff41e4818bddaf952a8a13243ae0271a1d11122d553c3ce870baa2469da2b62de7240f27358716c175872f816e73fc6f77948a186db08a92d64aa172fe23ce3"}, @calipso={0x7, 0x20, {0x2, 0x6, 0xfd, 0x1, [0x0, 0x3, 0x200]}}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x32, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x71}, @jumbo={0xc2, 0x4, 0x6732}, @padn={0x1, 0x1, [0x0]}, @generic={0x80, 0x51, "3ffb735cf0cc8e612fafaccba855dd5c95ce5725fb50847208863877164a3ab0e1eeb822911f698e9f2e8df8795d923c8463f0f11010558e26368edf06787b849935a466616573401be0694a7ebb57ec5c"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xd8, 0xa, 0x1, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x250}}], 0x1, 0x4048081) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = accept4(r0, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000) fcntl$getflags(r2, 0x3) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2754.272199] FAULT_INJECTION: forcing a failure. [ 2754.272199] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.273662] CPU: 0 PID: 12504 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2754.274501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.275505] Call Trace: [ 2754.275829] dump_stack+0x107/0x167 [ 2754.276274] should_fail.cold+0x5/0xa [ 2754.276762] ? create_object.isra.0+0x3a/0xa20 [ 2754.277320] should_failslab+0x5/0x20 [ 2754.277783] kmem_cache_alloc+0x5b/0x310 [ 2754.278277] ? mark_held_locks+0x9e/0xe0 [ 2754.278773] create_object.isra.0+0x3a/0xa20 [ 2754.279306] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2754.279926] kmem_cache_alloc_bulk+0x168/0x320 [ 2754.280496] io_submit_sqes+0x6fe6/0x8610 [ 2754.281019] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2754.281625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2754.282215] ? find_held_lock+0x2c/0x110 [ 2754.282712] ? io_submit_sqes+0x8610/0x8610 [ 2754.283242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2754.283830] ? wait_for_completion_io+0x270/0x270 [ 2754.284439] ? rcu_read_lock_any_held+0x75/0xa0 [ 2754.285002] ? vfs_write+0x354/0xb10 [ 2754.285453] ? fput_many+0x2f/0x1a0 [ 2754.285894] ? ksys_write+0x1a9/0x260 [ 2754.286364] ? __ia32_sys_read+0xb0/0xb0 [ 2754.286859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2754.287491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.288124] do_syscall_64+0x33/0x40 [ 2754.288618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2754.289239] RIP: 0033:0x7f61c5901b19 [ 2754.289692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.291907] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2754.292842] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2754.293703] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2754.294642] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.295504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2754.296372] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2754.303833] FAULT_INJECTION: forcing a failure. [ 2754.303833] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.305283] CPU: 0 PID: 12488 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2754.306123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.307125] Call Trace: [ 2754.307447] dump_stack+0x107/0x167 [ 2754.307891] should_fail.cold+0x5/0xa [ 2754.308366] ? create_object.isra.0+0x3a/0xa20 [ 2754.308927] should_failslab+0x5/0x20 [ 2754.309391] kmem_cache_alloc+0x5b/0x310 [ 2754.309891] create_object.isra.0+0x3a/0xa20 [ 2754.310424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2754.311054] kmem_cache_alloc_bulk+0x168/0x320 [ 2754.311613] io_submit_sqes+0x6fe6/0x8610 11:25:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000240)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x1, @remote, 0x8}, 0x1c) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x142) dup2(r1, r0) [ 2754.312136] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2754.312754] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2754.313342] ? find_held_lock+0x2c/0x110 [ 2754.313839] ? io_submit_sqes+0x8610/0x8610 [ 2754.320805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2754.321393] ? wait_for_completion_io+0x270/0x270 [ 2754.321977] ? rcu_read_lock_any_held+0x75/0xa0 [ 2754.322546] ? vfs_write+0x354/0xb10 [ 2754.322997] ? fput_many+0x2f/0x1a0 [ 2754.323439] ? ksys_write+0x1a9/0x260 [ 2754.323902] ? __ia32_sys_read+0xb0/0xb0 [ 2754.324415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2754.325050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.325676] do_syscall_64+0x33/0x40 [ 2754.326128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2754.326748] RIP: 0033:0x7f2aef7e0b19 [ 2754.327199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.330203] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2754.331139] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2754.332004] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2754.332896] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.333762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2754.334629] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:25:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:25:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r1, 0x0, &(0x7f0000000280)="00b497f52da3e537f4aaf711", 0xc, 0x40000000}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:25:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) (fail_nth: 2) 11:25:56 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getown(r0, 0x9) pread64(r0, &(0x7f0000000200)=""/190, 0xfffffcd8, 0x80000000) 11:25:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) [ 2754.446827] FAULT_INJECTION: forcing a failure. [ 2754.446827] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.448353] CPU: 1 PID: 12523 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2754.449236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.450268] Call Trace: [ 2754.450607] dump_stack+0x107/0x167 [ 2754.451068] should_fail.cold+0x5/0xa [ 2754.451554] ? create_object.isra.0+0x3a/0xa20 [ 2754.452134] should_failslab+0x5/0x20 [ 2754.452637] kmem_cache_alloc+0x5b/0x310 [ 2754.453160] create_object.isra.0+0x3a/0xa20 [ 2754.453716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2754.454359] __kmalloc_node+0x1ae/0x420 [ 2754.454865] kvmalloc_node+0x119/0x170 [ 2754.455360] seq_read_iter+0x9d6/0x12b0 [ 2754.455871] ? lock_acquire+0x197/0x470 [ 2754.456389] seq_read+0x3dd/0x5b0 [ 2754.456837] ? seq_read_iter+0x12b0/0x12b0 [ 2754.457386] ? fsnotify_perm.part.0+0x22d/0x620 [ 2754.457976] ? security_file_permission+0xb1/0xe0 [ 2754.458591] ? seq_read_iter+0x12b0/0x12b0 [ 2754.459127] vfs_read+0x228/0x620 [ 2754.459574] __x64_sys_pread64+0x201/0x260 [ 2754.460110] ? ksys_pread64+0x1b0/0x1b0 [ 2754.460633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2754.461298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.461949] do_syscall_64+0x33/0x40 [ 2754.462423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2754.463069] RIP: 0033:0x7fd243eaeb19 [ 2754.463540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.465856] RSP: 002b:00007fd241424188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2754.466815] RAX: ffffffffffffffda RBX: 00007fd243fc1f60 RCX: 00007fd243eaeb19 11:25:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) recvfrom$inet6(r0, &(0x7f0000000240)=""/156, 0x9c, 0x2, &(0x7f0000000040)={0xa, 0x4e23, 0x5fa, @remote, 0x1ff}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5b30}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2754.467712] RDX: 00000000000000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 2754.468625] RBP: 00007fd2414241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.469518] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 2754.470415] R13: 00007ffd753c588f R14: 00007fd241424300 R15: 0000000000022000 11:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) 11:26:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) (fail_nth: 3) 11:26:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_complete(r4) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:09 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) pread64(r2, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:26:09 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 11:26:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x7b3c, 0x1, {{0x2c, 0x4, 0x3, 0x16, 0xb0, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xde, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@rand_addr=0x64010100, 0xfe4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5a}, {@private=0x2, 0xcb8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x4c7}, {@rand_addr=0x64010102, 0x7}]}, @ssrr={0x89, 0x1b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x14, 0x3, 0x0, [{@private=0xa010102, 0x7}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x72, 0x1, 0x0, [{@empty, 0x7}]}, @end, @timestamp_addr={0x44, 0x1c, 0xe2, 0x1, 0xc, [{@broadcast, 0xc6a}, {@rand_addr=0x64010100, 0xd7}, {@broadcast, 0xe93a}]}, @rr={0x7, 0x7, 0x94, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x2f, 0x3, 0x1f, 0x3, 0x2, @loopback, @local, 0x40, 0x7800, 0x6, 0x7}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 11:26:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) [ 2767.859319] FAULT_INJECTION: forcing a failure. [ 2767.859319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2767.860768] CPU: 0 PID: 12538 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2767.861643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.862639] Call Trace: [ 2767.862965] dump_stack+0x107/0x167 [ 2767.863406] should_fail.cold+0x5/0xa [ 2767.863872] _copy_to_iter+0x264/0x12d0 [ 2767.864360] ? mmput+0x47/0x340 [ 2767.864761] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2767.865426] ? __virt_addr_valid+0x170/0x5d0 [ 2767.865960] ? __check_object_size+0x319/0x440 [ 2767.866524] seq_read_iter+0x71a/0x12b0 [ 2767.867012] ? lock_acquire+0x197/0x470 [ 2767.867506] seq_read+0x3dd/0x5b0 [ 2767.867928] ? seq_read_iter+0x12b0/0x12b0 [ 2767.868454] ? fsnotify_perm.part.0+0x22d/0x620 [ 2767.869070] ? security_file_permission+0xb1/0xe0 [ 2767.869663] ? seq_read_iter+0x12b0/0x12b0 [ 2767.870175] vfs_read+0x228/0x620 [ 2767.870609] __x64_sys_pread64+0x201/0x260 [ 2767.871123] ? ksys_pread64+0x1b0/0x1b0 [ 2767.871608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.872246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.872908] do_syscall_64+0x33/0x40 [ 2767.873367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2767.873996] RIP: 0033:0x7fd243eaeb19 [ 2767.874453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.876684] RSP: 002b:00007fd241424188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2767.877647] RAX: ffffffffffffffda RBX: 00007fd243fc1f60 RCX: 00007fd243eaeb19 [ 2767.878513] RDX: 00000000000000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 2767.879376] RBP: 00007fd2414241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.880239] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 2767.881167] R13: 00007ffd753c588f R14: 00007fd241424300 R15: 0000000000022000 [ 2767.921414] FAULT_INJECTION: forcing a failure. [ 2767.921414] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.922809] CPU: 0 PID: 12537 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2767.923647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.924648] Call Trace: [ 2767.925007] dump_stack+0x107/0x167 [ 2767.925451] should_fail.cold+0x5/0xa [ 2767.925914] ? create_object.isra.0+0x3a/0xa20 [ 2767.926471] should_failslab+0x5/0x20 [ 2767.926938] kmem_cache_alloc+0x5b/0x310 [ 2767.927431] ? mark_held_locks+0x9e/0xe0 [ 2767.927925] create_object.isra.0+0x3a/0xa20 [ 2767.928454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2767.929507] kmem_cache_alloc_bulk+0x168/0x320 [ 2767.931080] io_submit_sqes+0x6fe6/0x8610 [ 2767.932510] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2767.934243] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2767.935891] ? find_held_lock+0x2c/0x110 [ 2767.937302] ? io_submit_sqes+0x8610/0x8610 [ 2767.938777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2767.940421] ? wait_for_completion_io+0x270/0x270 [ 2767.942096] ? rcu_read_lock_any_held+0x75/0xa0 [ 2767.943662] ? vfs_write+0x354/0xb10 [ 2767.944456] FAULT_INJECTION: forcing a failure. [ 2767.944456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2767.944946] ? fput_many+0x2f/0x1a0 [ 2767.944960] ? ksys_write+0x1a9/0x260 [ 2767.944977] ? __ia32_sys_read+0xb0/0xb0 [ 2767.949791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.951548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.952263] do_syscall_64+0x33/0x40 [ 2767.953534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2767.954238] RIP: 0033:0x7f61c5901b19 [ 2767.955480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.957966] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2767.958997] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2767.959965] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2767.960962] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.961936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2767.962901] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2767.964328] CPU: 1 PID: 12556 Comm: syz-executor.1 Not tainted 5.10.233 #1 11:26:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:26:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) (fail_nth: 4) [ 2767.966405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.972690] FAULT_INJECTION: forcing a failure. [ 2767.972690] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.974297] Call Trace: [ 2767.974316] dump_stack+0x107/0x167 [ 2767.974332] should_fail.cold+0x5/0xa [ 2767.979464] _copy_to_iter+0x264/0x12d0 [ 2767.980634] ? _down_write_nest_lock+0x160/0x160 [ 2767.982036] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2767.983472] ? __virt_addr_valid+0x170/0x5d0 [ 2767.984768] ? __check_object_size+0x319/0x440 [ 2767.986121] seq_read_iter+0xdcb/0x12b0 [ 2767.987288] seq_read+0x3dd/0x5b0 [ 2767.988304] ? seq_read_iter+0x12b0/0x12b0 [ 2767.989556] ? fsnotify_perm.part.0+0x22d/0x620 [ 2767.990924] ? security_file_permission+0xb1/0xe0 [ 2767.992339] ? seq_read_iter+0x12b0/0x12b0 [ 2767.993593] vfs_read+0x228/0x620 [ 2767.994611] __x64_sys_pread64+0x201/0x260 [ 2767.995924] ? ksys_pread64+0x1b0/0x1b0 [ 2767.997223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.998756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2768.000363] do_syscall_64+0x33/0x40 [ 2768.001462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2768.003204] RIP: 0033:0x7fd243eaeb19 [ 2768.004298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2768.014214] RSP: 002b:00007fd241424188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2768.015138] RAX: ffffffffffffffda RBX: 00007fd243fc1f60 RCX: 00007fd243eaeb19 [ 2768.015998] RDX: 00000000000000c0 RSI: 0000000020000000 RDI: 0000000000000003 [ 2768.017032] RBP: 00007fd2414241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.018130] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 2768.018989] R13: 00007ffd753c588f R14: 00007fd241424300 R15: 0000000000022000 [ 2768.019870] CPU: 0 PID: 12550 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2768.020726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2768.021775] Call Trace: [ 2768.022103] dump_stack+0x107/0x167 [ 2768.022550] should_fail.cold+0x5/0xa [ 2768.023016] ? create_object.isra.0+0x3a/0xa20 [ 2768.023574] should_failslab+0x5/0x20 [ 2768.024038] kmem_cache_alloc+0x5b/0x310 [ 2768.024534] ? mark_held_locks+0x9e/0xe0 [ 2768.025094] create_object.isra.0+0x3a/0xa20 [ 2768.025629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2768.026251] kmem_cache_alloc_bulk+0x168/0x320 [ 2768.026811] io_submit_sqes+0x6fe6/0x8610 [ 2768.027336] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2768.027941] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2768.028530] ? find_held_lock+0x2c/0x110 [ 2768.029089] ? io_submit_sqes+0x8610/0x8610 [ 2768.029622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2768.030211] ? wait_for_completion_io+0x270/0x270 [ 2768.030799] ? rcu_read_lock_any_held+0x75/0xa0 [ 2768.031364] ? vfs_write+0x354/0xb10 [ 2768.031818] ? fput_many+0x2f/0x1a0 [ 2768.032264] ? ksys_write+0x1a9/0x260 [ 2768.032730] ? __ia32_sys_read+0xb0/0xb0 [ 2768.033305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2768.033941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2768.034569] do_syscall_64+0x33/0x40 [ 2768.035027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2768.035649] RIP: 0033:0x7f2aef7e0b19 [ 2768.036104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2768.038380] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2768.039303] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2768.040168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2768.041072] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.041938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2768.042804] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:26:10 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0, 0x9) sync_file_range(0xffffffffffffffff, 0x5, 0x8001, 0x2) 11:26:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/185, 0xb9}], 0x1) 11:26:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x81, 0xfffffffd, 0x1f, 0x5, 0x93ff}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 11:26:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:26:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0xa128, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3}, 0x1) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() fcntl$setown(r2, 0x8, r3) fcntl$getown(r2, 0x9) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r2, 0x1, 0x0, 0xf1, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2768.161281] audit: type=1400 audit(1738581970.325:155): avc: denied { execute } for pid=12566 comm="syz-executor.4" path="pipe:[45931]" dev="pipefs" ino=45931 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 11:26:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:26:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 11:26:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 11:26:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) fallocate(r1, 0x18, 0x3, 0xfffffffffffffff9) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000180)=0x998, 0x4) 11:26:23 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000218000000", @ANYRES32=r0, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4119}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xde47}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x8010, r4, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8, 0x1, &(0x7f0000000200)="a48041937d0d0e102cf3a580285a573be748dc8520784f6c77984c6ede9fc3f00c713596700ff01d4d68da98d236e2c5592ff33a66e9ba309e7a74209c9a86b97e751788a9c55e8b7d6aee16d8ab37708e0024792ebce6a81baa87cb29b1eccc0e39be4a96036701cf8deb53b69c5103f0db550d6d7add435fa28ce3a7b4a7993d76481294dfca61773517d7946232ad9ed1be075c894932aba53fbe148b14572ecab7172fc0", 0xff, 0x0, 0x1}, 0xfffffffc) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fgetxattr(r1, &(0x7f00000001c0)=@known='user.incfs.size\x00', &(0x7f0000000240)=""/178, 0xb2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0x81, 0x401) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:23 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="6492c6bf75a76d1f18000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x67d14d1d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 11:26:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) (fail_nth: 5) [ 2781.613261] FAULT_INJECTION: forcing a failure. [ 2781.613261] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.624820] CPU: 1 PID: 12591 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2781.625713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.626750] Call Trace: [ 2781.627088] dump_stack+0x107/0x167 [ 2781.627551] should_fail.cold+0x5/0xa [ 2781.628034] ? create_object.isra.0+0x3a/0xa20 [ 2781.628612] should_failslab+0x5/0x20 [ 2781.629092] kmem_cache_alloc+0x5b/0x310 [ 2781.629621] ? mark_held_locks+0x9e/0xe0 [ 2781.630138] create_object.isra.0+0x3a/0xa20 [ 2781.630691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2781.631335] kmem_cache_alloc_bulk+0x168/0x320 [ 2781.631916] io_submit_sqes+0x6fe6/0x8610 [ 2781.632465] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.633096] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.633722] ? find_held_lock+0x2c/0x110 [ 2781.634240] ? io_submit_sqes+0x8610/0x8610 [ 2781.634809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.635421] ? wait_for_completion_io+0x270/0x270 [ 2781.636029] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.636612] ? vfs_write+0x354/0xb10 [ 2781.637083] ? fput_many+0x2f/0x1a0 [ 2781.637559] ? ksys_write+0x1a9/0x260 [ 2781.638041] ? __ia32_sys_read+0xb0/0xb0 [ 2781.638559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.639219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.639870] do_syscall_64+0x33/0x40 [ 2781.640342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.640985] RIP: 0033:0x7f2aef7e0b19 [ 2781.641472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.643769] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2781.644730] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2781.645662] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2781.646556] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.647450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.648344] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2781.651329] FAULT_INJECTION: forcing a failure. [ 2781.651329] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.652808] CPU: 0 PID: 12586 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2781.653661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.654666] Call Trace: [ 2781.654990] dump_stack+0x107/0x167 [ 2781.655434] should_fail.cold+0x5/0xa [ 2781.655902] should_failslab+0x5/0x20 [ 2781.656365] kmem_cache_alloc_bulk+0x4b/0x320 [ 2781.656916] io_submit_sqes+0x6fe6/0x8610 [ 2781.657461] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.658068] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2781.658657] ? find_held_lock+0x2c/0x110 [ 2781.659155] ? io_submit_sqes+0x8610/0x8610 [ 2781.659686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.660274] ? wait_for_completion_io+0x270/0x270 11:26:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x330c83, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x1, 0x4, {0x0, r6}, 0x5, 0x2, 0x1, {0x0, 0x0, r7}}, 0x2) [ 2781.660861] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.661445] ? vfs_write+0x354/0xb10 [ 2781.661899] ? fput_many+0x2f/0x1a0 [ 2781.662344] ? ksys_write+0x1a9/0x260 [ 2781.662806] ? __ia32_sys_read+0xb0/0xb0 [ 2781.663302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.664177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.664806] do_syscall_64+0x33/0x40 [ 2781.665259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.665898] RIP: 0033:0x7f61c5901b19 [ 2781.666349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.668573] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2781.669505] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2781.670369] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2781.671232] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.672094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.672955] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2781.676845] FAULT_INJECTION: forcing a failure. [ 2781.676845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.678530] CPU: 0 PID: 12596 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2781.679370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.680375] Call Trace: [ 2781.680697] dump_stack+0x107/0x167 [ 2781.681141] should_fail.cold+0x5/0xa [ 2781.681627] _copy_to_user+0x2e/0x180 [ 2781.682096] simple_read_from_buffer+0xcc/0x160 [ 2781.682663] proc_fail_nth_read+0x198/0x230 [ 2781.683189] ? proc_sessionid_read+0x230/0x230 [ 2781.683742] ? security_file_permission+0xb1/0xe0 [ 2781.684331] ? proc_sessionid_read+0x230/0x230 [ 2781.684885] vfs_read+0x228/0x620 [ 2781.685324] ksys_read+0x12d/0x260 [ 2781.685765] ? vfs_write+0xb10/0xb10 [ 2781.686226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.686862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.687490] do_syscall_64+0x33/0x40 [ 2781.687943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.688567] RIP: 0033:0x7fd243e6169c [ 2781.689020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2781.697322] RSP: 002b:00007fd241424170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2781.698285] RAX: ffffffffffffffda RBX: 00000000000000c0 RCX: 00007fd243e6169c [ 2781.699176] RDX: 000000000000000f RSI: 00007fd2414241e0 RDI: 0000000000000004 [ 2781.700070] RBP: 00007fd2414241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.700959] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 2781.701863] R13: 00007ffd753c588f R14: 00007fd241424300 R15: 0000000000022000 [ 2781.740659] FAULT_INJECTION: forcing a failure. [ 2781.740659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.742217] CPU: 0 PID: 12602 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2781.743081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.744114] Call Trace: [ 2781.744457] dump_stack+0x107/0x167 11:26:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 1) [ 2781.744921] should_fail.cold+0x5/0xa [ 2781.753477] _copy_from_user+0x2e/0x1b0 [ 2781.754004] __copy_msghdr_from_user+0x91/0x4b0 [ 2781.754623] ? __ia32_sys_shutdown+0x80/0x80 [ 2781.755205] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.755888] ? __lock_acquire+0x1657/0x5b00 [ 2781.756457] ? __lock_acquire+0xbb1/0x5b00 [ 2781.757014] sendmsg_copy_msghdr+0xa1/0x160 [ 2781.757591] ? do_recvmmsg+0x6d0/0x6d0 [ 2781.758102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.758788] ? lock_downgrade+0x6d0/0x6d0 [ 2781.759335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.760021] ___sys_sendmsg+0xc6/0x170 [ 2781.760537] ? sendmsg_copy_msghdr+0x160/0x160 [ 2781.761137] ? __fget_files+0x2cf/0x520 [ 2781.773758] ? lock_downgrade+0x6d0/0x6d0 [ 2781.774313] ? find_held_lock+0x2c/0x110 [ 2781.774835] ? __fget_files+0x2f8/0x520 [ 2781.775366] ? __fget_light+0xea/0x290 [ 2781.775888] __sys_sendmsg+0xe5/0x1b0 [ 2781.776398] ? __sys_sendmsg_sock+0x40/0x40 [ 2781.776973] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.777615] ? fput_many+0x2f/0x1a0 [ 2781.778087] ? ksys_write+0x1a9/0x260 [ 2781.778588] ? __ia32_sys_read+0xb0/0xb0 [ 2781.779123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.779818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.780483] do_syscall_64+0x33/0x40 [ 2781.780976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.785727] RIP: 0033:0x7f5a2c83bb19 [ 2781.786268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.788935] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2781.794068] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2781.795108] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2781.796162] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.797201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2781.806149] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 11:26:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:26:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x10010, r1, 0x8000000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r1, r3], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 11:26:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="ff0000002e2f66296c653100"]) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = getpid() fcntl$setown(r9, 0x8, r10) fcntl$getown(r9, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd=r9, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r11, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 11:26:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0x8, 0x9) [ 2782.001966] FAULT_INJECTION: forcing a failure. [ 2782.001966] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.003420] CPU: 0 PID: 12622 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2782.004261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2782.005266] Call Trace: [ 2782.005623] dump_stack+0x107/0x167 [ 2782.006086] should_fail.cold+0x5/0xa [ 2782.006571] ? create_object.isra.0+0x3a/0xa20 [ 2782.007149] should_failslab+0x5/0x20 [ 2782.007630] kmem_cache_alloc+0x5b/0x310 [ 2782.008143] ? mark_held_locks+0x9e/0xe0 [ 2782.008693] create_object.isra.0+0x3a/0xa20 [ 2782.009247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2782.009906] kmem_cache_alloc_bulk+0x168/0x320 [ 2782.010490] io_submit_sqes+0x6fe6/0x8610 [ 2782.011037] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2782.011666] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2782.012278] ? find_held_lock+0x2c/0x110 [ 2782.012796] ? io_submit_sqes+0x8610/0x8610 [ 2782.013369] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2782.013962] ? wait_for_completion_io+0x270/0x270 [ 2782.014547] ? rcu_read_lock_any_held+0x75/0xa0 [ 2782.015109] ? vfs_write+0x354/0xb10 [ 2782.015559] ? fput_many+0x2f/0x1a0 [ 2782.016000] ? ksys_write+0x1a9/0x260 [ 2782.016461] ? __ia32_sys_read+0xb0/0xb0 [ 2782.016956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2782.017628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2782.018281] do_syscall_64+0x33/0x40 [ 2782.018796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2782.019443] RIP: 0033:0x7f2aef7e0b19 [ 2782.019916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2782.022231] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2782.023189] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2782.024084] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2782.024981] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.025880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2782.026742] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2796.711439] FAULT_INJECTION: forcing a failure. [ 2796.711439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2796.712973] CPU: 0 PID: 12639 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2796.713873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.714938] Call Trace: [ 2796.715294] dump_stack+0x107/0x167 [ 2796.715773] should_fail.cold+0x5/0xa [ 2796.716279] _copy_from_user+0x2e/0x1b0 [ 2796.716804] iovec_from_user+0x141/0x400 [ 2796.717347] __import_iovec+0x67/0x590 [ 2796.717879] ? __ia32_sys_shutdown+0x80/0x80 [ 2796.718441] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.719146] import_iovec+0x83/0xb0 [ 2796.719637] sendmsg_copy_msghdr+0x131/0x160 [ 2796.720229] ? do_recvmmsg+0x6d0/0x6d0 [ 2796.720742] ? lock_downgrade+0x6d0/0x6d0 [ 2796.721301] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.722003] ___sys_sendmsg+0xc6/0x170 [ 2796.722508] ? sendmsg_copy_msghdr+0x160/0x160 [ 2796.723124] ? __fget_files+0x2cf/0x520 [ 2796.723647] ? lock_downgrade+0x6d0/0x6d0 [ 2796.724192] ? find_held_lock+0x2c/0x110 [ 2796.724736] ? __fget_files+0x2f8/0x520 [ 2796.725280] ? __fget_light+0xea/0x290 [ 2796.729837] __sys_sendmsg+0xe5/0x1b0 [ 2796.730344] ? __sys_sendmsg_sock+0x40/0x40 [ 2796.730916] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.731534] ? fput_many+0x2f/0x1a0 [ 2796.732024] ? ksys_write+0x1a9/0x260 [ 2796.732531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.733222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.733920] do_syscall_64+0x33/0x40 [ 2796.734409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2796.735086] RIP: 0033:0x7f5a2c83bb19 [ 2796.735569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.741674] FAULT_INJECTION: forcing a failure. [ 2796.741674] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.741989] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2796.744455] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2796.745339] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2796.746249] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.747132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2796.748014] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 [ 2796.748912] CPU: 1 PID: 12644 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2796.750200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.751296] Call Trace: [ 2796.751621] dump_stack+0x107/0x167 [ 2796.752128] should_fail.cold+0x5/0xa [ 2796.752591] ? create_object.isra.0+0x3a/0xa20 [ 2796.753205] should_failslab+0x5/0x20 [ 2796.753667] kmem_cache_alloc+0x5b/0x310 [ 2796.754624] ? mark_held_locks+0x9e/0xe0 [ 2796.755172] create_object.isra.0+0x3a/0xa20 [ 2796.755701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2796.756367] kmem_cache_alloc_bulk+0x168/0x320 [ 2796.756983] io_submit_sqes+0x6fe6/0x8610 [ 2796.757505] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.758335] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.759002] ? find_held_lock+0x2c/0x110 [ 2796.759498] ? io_submit_sqes+0x8610/0x8610 [ 2796.760081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2796.760667] ? wait_for_completion_io+0x270/0x270 [ 2796.761310] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.762210] ? vfs_write+0x354/0xb10 [ 2796.762663] ? fput_many+0x2f/0x1a0 [ 2796.763160] ? ksys_write+0x1a9/0x260 [ 2796.763626] ? __ia32_sys_read+0xb0/0xb0 [ 2796.764174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.764809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.765488] do_syscall_64+0x33/0x40 [ 2796.766035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2796.766763] RIP: 0033:0x7f61c5901b19 [ 2796.767310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:26:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 11:26:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getown(r3, 0x9) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x9}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) [ 2796.769636] RSP: 002b:00007f61c2e56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa syz_io_uring_submit(r2, r1, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0xfffffffffffffffb, &(0x7f0000000540)=[{&(0x7f0000000240)="b18ae9c7ed641c89af436b191c1a80f3a2c2d6e7c41a453c256cef812ecec9e1390d9e33001685d0a3d2c22214c1941015d4bbbf73d128808c927ccec6aea289e91957", 0x43}, {&(0x7f0000000040)="91f54d79a1c2dc35995c9a0ecc62792cc9ce35bff3d62d69aaa26edc461b34", 0x1f}, {&(0x7f00000002c0)="be829fe455b72100420940dd7a1a7c653013dd51b6f5cd76fe59201701948663532681a8fc2cb159143934363f1569d5a97da431ffe63d18f68a58f40b43ed4676205013b0a38ef08800724f2cd8f0171a10791680d1bd978c63b924f2af45d3694e75aa5ec2ea912b5ed76292ec09b94d8f6a6ba2f88fe6a9c156fc39fe9d8f9d66820174ee1d9711cf5723a7ea5340b2f1bf4d3702ebc01b49031c5de053238c2bf0c7b5f312deae6b107f80b3adf7149b1e1520c18d94615b2380a7625bee1ebe10dfda41a7f97216f9f338", 0xcd}, {&(0x7f00000003c0)="0420728ff9c4904deead9c7dbf3abfdcc8145464cd1181dd036795238cb61fc86753b125f08fdac2350be4943eefd6ea5014d63c5fa4cc11f1db160fd6ac270415853c1887e3981ba876", 0x4a}, {&(0x7f0000000480)="1388bfb8e5ce207b40e7ce43b6137e20fe902bd292b56c5f420fb571bc7d723366faa0c86f29400210129558215a93b58f6f0783affa7e7aa5bae5f608e143c7f1454a8568219a9a62727f7b464d03afec0519390e4d96a34507cc45089a91f102934ff201fea4d32b7e615b263e2d053424e2668d", 0x75}, {&(0x7f00000001c0)="c9068fcf46c725189941ec2c", 0xc}, {&(0x7f0000000500)="d8ffc6bf543d286c2b6d1a3981", 0xd}], 0x7, 0xc, 0x0, {0x0, r8}}, 0x4) 11:26:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) [ 2796.771059] RAX: ffffffffffffffda RBX: 00007f61c5a15020 RCX: 00007f61c5901b19 [ 2796.779722] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2796.780693] RBP: 00007f61c2e561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.781679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2796.783414] R13: 00007ffd99215a2f R14: 00007f61c2e56300 R15: 0000000000022000 [ 2796.794535] FAULT_INJECTION: forcing a failure. [ 2796.794535] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.796033] CPU: 0 PID: 12640 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2796.796944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.798021] Call Trace: [ 2796.798376] dump_stack+0x107/0x167 [ 2796.798857] should_fail.cold+0x5/0xa [ 2796.799359] ? create_object.isra.0+0x3a/0xa20 [ 2796.799973] should_failslab+0x5/0x20 [ 2796.800483] kmem_cache_alloc+0x5b/0x310 [ 2796.801081] ? mark_held_locks+0x9e/0xe0 [ 2796.801617] create_object.isra.0+0x3a/0xa20 [ 2796.802232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2796.802955] kmem_cache_alloc_bulk+0x168/0x320 [ 2796.803555] io_submit_sqes+0x6fe6/0x8610 [ 2796.804132] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.804763] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.805405] ? find_held_lock+0x2c/0x110 [ 2796.805968] ? io_submit_sqes+0x8610/0x8610 [ 2796.806546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2796.807217] ? wait_for_completion_io+0x270/0x270 [ 2796.807923] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.808522] ? vfs_write+0x354/0xb10 [ 2796.809021] ? fput_many+0x2f/0x1a0 [ 2796.809495] ? ksys_write+0x1a9/0x260 [ 2796.810030] ? __ia32_sys_read+0xb0/0xb0 [ 2796.810564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.811243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.811880] do_syscall_64+0x33/0x40 [ 2796.812375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2796.813058] RIP: 0033:0x7f2aef7e0b19 [ 2796.813548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.816078] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2796.817140] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2796.818131] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2796.819068] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.819998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2796.820960] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x5, @local, 0x80000000, 0x4}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002980)="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", 0xc2}, {&(0x7f0000000580)="f69520e36e5411b33222380ce8e3d4ad1ee0b5f94077435d00340fb45ea52aab2c09fe8f89c9bf5fed071a22223845a7c81606de8373351a797423fffe153f438f2874a5385d08abb209474c272f4d8983387d5b592ffce799702561778ec8ae9c12a719cf1f8b963d654a6d4f6a33be3c44acce68a86e8f5373ec6cb420d01d7c0525ec83108e2b7bbce9676ee9b11f9e32c5ba09138a66d010fa8ab40704ca7cac8a8378c7ce250a0813a89fd35c7f758032ddfbb08fdb28ac4cc2cd54c8ed8791d43437b8e259d85b130787bb7212bac3abefbc8ea17df1a9cf85f3dbeefb042e929777d092511abca9e16addc0ce63e6fb322038", 0xf6}, {&(0x7f0000000680)="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", 0xd44}, {&(0x7f00000003c0)="b1928823787428425faf9ad098aaf439d4ce99ac4a2d019be89ee605231dad9fa2f61e32f409bb62a75b28d994cb8985e90943049b43a9656d8aabee4ea7c714c156df51dd2dd9", 0x47}, {&(0x7f0000001680)="4c18ada9f79c6af8df90bb1200d19fd670a71f3a60e3663c95ec49c9f9c799caffb4f2bf0a6ef505fda28514693b38cf5b489c34163c8aadfb63449e5ab3f7204b243f263c34022269354d1cde2c08f43df4de8e185586cd37eb26f931a0a47a3c598742c9cc00c1f14b280def33e9f6482d615c11dcf38ba04866ddfcd194918dab67a6afc0fdb125de52f5d6d06e9089d10cf5ac5e7a46c5b6", 0x9a}, {&(0x7f0000001740)="cfa49da2c6e18e8341c2eab68d9ad0ea1094ef2c4a6d83ff03d5c3f9e03c8e67d0934b27a979177c99474cff715a25217d21b3e7b32c22577189f5cc79b03d1d319ec955573edb9f248a5d4cc8050ac70b71c620113bc28d5bd084b0212e68c223fd57ec90617750f2ff886785693b2319338b52ed3406cf0e01057c889b332b00a8abef0506c33528b76a1096db593f41bdc9b13273b1f39c16aa9bc909a335ad479d03cc9bb939e9e5bba2", 0xac}, {&(0x7f0000001800)="74830b0ab6787e6eb8539959e59460ae2fe72caa1b3a550f2c1670a0ccc4a0f056a9269500fadaf2dae6cfc0f27694220e588c2fee0c4d08bf3f8eb49ddf35ef8b2564b3a6cb2d27dd3036e4da0071bcd4f60560e683ce0da447a0dde6900363286299bfa3bef5aad12cabbe1480ccb563b133900a", 0x75}, {&(0x7f0000001880)="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", 0x1000}], 0x8, &(0x7f0000002900)=ANY=[@ANYBLOB="800000000000000019010000070000007066754a5524b1d6cf91907aa47604bb9bdb51f8dc882e6a06c7fe9b4aee1fad1310b858d2953b320dfd3445d5a0543f7d65f3d841e8b3d25b7051bc9efe9bb507fe2d241723d5ccb322a9bd438b922752dae0295040f72258944d375ccdabdad50a163258cddda1b2c0000000000000"], 0x80}, 0x0, 0x4000840}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) r6 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="ff0000002e2f66296c653100"]) io_uring_enter(r7, 0x58ab, 0x15bb, 0x2, 0x0, 0x0) 11:26:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 11:26:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x82000, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) 11:26:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0x200000c0, 0x9) 11:26:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 2) 11:26:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff0000002e2f66296c653100"]) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$getown(r1, 0x9) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0xfffffffffffffffe) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x9) 11:26:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) dup2(r1, r3) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback, 0x10000}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x5) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r6 = syz_io_uring_setup(0x28c3, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r1, 0x1, 0x0, 0x0, 0x11, 0x0, {0x2, r7}}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:39 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:26:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x2) 11:26:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x2}, 0x0, 0xbe, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000140)={0x0, 0x40000004, 0x0, 0x2, 0xdd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2796.963296] FAULT_INJECTION: forcing a failure. [ 2796.963296] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.967949] CPU: 0 PID: 12663 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2796.970541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.973327] Call Trace: [ 2796.974175] dump_stack+0x107/0x167 [ 2796.975299] should_fail.cold+0x5/0xa [ 2796.976605] should_failslab+0x5/0x20 [ 2796.993902] kmem_cache_alloc_bulk+0x4b/0x320 [ 2796.994497] io_submit_sqes+0x6fe6/0x8610 [ 2796.995066] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.995720] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2796.996361] ? find_held_lock+0x2c/0x110 [ 2796.996892] ? io_submit_sqes+0x8610/0x8610 [ 2796.997458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2796.998112] ? wait_for_completion_io+0x270/0x270 [ 2796.998753] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.999381] ? vfs_write+0x354/0xb10 11:26:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x3) [ 2796.999876] ? fput_many+0x2f/0x1a0 [ 2797.000333] ? ksys_write+0x1a9/0x260 [ 2797.014072] ? __ia32_sys_read+0xb0/0xb0 [ 2797.014627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.015325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.016015] do_syscall_64+0x33/0x40 [ 2797.016503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.017188] RIP: 0033:0x7ff26fac0b19 [ 2797.017673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.020074] RSP: 002b:00007ff26d036188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2797.021058] RAX: ffffffffffffffda RBX: 00007ff26fbd3f60 RCX: 00007ff26fac0b19 [ 2797.022008] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2797.022976] RBP: 00007ff26d0361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.023911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.024846] R13: 00007ffe770e594f R14: 00007ff26d036300 R15: 0000000000022000 11:26:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2871, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 11:26:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 3) 11:26:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x9, 0x50, 0x0, 0x8, 0x0, 0x1, {0x0, r7}}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x9, 0xbc, 0x0, 0x1f00000, 0x4, 0x0, {0x0, r8}}, 0x80000000) [ 2797.140043] FAULT_INJECTION: forcing a failure. [ 2797.140043] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.141567] CPU: 0 PID: 12677 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2797.142552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.143617] Call Trace: [ 2797.143964] dump_stack+0x107/0x167 [ 2797.144444] should_fail.cold+0x5/0xa [ 2797.144940] ? __alloc_skb+0x6d/0x5b0 [ 2797.145445] should_failslab+0x5/0x20 [ 2797.146315] kmem_cache_alloc_node+0x55/0x330 [ 2797.147854] __alloc_skb+0x6d/0x5b0 [ 2797.149057] netlink_sendmsg+0x998/0xdf0 [ 2797.150098] ? netlink_unicast+0x7f0/0x7f0 [ 2797.150660] ? netlink_unicast+0x7f0/0x7f0 [ 2797.151215] __sock_sendmsg+0x154/0x190 [ 2797.151743] ____sys_sendmsg+0x70d/0x870 [ 2797.152297] ? sock_write_iter+0x3d0/0x3d0 [ 2797.152849] ? do_recvmmsg+0x6d0/0x6d0 [ 2797.153386] ? lock_downgrade+0x6d0/0x6d0 [ 2797.154016] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2797.154709] ___sys_sendmsg+0xf3/0x170 [ 2797.155225] ? sendmsg_copy_msghdr+0x160/0x160 [ 2797.155827] ? __fget_files+0x2cf/0x520 [ 2797.156353] ? lock_downgrade+0x6d0/0x6d0 [ 2797.156901] ? find_held_lock+0x2c/0x110 [ 2797.157445] ? __fget_files+0x2f8/0x520 [ 2797.158057] ? __fget_light+0xea/0x290 [ 2797.158594] __sys_sendmsg+0xe5/0x1b0 [ 2797.159120] ? __sys_sendmsg_sock+0x40/0x40 [ 2797.159693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2797.160318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.161012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.161686] do_syscall_64+0x33/0x40 [ 2797.162266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.162937] RIP: 0033:0x7f5a2c83bb19 [ 2797.163429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.165978] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2797.168568] FAULT_INJECTION: forcing a failure. [ 2797.168568] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.168719] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2797.168732] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2797.174576] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.176748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.178942] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 [ 2797.181113] CPU: 1 PID: 12679 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2797.182069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.183193] Call Trace: [ 2797.183567] dump_stack+0x107/0x167 [ 2797.184032] should_fail.cold+0x5/0xa [ 2797.184517] ? create_object.isra.0+0x3a/0xa20 [ 2797.185141] should_failslab+0x5/0x20 [ 2797.185644] kmem_cache_alloc+0x5b/0x310 [ 2797.186198] ? mark_held_locks+0x9e/0xe0 [ 2797.186755] create_object.isra.0+0x3a/0xa20 [ 2797.187383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2797.188102] kmem_cache_alloc_bulk+0x168/0x320 [ 2797.188757] io_submit_sqes+0x6fe6/0x8610 [ 2797.189374] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2797.190064] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2797.190673] ? find_held_lock+0x2c/0x110 [ 2797.191179] ? io_submit_sqes+0x8610/0x8610 [ 2797.191721] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2797.192324] ? wait_for_completion_io+0x270/0x270 [ 2797.192924] ? rcu_read_lock_any_held+0x75/0xa0 [ 2797.193505] ? vfs_write+0x354/0xb10 [ 2797.194008] ? fput_many+0x2f/0x1a0 [ 2797.194504] ? ksys_write+0x1a9/0x260 [ 2797.195037] ? __ia32_sys_read+0xb0/0xb0 [ 2797.195620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.196635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.197397] do_syscall_64+0x33/0x40 [ 2797.197968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.198741] RIP: 0033:0x7f2aef7e0b19 [ 2797.199262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.201796] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2797.202852] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2797.203826] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2797.204806] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.205781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2797.206771] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2811.223434] FAULT_INJECTION: forcing a failure. [ 2811.223434] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.224856] CPU: 1 PID: 12691 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2811.225689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.226705] Call Trace: [ 2811.227030] dump_stack+0x107/0x167 [ 2811.227474] should_fail.cold+0x5/0xa [ 2811.227939] ? create_object.isra.0+0x3a/0xa20 [ 2811.228496] should_failslab+0x5/0x20 [ 2811.228959] kmem_cache_alloc+0x5b/0x310 [ 2811.229458] create_object.isra.0+0x3a/0xa20 [ 2811.229992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.230632] kmem_cache_alloc_bulk+0x168/0x320 [ 2811.231200] io_submit_sqes+0x6fe6/0x8610 [ 2811.231724] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.232332] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.232922] ? find_held_lock+0x2c/0x110 [ 2811.233421] ? io_submit_sqes+0x8610/0x8610 [ 2811.233954] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.234569] ? wait_for_completion_io+0x270/0x270 [ 2811.235159] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.235725] ? vfs_write+0x354/0xb10 [ 2811.236180] ? fput_many+0x2f/0x1a0 [ 2811.236623] ? ksys_write+0x1a9/0x260 [ 2811.237088] ? __ia32_sys_read+0xb0/0xb0 [ 2811.237586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.238224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.238953] do_syscall_64+0x33/0x40 [ 2811.239405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.240028] RIP: 0033:0x7ff26fac0b19 [ 2811.240481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.242742] RSP: 002b:00007ff26d036188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2811.243663] RAX: ffffffffffffffda RBX: 00007ff26fbd3f60 RCX: 00007ff26fac0b19 [ 2811.244530] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2811.245391] RBP: 00007ff26d0361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.246264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2811.247132] R13: 00007ffe770e594f R14: 00007ff26d036300 R15: 0000000000022000 11:26:53 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:26:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840)={0x0, 0x0, 0x4, 0x3, 0x10000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)=0x0) r3 = syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x10ea9f741459c3e2, r3) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff, 0x2, &(0x7f0000000240)="2217795fa341450edaead29cefe452185d2d768738990374038312a940bc344ac6d6e97ae5989e0debb26bc25439fe5ecf3912809902d27218bdab5c1744d95f0052403294eb0621d6c7372f712de2fbd3fd2ba2418ec59bd282654ef03baafb483b2199141bd041f06200f1345f3350", 0x101, 0x0, 0x1, {0x0, r8}}, 0x0) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4308, 0x9000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x9) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r9, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x4) 11:26:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 11:26:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 4) 11:26:53 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 11:26:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x5, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="8066913775ef8590023cc7268bc6d039c34f7c9fcee9f749bf667d5483be59c5f6b471934041f6aab636b66705953877615f43424ef6a45653c32f9b91702b18", 0x40, 0x1ea04e0d}], 0x2140001, &(0x7f0000000240)={[{@fat=@quiet}, {@shortname_win95}, {@uni_xlateno}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}) fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f00000002c0)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:26:53 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="ff0000002e2f66296c653100"]) r8 = accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) sendmsg$nl_generic(r7, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x2c, 0x200, 0x70bd27, 0x25dfdbfc, {0x1d}, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r8}, @nested={0xae, 0x3d, 0x0, 0x1, [@generic="398d016c9a1b43ae402aa7a04d0401805c79de1c36d6d8d3aa88148f31019f9790bcd8b929aa623816d9aa0c6a4a40dfe36cfc4c84a47f4c3657e1f9cf35050d1f201e", @generic="0dcb3ec4d0f02dd8fd84bdb929633ddc1100c5dc3149d16cea2d50b961ea844ac352d808b4665faa9cfde9b9764864bcc07b2a8793f8ac54966f89241f35a417127d809c23c8ca2ef46ae695c394fde3d682ae5680f82770f878c2cb75fddfd0a8387537af40f3"]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8890}, 0x44040) [ 2811.274221] FAULT_INJECTION: forcing a failure. [ 2811.274221] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.276187] CPU: 0 PID: 12692 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2811.277067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.278090] Call Trace: [ 2811.282459] dump_stack+0x107/0x167 [ 2811.282904] should_fail.cold+0x5/0xa [ 2811.283370] ? create_object.isra.0+0x3a/0xa20 [ 2811.283928] should_failslab+0x5/0x20 [ 2811.284391] kmem_cache_alloc+0x5b/0x310 [ 2811.284887] create_object.isra.0+0x3a/0xa20 [ 2811.285424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.286043] kmem_cache_alloc_bulk+0x168/0x320 [ 2811.286633] io_submit_sqes+0x6fe6/0x8610 [ 2811.287157] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.287761] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.288354] ? find_held_lock+0x2c/0x110 [ 2811.288850] ? io_submit_sqes+0x8610/0x8610 [ 2811.289380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.289966] ? wait_for_completion_io+0x270/0x270 [ 2811.290586] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.291149] ? vfs_write+0x354/0xb10 [ 2811.291602] ? fput_many+0x2f/0x1a0 [ 2811.292043] ? ksys_write+0x1a9/0x260 [ 2811.292504] ? __ia32_sys_read+0xb0/0xb0 [ 2811.292999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.293634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.294289] do_syscall_64+0x33/0x40 [ 2811.294767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.295388] RIP: 0033:0x7f2aef7e0b19 [ 2811.295841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.298069] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2811.299031] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2811.299894] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2811.300751] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.301607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.306524] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:26:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x5) [ 2811.318901] FAULT_INJECTION: forcing a failure. [ 2811.318901] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.320365] CPU: 1 PID: 12693 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2811.321207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.322209] Call Trace: [ 2811.322556] dump_stack+0x107/0x167 [ 2811.323021] should_fail.cold+0x5/0xa [ 2811.323508] ? create_object.isra.0+0x3a/0xa20 [ 2811.324089] should_failslab+0x5/0x20 [ 2811.324574] kmem_cache_alloc+0x5b/0x310 [ 2811.325091] ? mark_held_locks+0x9e/0xe0 [ 2811.325609] create_object.isra.0+0x3a/0xa20 [ 2811.326165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.326805] kmem_cache_alloc_bulk+0x168/0x320 [ 2811.327367] io_submit_sqes+0x6fe6/0x8610 [ 2811.327890] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.328494] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2811.329083] ? find_held_lock+0x2c/0x110 [ 2811.329580] ? io_submit_sqes+0x8610/0x8610 [ 2811.330112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.330717] ? wait_for_completion_io+0x270/0x270 [ 2811.331306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.331875] ? vfs_write+0x354/0xb10 [ 2811.332331] ? fput_many+0x2f/0x1a0 [ 2811.332777] ? ksys_write+0x1a9/0x260 [ 2811.333241] ? __ia32_sys_read+0xb0/0xb0 [ 2811.333737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.334393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.335022] do_syscall_64+0x33/0x40 [ 2811.335477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.336099] RIP: 0033:0x7f61c5901b19 [ 2811.336552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.338802] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2811.339728] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2811.340594] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2811.341458] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.342337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.343213] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2811.345384] FAULT_INJECTION: forcing a failure. [ 2811.345384] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.346837] CPU: 1 PID: 12703 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2811.347674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.348675] Call Trace: [ 2811.349001] dump_stack+0x107/0x167 [ 2811.349445] should_fail.cold+0x5/0xa [ 2811.349911] ? create_object.isra.0+0x3a/0xa20 [ 2811.350484] should_failslab+0x5/0x20 [ 2811.350948] kmem_cache_alloc+0x5b/0x310 [ 2811.351447] create_object.isra.0+0x3a/0xa20 [ 2811.351980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.352603] kmem_cache_alloc_node+0x169/0x330 [ 2811.353167] __alloc_skb+0x6d/0x5b0 [ 2811.353616] netlink_sendmsg+0x998/0xdf0 [ 2811.354116] ? netlink_unicast+0x7f0/0x7f0 [ 2811.354653] ? netlink_unicast+0x7f0/0x7f0 [ 2811.355169] __sock_sendmsg+0x154/0x190 [ 2811.355655] ____sys_sendmsg+0x70d/0x870 [ 2811.356152] ? sock_write_iter+0x3d0/0x3d0 [ 2811.356667] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.357145] ? lock_downgrade+0x6d0/0x6d0 [ 2811.357654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2811.358306] ___sys_sendmsg+0xf3/0x170 [ 2811.358785] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.359342] ? __fget_files+0x2cf/0x520 [ 2811.359825] ? lock_downgrade+0x6d0/0x6d0 [ 2811.360330] ? find_held_lock+0x2c/0x110 [ 2811.360831] ? __fget_files+0x2f8/0x520 [ 2811.361322] ? __fget_light+0xea/0x290 [ 2811.361800] __sys_sendmsg+0xe5/0x1b0 [ 2811.362274] ? __sys_sendmsg_sock+0x40/0x40 [ 2811.362807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.363385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.364026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.364656] do_syscall_64+0x33/0x40 [ 2811.365109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.365733] RIP: 0033:0x7f5a2c83bb19 [ 2811.366186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.368435] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.369362] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2811.370232] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2811.371113] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.371982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2811.372851] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 11:26:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:27:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 11:27:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x6) 11:27:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) [ 2824.671636] FAULT_INJECTION: forcing a failure. [ 2824.671636] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.673061] CPU: 1 PID: 12720 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2824.673905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.678911] Call Trace: [ 2824.682878] dump_stack+0x107/0x167 [ 2824.683323] should_fail.cold+0x5/0xa [ 2824.683789] ? create_object.isra.0+0x3a/0xa20 [ 2824.684347] should_failslab+0x5/0x20 [ 2824.684811] kmem_cache_alloc+0x5b/0x310 [ 2824.685306] ? mark_held_locks+0x9e/0xe0 [ 2824.685801] create_object.isra.0+0x3a/0xa20 [ 2824.686332] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.687018] kmem_cache_alloc_bulk+0x168/0x320 [ 2824.687644] io_submit_sqes+0x6fe6/0x8610 [ 2824.688168] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.688774] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.689388] ? find_held_lock+0x2c/0x110 [ 2824.689909] ? io_submit_sqes+0x8610/0x8610 [ 2824.690489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.691150] ? wait_for_completion_io+0x270/0x270 [ 2824.691738] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.692302] ? vfs_write+0x354/0xb10 [ 2824.692755] ? fput_many+0x2f/0x1a0 [ 2824.693197] ? ksys_write+0x1a9/0x260 [ 2824.693662] ? __ia32_sys_read+0xb0/0xb0 [ 2824.694160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.698010] ? syscall_enter_from_user_mode+0x1d/0x50 11:27:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x400, 0x2, &(0x7f0000000140)="6ea62f4c3449a1f40037be10178ffddd33230351525f24", 0x3, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) creat(&(0x7f0000000540)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) fcntl$getown(r3, 0x9) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x2a4, 0x30, 0x4, 0x70bd2b, 0x25dfdbfb, {0x4}, [@nested={0x6a, 0x6d, 0x0, 0x1, [@typed={0x14, 0x87, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x86, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x84, 0x0, 0x0, @fd}, @generic="8bf7ad8911d7c7bae330069c3661ebee75535dee31906508ac5f252324137a6b9b0801bc1a6c3923096db145450393eb7e3212e733330fc3a180"]}, @generic="2b5d1dc269cc4e3d2245e1ed6bbd1f8f612b5d1a3d2ce192c5c9d49e24df3f2eb9297fcae04d47763a34d6fe800f76b6dd8c6f490cf7f51ce505974145e17a9ed292e25cdf0dd93d73bbe8795f6085643562d812c6a4c00d55255fce2c7941491d01b4758fdb59af068735e6e6f01ec166ca6ed52594bf9a", @generic="aa7e36a9e2004a90df932de7411c64513b26055d29bcfb7b44cffcfe3f0030a3eb61471d5958627c5f9b76fcca295e366f2f37b6f26ad3b196f0435b52dabfc7b21b01da314667e7b72c609642b92e8af79336b0b6be4e557962abedc15f417423006a19bfb35d6e0704fbeccd8e62deeabd2524f8823f895059df38f4148e5d2ee65cedcdd79fb369d8bec4f0db6638c1f317800b83eac68e36545e1b52bd0e9c550ff096fb7fde746c9a898755d8c8269e69fac6018ae869c8877fad7572f73a5673d5121ade700abd6bed94c74fbbde2b3dcfa53518d98f581b250587266c9453", @nested={0xc7, 0x92, 0x0, 0x1, [@typed={0x5, 0x40, 0x0, 0x0, @str='\x00'}, @generic="62e1130122026864ddde820d32f3f1ee24fd5eb0089608af3c2b3d8afe15cdef505979d71c3c8141188df6c5aa40d11122e4532c895706988519888b0435fbb36dfa627213e8b0a7ba5f4d42715a6979134a044424d7174a36d77bf335de24304f7afffb058f0aabdbf505614c23c1d53bb7d141e5d4f2f1cc5046fce0fedd22c4585b2873cd815a2c8c1174ffb0882ef95b3ecda7fba234047b6282714a0e8090342795", @typed={0x8, 0x65, 0x0, 0x0, @fd=r1}, @generic="05d1a335e67afbec3a19d596ce0347"]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x1}, 0x5) 11:27:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 5) 11:27:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 11:27:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0xfffffffffffffec6) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) syz_io_uring_setup(0x1e0f, &(0x7f0000000340)={0x0, 0x122a, 0x0, 0x3, 0x3c3, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x105900, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r4, 0x7, &(0x7f00000005c0)=[{&(0x7f00000004c0)="3c37383fda5e5502775c5bcf962a3d8e32a4ac00b8386e93c6fdcd83841ba66f1592342820d4e474e2d7a00320c0a33fcf8a8e5a2e4472e2c4c2a6ac09bc49e24df6f9885ea27620858cbb2f16a36365e0ae260ca37c1765efebf04d5b3d1613026531f1178d30c64007fda8eb4821ee5ceab168c49289d134474720e6caee79aa412ca5839568c028fbc583eaa10901d249114814fafddec1282dc334a0091041c081cd3c9c9ef76afd28c323aff94c4225e5318ae67246c37964092e960159c4", 0xc1}], 0x1, 0x8, 0x0, {0x2, r5}}, 0x4b) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) r6 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="ff0000002e2f66296c653100"]) execveat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=[&(0x7f00000001c0)='@.*){^\\-@&:[ID\x00', &(0x7f0000000240)='-\x00', &(0x7f0000000280)=',,\xb7+\x00'], &(0x7f00000003c0), 0x800) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2824.698638] do_syscall_64+0x33/0x40 [ 2824.699133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.699755] RIP: 0033:0x7f2aef7e0b19 [ 2824.700205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.702433] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2824.707392] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2824.708258] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2824.709123] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.710092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.713324] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 [ 2824.742778] FAULT_INJECTION: forcing a failure. [ 2824.742778] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.742875] FAULT_INJECTION: forcing a failure. [ 2824.742875] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.744356] CPU: 1 PID: 12730 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2824.746489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.747516] Call Trace: [ 2824.747844] dump_stack+0x107/0x167 [ 2824.748346] should_fail.cold+0x5/0xa [ 2824.748860] ? create_object.isra.0+0x3a/0xa20 [ 2824.749422] should_failslab+0x5/0x20 [ 2824.749889] kmem_cache_alloc+0x5b/0x310 [ 2824.750386] ? mark_held_locks+0x9e/0xe0 [ 2824.750904] create_object.isra.0+0x3a/0xa20 [ 2824.751445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.752067] kmem_cache_alloc_bulk+0x168/0x320 [ 2824.752630] io_submit_sqes+0x6fe6/0x8610 [ 2824.753156] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.753764] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.754355] ? find_held_lock+0x2c/0x110 [ 2824.754868] ? io_submit_sqes+0x8610/0x8610 [ 2824.755488] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.756081] ? wait_for_completion_io+0x270/0x270 [ 2824.756673] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.757245] ? vfs_write+0x354/0xb10 [ 2824.757701] ? fput_many+0x2f/0x1a0 [ 2824.758146] ? ksys_write+0x1a9/0x260 [ 2824.758613] ? __ia32_sys_read+0xb0/0xb0 [ 2824.759179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.759872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.760512] do_syscall_64+0x33/0x40 [ 2824.760967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.761594] RIP: 0033:0x7ff26fac0b19 [ 2824.762049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.764349] RSP: 002b:00007ff26d036188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2824.765331] RAX: ffffffffffffffda RBX: 00007ff26fbd3f60 RCX: 00007ff26fac0b19 [ 2824.766201] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2824.767081] RBP: 00007ff26d0361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.767950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.768819] R13: 00007ffe770e594f R14: 00007ff26d036300 R15: 0000000000022000 [ 2824.770791] CPU: 0 PID: 12731 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2824.771680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.772698] Call Trace: [ 2824.773032] dump_stack+0x107/0x167 [ 2824.773483] should_fail.cold+0x5/0xa [ 2824.773958] should_failslab+0x5/0x20 [ 2824.774449] __kmalloc_node_track_caller+0x74/0x3b0 [ 2824.779092] ? netlink_sendmsg+0x998/0xdf0 [ 2824.779615] __alloc_skb+0xb1/0x5b0 [ 2824.780059] netlink_sendmsg+0x998/0xdf0 [ 2824.780553] ? netlink_unicast+0x7f0/0x7f0 [ 2824.781071] ? netlink_unicast+0x7f0/0x7f0 [ 2824.781583] __sock_sendmsg+0x154/0x190 [ 2824.782066] ____sys_sendmsg+0x70d/0x870 [ 2824.782558] ? sock_write_iter+0x3d0/0x3d0 [ 2824.783104] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.783599] ? lock_downgrade+0x6d0/0x6d0 [ 2824.784122] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2824.784779] ___sys_sendmsg+0xf3/0x170 [ 2824.785267] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.785843] ? __fget_files+0x2cf/0x520 [ 2824.786340] ? lock_downgrade+0x6d0/0x6d0 [ 2824.786876] ? find_held_lock+0x2c/0x110 [ 2824.787382] ? __fget_files+0x2f8/0x520 [ 2824.787888] ? __fget_light+0xea/0x290 [ 2824.788386] __sys_sendmsg+0xe5/0x1b0 [ 2824.788868] ? __sys_sendmsg_sock+0x40/0x40 [ 2824.789412] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.790011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.790672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.791399] do_syscall_64+0x33/0x40 [ 2824.791874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.792518] RIP: 0033:0x7f5a2c83bb19 [ 2824.792988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.795274] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.796226] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2824.797121] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2824.798008] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.799014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.799912] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 [ 2824.815317] FAULT_INJECTION: forcing a failure. [ 2824.815317] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.816827] CPU: 0 PID: 12718 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2824.817701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.818754] Call Trace: [ 2824.819103] dump_stack+0x107/0x167 [ 2824.819566] should_fail.cold+0x5/0xa [ 2824.820047] ? create_object.isra.0+0x3a/0xa20 [ 2824.820634] should_failslab+0x5/0x20 [ 2824.821121] kmem_cache_alloc+0x5b/0x310 [ 2824.821641] ? mark_held_locks+0x9e/0xe0 [ 2824.822158] create_object.isra.0+0x3a/0xa20 [ 2824.822728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.823381] kmem_cache_alloc_bulk+0x168/0x320 [ 2824.823965] io_submit_sqes+0x6fe6/0x8610 [ 2824.824519] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.825148] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2824.825759] ? find_held_lock+0x2c/0x110 [ 2824.826277] ? io_submit_sqes+0x8610/0x8610 [ 2824.826853] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.827466] ? wait_for_completion_io+0x270/0x270 [ 2824.828081] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.828670] ? vfs_write+0x354/0xb10 [ 2824.829147] ? fput_many+0x2f/0x1a0 [ 2824.829613] ? ksys_write+0x1a9/0x260 [ 2824.830094] ? __ia32_sys_read+0xb0/0xb0 [ 2824.830616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.831300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.831957] do_syscall_64+0x33/0x40 [ 2824.832436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.833088] RIP: 0033:0x7f61c5901b19 [ 2824.833569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.835899] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2824.836866] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2824.837768] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2824.838670] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.839595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.840495] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 11:27:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x7) 11:27:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @private1, 0xb5}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001000000180000009ee97664e7814d54f3f19f3416046930fff49ecdc6ff04af346072c6d99a03dbb0f6e947e70d0d727ec07343071f180a9638138b268170e213e577d4eea4eba0b3d53fd448de505ce5d12b10cfdc457fc732ef7f183c8db1448d2b773745485613a8ea71b72de599b5595e42947693c9e431c2005ea61dba42063944f6", @ANYRES32=r1, @ANYBLOB="ff003e002e2f66296c653100"]) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffe00}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff0000002e2f66296c653100"]) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000240), 0x4) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:27:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 6) [ 2824.949972] FAULT_INJECTION: forcing a failure. [ 2824.949972] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.951544] CPU: 1 PID: 12741 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2824.952385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.953390] Call Trace: [ 2824.953717] dump_stack+0x107/0x167 [ 2824.954164] should_fail.cold+0x5/0xa [ 2824.954632] ? create_object.isra.0+0x3a/0xa20 [ 2824.955214] should_failslab+0x5/0x20 [ 2824.955680] kmem_cache_alloc+0x5b/0x310 [ 2824.956180] create_object.isra.0+0x3a/0xa20 [ 2824.956714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.957338] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2824.957954] ? netlink_sendmsg+0x998/0xdf0 [ 2824.958475] __alloc_skb+0xb1/0x5b0 [ 2824.958935] netlink_sendmsg+0x998/0xdf0 [ 2824.959439] ? netlink_unicast+0x7f0/0x7f0 [ 2824.959960] ? netlink_unicast+0x7f0/0x7f0 [ 2824.960477] __sock_sendmsg+0x154/0x190 [ 2824.960961] ____sys_sendmsg+0x70d/0x870 [ 2824.961460] ? sock_write_iter+0x3d0/0x3d0 [ 2824.961972] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.962453] ? lock_downgrade+0x6d0/0x6d0 [ 2824.962975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2824.963616] ___sys_sendmsg+0xf3/0x170 [ 2824.964092] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.964651] ? __fget_files+0x2cf/0x520 [ 2824.965135] ? lock_downgrade+0x6d0/0x6d0 [ 2824.965638] ? find_held_lock+0x2c/0x110 [ 2824.966136] ? __fget_files+0x2f8/0x520 [ 2824.966622] ? __fget_light+0xea/0x290 [ 2824.967108] __sys_sendmsg+0xe5/0x1b0 [ 2824.967573] ? __sys_sendmsg_sock+0x40/0x40 [ 2824.968099] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.968674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.969314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.969942] do_syscall_64+0x33/0x40 [ 2824.970402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.971044] RIP: 0033:0x7f5a2c83bb19 [ 2824.971497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.973737] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.974666] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2824.975551] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2824.976422] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.977294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.978270] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 11:27:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000840), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = fork() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x1, 0x1d00c, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x10002, 0xfffffffffffffff8, 0x9, 0x3, 0x7b, 0x2, 0x100, 0x0, 0xff, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0xb) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) ptrace(0x10, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:27:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0x8) 11:27:07 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 11:27:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="0183ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x4044050) r5 = creat(0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 11:27:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000680)=0x8080000, 0x4) r1 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000640)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dad, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)) io_uring_enter(r1, 0x333a, 0xd781, 0x2, &(0x7f00000004c0)={[0x7f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101342, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff0000002e2f66296c653100"]) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000240)="23b38018bb3d46c6efc22057a5f8672600cd02421122c46939fd667ac340a53743ec911e2b27447ffff9e0cd341375085fae0702721a4b04cbdce3f0c3c8f32226ddb7dcad3010c9a57b9f95452639a1dac423359972910b9aca3cfd920c0f75a68e8ab331e4f416b24f64b9756930a81d323143abae6c5952609b868a3a3986a442a901cb2d191d2a6f903a42a83e056c3fc8410b2ee7742379690ac92c3788ca5773095b3dd0549a324d87fe580a8a82fc12e65209f03c3df22cf0709e338dd2b12c9155f404f1865f08a183ddc760e1ca1ce295c50ce9128f2bdff3a853bd5874c059", 0xe4}, {&(0x7f0000000340)="b1cd7e110483808220f65b1dfdc280a336272ed4b5567053d22820d7d53b8f668c65c4862dc21cfb15a861c56edaaf700b3c6c346fed0f5fde59f4f71687a7c53f2d34d61ad0037b5eca3d09c3f835fd73aa5138dfc6071bb06c8ae583a0fc01b534baee8d26d091f00978ad9f8dfe133aba11a30763ff57092fab5e", 0x7c}, {&(0x7f00000001c0)="d955cd513f71aa0599672d51fb89c18b0391a2803e92d88ca4be953e40c95a0e793a", 0x22}, {&(0x7f00000003c0)="0f1bc143a3b46fc8ebf747dfc56c241ccd1608a64dc27b2138a5306e0ec47dbe20cbfa7e496c9244d8d78b8ede9e62", 0x2f}], 0x4}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf9) readv(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 11:27:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) (fail_nth: 7) [ 2825.104548] FAULT_INJECTION: forcing a failure. [ 2825.104548] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.106049] CPU: 0 PID: 12750 Comm: syz-executor.3 Not tainted 5.10.233 #1 [ 2825.106966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.108046] Call Trace: [ 2825.108398] dump_stack+0x107/0x167 [ 2825.108885] should_fail.cold+0x5/0xa [ 2825.109394] ? create_object.isra.0+0x3a/0xa20 [ 2825.109993] should_failslab+0x5/0x20 [ 2825.110486] kmem_cache_alloc+0x5b/0x310 [ 2825.111039] ? mark_held_locks+0x9e/0xe0 [ 2825.111592] create_object.isra.0+0x3a/0xa20 [ 2825.112180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2825.112844] kmem_cache_alloc_bulk+0x168/0x320 [ 2825.113449] io_submit_sqes+0x6fe6/0x8610 [ 2825.114017] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.114675] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.115337] ? find_held_lock+0x2c/0x110 [ 2825.115902] ? io_submit_sqes+0x8610/0x8610 [ 2825.116476] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2825.117114] ? wait_for_completion_io+0x270/0x270 [ 2825.117745] ? rcu_read_lock_any_held+0x75/0xa0 [ 2825.118353] ? vfs_write+0x354/0xb10 [ 2825.118859] ? fput_many+0x2f/0x1a0 [ 2825.119334] ? ksys_write+0x1a9/0x260 [ 2825.119830] ? __ia32_sys_read+0xb0/0xb0 [ 2825.120368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.121070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.121769] do_syscall_64+0x33/0x40 [ 2825.122265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.122953] RIP: 0033:0x7f2aef7e0b19 [ 2825.123458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.125830] RSP: 002b:00007f2aecd56188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2825.126852] RAX: ffffffffffffffda RBX: 00007f2aef8f3f60 RCX: 00007f2aef7e0b19 [ 2825.127777] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2825.128718] RBP: 00007f2aecd561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.129669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.130592] R13: 00007ffe256d7d7f R14: 00007f2aecd56300 R15: 0000000000022000 11:27:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0xa) [ 2825.152825] FAULT_INJECTION: forcing a failure. [ 2825.152825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2825.155402] CPU: 1 PID: 12754 Comm: syz-executor.6 Not tainted 5.10.233 #1 [ 2825.156303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.157374] Call Trace: [ 2825.157711] dump_stack+0x107/0x167 [ 2825.158189] should_fail.cold+0x5/0xa [ 2825.158692] _copy_from_iter_full+0x201/0xa60 [ 2825.159387] ? __virt_addr_valid+0x170/0x5d0 [ 2825.160067] ? __check_object_size+0x319/0x440 [ 2825.160786] netlink_sendmsg+0x879/0xdf0 [ 2825.161454] ? netlink_unicast+0x7f0/0x7f0 [ 2825.162141] ? netlink_unicast+0x7f0/0x7f0 [ 2825.162842] __sock_sendmsg+0x154/0x190 [ 2825.163446] ____sys_sendmsg+0x70d/0x870 [ 2825.164057] ? sock_write_iter+0x3d0/0x3d0 [ 2825.164700] ? do_recvmmsg+0x6d0/0x6d0 [ 2825.165307] ? lock_downgrade+0x6d0/0x6d0 [ 2825.165943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2825.166757] ___sys_sendmsg+0xf3/0x170 [ 2825.167355] ? sendmsg_copy_msghdr+0x160/0x160 [ 2825.168058] ? __fget_files+0x2cf/0x520 [ 2825.168719] ? lock_downgrade+0x6d0/0x6d0 [ 2825.169432] ? find_held_lock+0x2c/0x110 [ 2825.170079] ? __fget_files+0x2f8/0x520 [ 2825.170682] ? __fget_light+0xea/0x290 [ 2825.171273] __sys_sendmsg+0xe5/0x1b0 [ 2825.171851] ? __sys_sendmsg_sock+0x40/0x40 [ 2825.172510] ? rcu_read_lock_any_held+0x75/0xa0 [ 2825.173229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.174026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.174824] do_syscall_64+0x33/0x40 [ 2825.175400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.176185] RIP: 0033:0x7f5a2c83bb19 [ 2825.176775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.179576] RSP: 002b:00007f5a29db1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2825.180563] RAX: ffffffffffffffda RBX: 00007f5a2c94ef60 RCX: 00007f5a2c83bb19 [ 2825.181488] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2825.182413] RBP: 00007f5a29db11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.183376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2825.184290] R13: 00007ffc13af3eff R14: 00007f5a29db1300 R15: 0000000000022000 [ 2825.198915] FAULT_INJECTION: forcing a failure. [ 2825.198915] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.200592] CPU: 1 PID: 12753 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2825.201506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.202595] Call Trace: [ 2825.202975] dump_stack+0x107/0x167 [ 2825.203448] should_fail.cold+0x5/0xa [ 2825.203954] ? create_object.isra.0+0x3a/0xa20 [ 2825.204552] should_failslab+0x5/0x20 [ 2825.205058] kmem_cache_alloc+0x5b/0x310 [ 2825.205593] ? mark_held_locks+0x9e/0xe0 [ 2825.206129] create_object.isra.0+0x3a/0xa20 [ 2825.206694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2825.207387] kmem_cache_alloc_bulk+0x168/0x320 [ 2825.207990] io_submit_sqes+0x6fe6/0x8610 [ 2825.208552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.209208] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.209844] ? find_held_lock+0x2c/0x110 [ 2825.210384] ? io_submit_sqes+0x8610/0x8610 [ 2825.210992] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2825.211807] ? wait_for_completion_io+0x270/0x270 [ 2825.212615] ? rcu_read_lock_any_held+0x75/0xa0 [ 2825.213317] ? vfs_write+0x354/0xb10 [ 2825.213867] ? fput_many+0x2f/0x1a0 [ 2825.214393] ? ksys_write+0x1a9/0x260 [ 2825.214975] ? __ia32_sys_read+0xb0/0xb0 [ 2825.215661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.216519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.217354] do_syscall_64+0x33/0x40 [ 2825.217951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.218738] RIP: 0033:0x7ff26fac0b19 [ 2825.219239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.221616] RSP: 002b:00007ff26d036188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2825.222615] RAX: ffffffffffffffda RBX: 00007ff26fbd3f60 RCX: 00007ff26fac0b19 [ 2825.223566] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2825.225125] RBP: 00007ff26d0361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.226542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2825.228195] R13: 00007ffe770e594f R14: 00007ff26d036300 R15: 0000000000022000 11:27:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4fd, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x14}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 2825.299433] FAULT_INJECTION: forcing a failure. [ 2825.299433] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.300932] CPU: 1 PID: 12761 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2825.301807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.302876] Call Trace: [ 2825.303224] dump_stack+0x107/0x167 [ 2825.303696] should_fail.cold+0x5/0xa [ 2825.304196] ? create_object.isra.0+0x3a/0xa20 [ 2825.304794] should_failslab+0x5/0x20 [ 2825.305300] kmem_cache_alloc+0x5b/0x310 [ 2825.305847] ? mark_held_locks+0x9e/0xe0 [ 2825.306377] create_object.isra.0+0x3a/0xa20 [ 2825.307336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2825.309019] kmem_cache_alloc_bulk+0x168/0x320 [ 2825.310528] io_submit_sqes+0x6fe6/0x8610 [ 2825.311956] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.313647] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2825.315319] ? find_held_lock+0x2c/0x110 [ 2825.316778] ? io_submit_sqes+0x8610/0x8610 [ 2825.318306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2825.320570] ? wait_for_completion_io+0x270/0x270 [ 2825.322504] ? rcu_read_lock_any_held+0x75/0xa0 [ 2825.324371] ? vfs_write+0x354/0xb10 [ 2825.325851] ? fput_many+0x2f/0x1a0 [ 2825.327281] ? ksys_write+0x1a9/0x260 [ 2825.328824] ? __ia32_sys_read+0xb0/0xb0 [ 2825.330400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.332449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.334454] do_syscall_64+0x33/0x40 [ 2825.335967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.337636] RIP: 0033:0x7f61c5901b19 [ 2825.338846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.341419] RSP: 002b:00007f61c2e77188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2825.342524] RAX: ffffffffffffffda RBX: 00007f61c5a14f60 RCX: 00007f61c5901b19 [ 2825.344772] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2825.347206] RBP: 00007f61c2e771d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.349981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.351482] R13: 00007ffd99215a2f R14: 00007f61c2e77300 R15: 0000000000022000 [ 2838.860807] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2838.862323] CPU: 1 PID: 255 Comm: syz-fuzzer Not tainted 5.10.233 #1 [ 2838.863097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2838.864114] Call Trace: [ 2838.864442] dump_stack+0x107/0x167 [ 2838.864907] dump_header+0x106/0x655 [ 2838.865383] oom_kill_process.cold+0x10/0x15 [ 2838.865942] out_of_memory+0x1149/0x1440 [ 2838.866463] ? oom_killer_disable+0x280/0x280 [ 2838.867034] ? mutex_trylock+0x237/0x2b0 [ 2838.867552] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 2838.868269] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 2838.868985] ? lock_acquire+0x167/0x470 [ 2838.869468] ? warn_alloc+0x190/0x190 [ 2838.869944] __alloc_pages_nodemask+0x51d/0x600 [ 2838.870508] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2838.871260] ? find_get_entry+0x2c8/0x740 [ 2838.871767] alloc_pages_current+0x187/0x280 [ 2838.872297] __page_cache_alloc+0x2d2/0x360 [ 2838.872819] pagecache_get_page+0x2c7/0xc80 [ 2838.873342] filemap_fault+0x177d/0x2210 [ 2838.873839] ? read_cache_page_gfp+0x30/0x30 [ 2838.874370] ? replace_page_cache_page+0x1200/0x1200 [ 2838.874978] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2838.875625] ext4_filemap_fault+0x87/0xc0 [ 2838.876123] __do_fault+0x113/0x410 [ 2838.876564] handle_mm_fault+0x1e53/0x3500 [ 2838.877076] ? find_held_lock+0x2c/0x110 [ 2838.877565] ? __pmd_alloc+0x5e0/0x5e0 [ 2838.878040] ? vmacache_find+0x55/0x2a0 [ 2838.878526] do_user_addr_fault+0x56e/0xc60 [ 2838.879050] exc_page_fault+0xa2/0x1a0 [ 2838.879534] ? asm_exc_page_fault+0x8/0x30 [ 2838.880042] asm_exc_page_fault+0x1e/0x30 [ 2838.880536] RIP: 0033:0x455430 [ 2838.880927] Code: Unable to access opcode bytes at RIP 0x455406. [ 2838.881651] RSP: 002b:000000c00003ff30 EFLAGS: 00010206 [ 2838.882293] RAX: 00000294e0e22c90 RBX: 000000c000030000 RCX: 0000000000000018 [ 2838.883149] RDX: 000000001ae6d090 RSI: 000000c00003ff10 RDI: 0000000000000001 [ 2838.884033] RBP: 000000c00003ffa0 R08: 0000000000000b16 R09: 00007ffe977e7080 [ 2838.884889] R10: 00007ffe977e7090 R11: 000000000044131a R12: 0000000000438880 [ 2838.885750] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 2838.886742] Mem-Info: [ 2838.887082] active_anon:9753 inactive_anon:57551 isolated_anon:0 [ 2838.887082] active_file:0 inactive_file:8 isolated_file:0 [ 2838.887082] unevictable:12 dirty:0 writeback:0 [ 2838.887082] slab_reclaimable:8809 slab_unreclaimable:259201 [ 2838.887082] mapped:69630 shmem:120 pagetables:1653 bounce:0 [ 2838.887082] free:2889 free_pcp:63 free_cma:0 [ 2838.890844] Node 0 active_anon:39012kB inactive_anon:230204kB active_file:0kB inactive_file:32kB unevictable:48kB isolated(anon):0kB isolated(file):0kB mapped:278520kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:4416kB all_unreclaimable? yes [ 2838.893629] Node 0 DMA free:6504kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.896764] lowmem_reserve[]: 0 1616 1616 1616 [ 2838.897360] Node 0 DMA32 free:5052kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:39012kB inactive_anon:230204kB active_file:48kB inactive_file:88kB unevictable:48kB writepending:0kB present:2080640kB managed:1660456kB mlocked:48kB pagetables:6612kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2838.900808] lowmem_reserve[]: 0 0 0 0 [ 2838.901317] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB [ 2838.903052] Node 0 DMA32: 639*4kB (UME) 129*8kB (UM) 30*16kB (UM) 21*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4996kB [ 2838.904815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2838.905843] 128 total pagecache pages [ 2838.906319] 0 pages in swap cache [ 2838.906734] Swap cache stats: add 0, delete 0, find 0/0 [ 2838.907408] Free swap = 0kB [ 2838.907771] Total swap = 0kB [ 2838.908155] 524158 pages RAM [ 2838.908517] 0 pages HighMem/MovableOnly [ 2838.909009] 105067 pages reserved [ 2838.909508] Unreclaimable slab info: [ 2838.910197] Name Used Total [ 2838.910904] pid_3 7KB 7KB [ 2838.911598] pid_2 45KB 78KB [ 2838.912267] IEEE-802.15.4-MAC 63KB 63KB [ 2838.912907] IEEE-802.15.4-RAW 63KB 63KB [ 2838.913567] p9_req_t 8KB 8KB [ 2838.914230] fib6_nodes 28KB 28KB [ 2838.914868] ip6_dst_cache 45KB 45KB [ 2838.915546] PINGv6 31KB 31KB [ 2838.916204] RAWv6 252KB 252KB [ 2838.916849] UDPLITEv6 62KB 62KB [ 2838.917506] UDPv6 62KB 62KB [ 2838.918165] tw_sock_TCPv6 15KB 15KB [ 2838.918840] TCPv6 62KB 62KB [ 2838.919537] nf_conntrack 15KB 15KB [ 2838.920198] scsi_sense_cache 8KB 8KB [ 2838.920835] sd_ext_cdb 3KB 3KB [ 2838.921491] virtio_scsi_cmd 16KB 16KB [ 2838.922155] sgpool-128 59KB 59KB [ 2838.922792] sgpool-64 63KB 63KB [ 2838.924309] sgpool-32 47KB 47KB [ 2838.924950] sgpool-16 67KB 67KB [ 2838.925767] sgpool-8 60KB 60KB [ 2838.926450] io_kiocb 2018KB 2208KB [ 2838.927108] mqueue_inode_cache 62KB 62KB [ 2838.927772] nfs_commit_data 15KB 15KB [ 2838.928431] nfs_write_data 47KB 47KB [ 2838.929088] jbd2_inode 11KB 11KB [ 2838.929726] ext4_system_zone 3KB 3KB [ 2838.930386] ext4_io_end_vec 7KB 7KB [ 2838.931040] ext4_bio_post_read_ctx 15KB 15KB [ 2838.931744] kioctx 15KB 15KB [ 2838.932413] aio_kiocb 7KB 7KB [ 2838.933074] bio-2 4KB 4KB [ 2838.933711] fasync_cache 7KB 7KB [ 2838.934371] pid_namespace 7KB 7KB [ 2838.935028] posix_timers_cache 15KB 15KB [ 2838.935701] rpc_buffers 31KB 31KB [ 2838.936363] rpc_tasks 3KB 3KB [ 2838.937018] UNIX 358KB 384KB [ 2838.937657] UDP-Lite 31KB 31KB [ 2838.938313] tcp_bind_bucket 8KB 8KB [ 2838.938952] xfrm_state 16KB 16KB [ 2838.939626] ip_fib_trie 8KB 8KB [ 2838.940283] ip_fib_alias 15KB 15KB [ 2838.940919] ip_dst_cache 64KB 64KB [ 2838.941578] PING 62KB 62KB [ 2838.942237] RAW 93KB 93KB [ 2838.942874] UDP 378KB 378KB [ 2838.943556] request_sock_TCP 15KB 15KB [ 2838.944215] TCP 60KB 60KB [ 2838.944852] hugetlbfs_inode_cache 30KB 30KB [ 2838.945553] bio-1 11KB 11KB [ 2838.946211] eventpoll_pwq 23KB 23KB [ 2838.946848] eventpoll_epi 35KB 35KB [ 2838.947521] inotify_inode_mark 27KB 27KB [ 2838.948188] request_queue 60KB 60KB [ 2838.948825] blkdev_ioc 37KB 37KB [ 2838.949482] bio-0 96KB 96KB [ 2838.950137] biovec-max 1139KB 1279KB [ 2838.950775] biovec-64 141KB 173KB [ 2838.951467] biovec-16 26KB 26KB [ 2838.952127] user_namespace 15KB 15KB [ 2838.952765] uid_cache 8KB 8KB [ 2838.953424] dmaengine-unmap-2 4KB 4KB [ 2838.954080] audit_buffer 7KB 7KB [ 2838.954719] skbuff_fclone_cache 61KB 97KB [ 2838.955512] skbuff_head_cache 1301KB 1751KB [ 2838.956175] file_lock_cache 66KB 82KB [ 2838.956814] file_lock_ctx 7KB 7KB [ 2838.957473] fsnotify_mark_connector 16KB 16KB [ 2838.958193] net_namespace 115KB 115KB [ 2838.958831] task_delay_info 104KB 115KB [ 2838.959507] taskstats 108KB 108KB [ 2838.960169] proc_dir_entry 375KB 397KB [ 2838.960807] pde_opener 39KB 39KB [ 2838.961471] seq_file 52KB 52KB [ 2838.962130] sigqueue 126KB 126KB [ 2838.962771] shmem_inode_cache 1192KB 1257KB [ 2838.963451] kernfs_iattrs_cache 231KB 231KB [ 2838.964131] kernfs_node_cache 5546KB 5546KB [ 2838.964770] mnt_cache 244KB 244KB [ 2838.965443] filp 931KB 1215KB [ 2838.966112] names_cache 4139KB 5117KB [ 2838.966751] hashtab_node 274KB 274KB [ 2838.967444] ebitmap_node 1149KB 1149KB [ 2838.968103] avtab_node 4976KB 4976KB [ 2838.968742] avc_node 35KB 35KB [ 2838.969415] lsm_inode_cache 3193KB 3296KB [ 2838.970076] lsm_file_cache 63KB 172KB [ 2838.970712] key_jar 31KB 31KB [ 2838.971391] uts_namespace 15KB 15KB [ 2838.972045] nsproxy 7KB 7KB [ 2838.972708] vm_area_struct 1044KB 1288KB [ 2838.973365] fs_cache 43KB 64KB [ 2838.974021] files_cache 214KB 239KB [ 2838.974658] signal_cache 370KB 432KB [ 2838.975330] sighand_cache 330KB 360KB [ 2838.975974] task_struct 1378KB 1811KB [ 2838.976636] cred_jar 63KB 188KB [ 2838.977297] anon_vma_chain 224KB 287KB [ 2838.977935] anon_vma 259KB 262KB [ 2838.978589] pid 108KB 108KB [ 2838.979269] Acpi-Operand 268KB 301KB [ 2838.979910] Acpi-ParseExt 27KB 27KB [ 2838.980576] Acpi-Parse 47KB 63KB [ 2838.981240] Acpi-State 51KB 66KB [ 2838.981878] Acpi-Namespace 24KB 24KB [ 2838.982537] numa_policy 3KB 3KB [ 2838.983248] trace_event_file 176KB 176KB [ 2838.983895] ftrace_event_field 280KB 280KB [ 2838.984565] pool_workqueue 40KB 40KB [ 2838.985223] task_group 16KB 16KB [ 2838.985863] mm_struct 343KB 378KB [ 2838.986549] vmap_area 374KB 374KB [ 2838.987380] page->ptl 256KB 311KB [ 2838.988661] kmemleak_scan_area 189KB 227KB [ 2838.989951] kmemleak_object 796774KB 796774KB [ 2838.991269] kmalloc-8k 4896KB 5056KB [ 2838.992617] kmalloc-4k 6096KB 7392KB [ 2838.993949] kmalloc-2k 4540KB 5024KB [ 2838.995281] kmalloc-1k 2604KB 3744KB [ 2838.995925] kmalloc-512 29015KB 29136KB [ 2838.996591] kmalloc-256 1284KB 1304KB [ 2838.997252] kmalloc-192 548KB 548KB [ 2838.997908] kmalloc-128 519KB 648KB [ 2838.998592] kmalloc-96 650KB 932KB [ 2838.999399] kmalloc-64 1163KB 1532KB [ 2839.000672] kmalloc-32 95536KB 95536KB [ 2839.001948] kmalloc-16 326KB 356KB [ 2839.003277] kmalloc-8 288KB 322KB [ 2839.004840] kmem_cache_node 47KB 47KB [ 2839.006405] kmem_cache 75KB 75KB [ 2839.007882] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=255,uid=0 [ 2839.013115] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1242432kB, anon-rss:233136kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:924kB oom_score_adj:0 VM DIAGNOSIS: 11:27:22 Registers: info registers vcpu 0 RAX=000000000000009d RBX=0000000000000000 RCX=ffffffff82b861fe RDX=ffffc90000660000 RSI=ffff88800beeceb0 RDI=ffff88800beed080 RBP=ffff88800beed468 RSP=ffff88800892fba8 R8 =0000000000000000 R9 =ffff88800beed46f R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff88800beece30 R15=ffff88800beeceb0 RIP=ffffffff82b86240 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4bc65a2960 CR3=0000000018158000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff00ff00000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000000000000001000055cdff1eb7a0 XMM05=00000000000000000000000000000000 XMM06=000055cdff1db08000000004ffffffff XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff816c8b2b RBX=ffffffff81301d30 RCX=ffffffff859ba201 RDX=1ffff110091faeca RSI=ffffffff816c8b2b RDI=ffffffff816c8b2b RBP=ffff888048fd7690 RSP=ffff888048fd7608 R8 =0000000000000007 R9 =ffff888048fd7730 R10=0000000000032042 R11=1ffff110091faeae R12=ffff888048fd76c0 R13=0000000000000000 R14=ffff88804a3dcec0 R15=0000000000000020 RIP=ffffffff810969eb RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f93deb32700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f514c5896a0 CR3=0000000018158000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000011ffffffff000055cdff1f3660 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=4c414954494e495f4345535500323234 XMM06=59545645440068746f6f7465756c623d XMM07=63682f326963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000